Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
File: aKDPmms080wyohTyM89mbhBEwAI.mft (raw, json)
Hash identifier: K3gbc3dDDavBq0RC7HPWPzgTxvYT3ICZHngLiC8H9ME=
Subject key identifier: 0C:14:A9:B1:57:FC:93:E5:61:6B:7E:23:3A:B1:86:F1:91:D6:6B:9C
Authority key identifier: 68:A0:CF:9A:6B:34:F3:4C:32:A2:14:F2:33:CF:66:6E:10:44:C0:02
Certificate issuer: /CN=68A0CF9A6B34F34C32A214F233CF666E1044C002
Certificate serial: 154C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aKDPmms080wyohTyM89mbhBEwAI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
Manifest number: 154C
Signing time: Tue 03 Jun 2025 18:10:17 +0000
Manifest this update: Tue 03 Jun 2025 18:10:17 +0000
Manifest next update: Wed 04 Jun 2025 00:10:17 +0000
Files and hashes: 1: aKDPmms080wyohTyM89mbhBEwAI.crl (hash: SaS9VK07CdI5H+fTw3rCZq4L/gdIOolYclSJS86GbOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5452 (0x154c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A0CF9A6B34F34C32A214F233CF666E1044C002
Validity
Not Before: Jun 3 18:10:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0C14A9B157FC93E5616B7E233AB186F191D66B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:03:98:94:a5:bd:2b:9e:32:47:e9:84:41:
2d:25:14:18:42:3f:b9:3e:c8:8a:d5:03:3e:12:26:
ef:78:d6:f5:dc:ee:12:42:a0:bd:3b:67:3b:ff:9c:
de:9b:59:8e:dc:c8:d8:97:c5:73:93:39:3b:5b:8a:
a1:fe:13:47:76:82:b8:01:d8:59:39:30:bd:a8:74:
9f:a1:08:18:1a:fc:95:2d:ce:3a:5c:b1:3f:14:34:
e1:03:00:55:e1:26:a4:e3:d1:23:c9:63:21:2f:62:
cf:c1:e7:51:56:18:76:a8:2a:b4:86:68:d7:0b:99:
64:71:63:3f:33:42:56:16:ad:70:4c:9a:c5:18:8c:
af:9e:14:28:fb:d0:8d:5e:c9:42:30:7c:2f:d4:44:
31:b0:e8:65:2e:d0:44:ff:7c:7d:9b:16:93:16:16:
29:20:59:4b:f7:60:66:da:95:63:4b:97:1e:63:b8:
5c:3f:f2:8e:2e:26:73:6d:b1:2f:c5:12:d3:7c:c4:
e4:30:0f:6c:61:dd:71:bd:9f:e1:9e:c2:d9:08:f6:
d1:a2:67:dc:a7:89:b6:7b:f1:2e:45:87:d9:74:1d:
8b:96:0b:57:91:f7:46:01:e7:7a:ce:48:7a:50:5d:
2e:72:f1:7e:e3:ca:e7:ec:cb:92:6a:1d:56:0d:a3:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:A9:B1:57:FC:93:E5:61:6B:7E:23:3A:B1:86:F1:91:D6:6B:9C
X509v3 Authority Key Identifier:
keyid:68:A0:CF:9A:6B:34:F3:4C:32:A2:14:F2:33:CF:66:6E:10:44:C0:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aKDPmms080wyohTyM89mbhBEwAI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:59:c5:e8:68:52:6d:5f:40:f7:9a:53:2f:3f:d5:9c:46:ff:
a4:b5:e8:b7:bf:17:13:4c:32:c5:9b:50:dd:9c:0b:25:5c:de:
c7:00:e9:35:3a:44:0d:fd:20:14:3d:25:03:0a:1b:b5:f0:ca:
62:9d:a3:34:79:21:8b:7f:a3:c1:54:78:1b:62:ff:44:22:fe:
fb:11:8b:59:9d:6a:b5:0b:8b:30:c3:39:52:0a:3e:29:f6:32:
d1:a9:75:44:9e:24:e9:ec:9a:d1:89:58:ec:4b:c1:be:32:32:
e2:6e:08:45:85:77:a9:6e:e9:27:b0:08:d5:c6:04:fc:a5:16:
61:da:26:0f:ab:8d:37:d0:3d:92:c7:3a:b1:3b:3f:e9:36:19:
08:e8:c7:3e:34:85:72:78:ee:dd:ca:81:49:56:c8:64:7c:40:
e7:1a:98:87:52:41:37:71:c9:f3:a4:14:a3:95:f3:fd:6b:1a:
38:93:28:5f:ef:15:8e:ae:89:7a:2a:91:96:54:ad:87:09:5a:
19:c1:78:65:1f:54:88:a1:3f:12:af:1c:59:a0:16:94:92:f2:
c9:2c:1b:61:a3:70:2c:ea:9b:07:d4:82:af:b4:6a:a8:45:ea:
bd:f6:0f:0f:f3:5d:dd:ba:6f:f1:31:47:14:f8:c8:e9:b3:f6:
61:d4:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:19 2025 by rpki-client