Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
File: g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft (raw, json)
Hash identifier: Dc7XcOg+H0aETTk3afcog2cow69xJpv2nVguv+c++9o=
Subject key identifier: 11:F2:56:5B:DB:DA:30:CC:F5:87:00:BB:C9:C0:74:E2:7D:E7:ED:EA
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 1D50
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
Manifest number: 1D38
Signing time: Fri 04 Apr 2025 19:10:34 +0000
Manifest this update: Fri 04 Apr 2025 19:10:34 +0000
Manifest next update: Sat 05 Apr 2025 01:10:34 +0000
Files and hashes: 1: 0F3HvM3mTETH5C_3xndjg6tH0ss.roa (hash: acTAUgny5ISGHASfQA3K47UuQDIVXqTjiNro/yBUqHU=)
2: ICSITvbxtzpmmwvqipIQvWfa5zU.roa (hash: wy2LQSXW3nujhBpvbpTwf259qzYz22ZFmhLwVZFrrQY=)
3: PBVsMcA0-YxNjMAy_RJZs8F-Pn8.roa (hash: lTBQolTGMMhlcWji7mUZ/iICAULUNnlhhldnSHFcS3k=)
4: g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl (hash: 0irAv0F04SobCtcl0p8P+GIMr6Tx3nyMQq6KalvVqUA=)
5: tAnhg4BJ1r-Z0aPsvgfSfv05_uM.roa (hash: TKSbqNRQLaSRmFQzXCOJrUcJtIWlA3O/TfKP/kECfpw=)
6: wWhaaAlj9JcGe_kybyrhqCBJARY.roa (hash: 5Ql52JvZ+WWSkm9H+KXljVwbKX+AUegjoJOEWl6tCng=)
7: xaUhIc1VDGdMJcJEnBPPcaSjOzc.roa (hash: Hh1tScpvpn2ONVOehEGAfQaToVxJp0+zYElhh/XFkAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7504 (0x1d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Apr 4 19:10:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=11F2565BDBDA30CCF58700BBC9C074E27DE7EDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:5f:b6:f4:ec:e0:89:6a:34:69:97:fe:ac:
c5:92:08:5d:b1:07:ca:64:d6:a8:71:80:26:43:ec:
b7:60:46:64:98:97:55:f8:12:16:45:1c:f9:22:0f:
49:e3:e2:b9:eb:ef:26:8f:51:02:8d:f4:6d:1c:a8:
fe:f3:eb:da:8a:c5:41:85:df:0e:2f:f1:05:0b:b5:
27:9f:38:aa:0b:b9:0c:52:d1:af:67:8a:9e:7b:51:
94:cf:fe:2e:38:9f:0e:37:5a:23:67:0c:46:24:51:
11:8c:42:df:94:7e:91:78:cd:37:53:3f:5a:8d:3a:
2e:9e:35:35:e1:5e:2e:33:61:29:6a:12:d4:ab:2a:
3a:66:2d:83:d1:5f:c8:c7:17:61:e8:f7:16:0f:d2:
9c:a4:ab:f0:85:3c:bb:2e:48:6f:07:1f:c9:28:0a:
66:70:11:e8:01:17:8c:bb:39:6c:c2:ad:4b:90:27:
33:55:39:3c:44:8c:59:36:96:2e:6c:1c:19:55:b4:
56:2d:17:9d:d9:83:eb:89:6c:23:99:ee:2e:07:7d:
38:bd:72:86:13:db:00:66:a9:e1:19:d4:74:11:a0:
6f:24:dc:da:96:f2:3f:6c:0b:8e:5c:fd:2a:97:06:
31:13:50:7c:27:af:35:c6:93:9e:b9:74:ba:3a:2c:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:56:5B:DB:DA:30:CC:F5:87:00:BB:C9:C0:74:E2:7D:E7:ED:EA
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a4:45:8c:96:1d:c2:60:86:f9:1a:20:e5:ac:60:4a:84:33:
d6:6d:6b:82:2b:8a:43:c2:0e:9a:41:b1:90:8c:a5:0d:58:d5:
ca:88:8b:d6:25:1b:08:94:ba:dc:7e:9a:94:f9:b8:d7:01:5d:
f2:31:07:b3:cf:e4:a0:d9:98:34:23:27:f5:0f:9d:93:d8:dd:
59:31:6a:d0:4b:83:5b:62:7e:0e:80:29:44:a1:cc:8a:0a:2e:
ef:e6:78:ba:95:2d:d2:99:4b:48:e2:a4:61:71:87:6f:71:a7:
9c:dd:09:4d:d2:ee:10:2e:33:c4:0d:85:1d:f3:07:7f:8a:d1:
97:e0:02:51:fe:9a:b4:04:0f:88:e9:97:7f:87:5c:7c:5a:61:
fb:ce:34:36:f4:7e:90:3e:81:e9:37:fd:d1:89:a6:f3:52:91:
11:4a:45:15:14:0c:8d:a2:11:7d:18:12:ce:59:f3:0c:34:e2:
dd:16:24:10:3b:c3:bf:42:c0:98:28:72:5a:e5:53:7c:84:3c:
cf:17:31:82:2f:9f:c0:cd:55:21:65:bf:98:3e:e3:48:81:c7:
1a:eb:9e:37:9e:79:63:0b:c3:76:d7:69:3f:4d:ce:94:33:46:
aa:92:41:38:f3:b5:ce:61:8e:4e:7f:2d:d6:a1:0d:bc:2c:62:
47:d3:7a:bf
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF
NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA0MDQx
OTEwMzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDExRjI1NjVCREJEQTMw
Q0NGNTg3MDBCQkM5QzA3NEUyN0RFN0VERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYZl+29OzgiWo0aZf+rMWSCF2xB8pk1qhxgCZD7LdgRmSYl1X4
EhZFHPkiD0nj4rnr7yaPUQKN9G0cqP7z69qKxUGF3w4v8QULtSefOKoLuQxS0a9n
ip57UZTP/i44nw43WiNnDEYkURGMQt+UfpF4zTdTP1qNOi6eNTXhXi4zYSlqEtSr
KjpmLYPRX8jHF2Ho9xYP0pykq/CFPLsuSG8HH8koCmZwEegBF4y7OWzCrUuQJzNV
OTxEjFk2li5sHBlVtFYtF53Zg+uJbCOZ7i4HfTi9coYT2wBmqeEZ1HQRoG8k3NqW
8j9sC45c/SqXBjETUHwnrzXGk565dLo6LHIvAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUEfJWW9vaMMz1hwC7ycB04n3n7eowHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow
7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx
L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL2ctZF9ON081T0ZDRFc2
b3c3b19CTFZYNGNGUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAcpEWMlh3CYIb5GiDlrGBKhDPWbWuCK4pDwg6aQbGQjKUNWNXKiIvWJRsIlLrc
fpqU+bjXAV3yMQezz+Sg2Zg0Iyf1D52T2N1ZMWrQS4NbYn4OgClEocyKCi7v5ni6
lS3SmUtI4qRhcYdvcaec3QlN0u4QLjPEDYUd8wd/itGX4AJR/pq0BA+I6Zd/h1x8
WmH7zjQ29H6QPoHpN/3RiabzUpERSkUVFAyNohF9GBLOWfMMNOLdFiQQO8O/QsCY
KHJa5VN8hDzPFzGCL5/AzVUhZb+YPuNIgcca6543nnljC8N212k/Tc6UM0aqkkE4
87XOYY5Ofy3WoQ28LGJH03q/
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:19 2025 by rpki-client