Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft
File: LoPrDhy3tKdhegSteoJinZi5W5Q.mft (raw, json)
Hash identifier: hsGAvILbOG2x8gpKZ47wkgekT62NwZTdrG9L2+VWsT8=
Subject key identifier: F9:23:71:57:61:C6:43:5B:8D:73:F8:9D:83:9A:04:96:16:48:52:38
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 2230
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft
Manifest number: 21A6
Signing time: Thu 23 Oct 2025 12:35:02 +0000
Manifest this update: Thu 23 Oct 2025 12:35:02 +0000
Manifest next update: Thu 23 Oct 2025 18:35:02 +0000
Files and hashes: 1: 3muw5lSu71smczgwwlBT_wy8dZM.roa (hash: mH4gMz1Agc6r4S1U8u6qEU98lH/YjJKYH/vqwjzfpfE=)
2: AVIlg0BuWA7j9aC22tZyWcrC14k.roa (hash: jBPBwUpu7xUZmccashR9ROKx3tRZzk5Kw1KxZHzLcis=)
3: G2_F2khzhzZtvsmr4SdgcJ0z46I.roa (hash: mz/tagPOKEyGLD1MNuZ/pwN1F+qoR6N6gYInKPVnAnU=)
4: LoPrDhy3tKdhegSteoJinZi5W5Q.crl (hash: W/5oQAZxwmYOltnirVlIglIefg7/AWawbq7TaJztlZc=)
5: oIAeC2nny0IonRnlVcVz6xejUHU.roa (hash: iww/Jj3J6HRPMUS8eA0+59YmWTqG/oQVfm+yx40d6Ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8752 (0x2230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Oct 23 12:35:02 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=F923715761C6435B8D73F89D839A049616485238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:45:5e:15:75:d4:dd:4e:7f:45:f2:68:4e:
cc:61:a8:67:26:13:3f:ac:9d:2b:9c:7a:f6:9f:80:
85:d3:8f:7f:67:c9:af:6b:7a:3a:dc:26:33:e3:9f:
17:77:8d:f1:24:38:ae:98:b7:1a:80:19:bd:68:9e:
27:d9:4a:6e:d0:0b:4f:43:3b:65:70:71:20:7b:b2:
9b:4b:30:b8:0e:98:05:a3:52:bc:14:c2:b7:96:85:
7b:34:18:a3:11:2d:29:5b:76:7f:1d:f8:89:bd:6e:
87:2c:a1:ec:4f:cc:4a:7e:12:7d:50:0e:e8:5a:48:
bb:23:98:8b:6f:8b:49:ca:ff:3d:06:45:f9:64:87:
a2:ca:2b:db:42:9b:26:1d:c3:62:36:a0:2a:89:15:
85:bb:c8:dc:31:33:58:21:33:2d:84:13:8b:a5:b6:
07:48:f7:f1:ed:fa:b9:23:6a:71:59:78:ca:b9:26:
88:a3:9e:87:c1:15:f3:9c:ba:4f:b3:75:b0:a3:6b:
e7:dc:b3:b1:4b:55:d2:f9:9b:c4:e3:9a:da:50:60:
ca:3b:13:14:44:93:a5:c2:2e:4e:ba:d2:58:62:c3:
3a:f1:63:be:bc:a7:d2:e8:1a:db:1e:6d:c6:72:dd:
1e:ee:9a:6d:d2:27:7d:d8:65:7b:6c:8e:7e:d2:91:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:71:57:61:C6:43:5B:8D:73:F8:9D:83:9A:04:96:16:48:52:38
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f5:18:97:fb:9a:7f:57:04:a5:f2:02:3b:41:39:51:c5:2d:
1d:b6:86:00:84:ec:ca:4a:57:d3:b5:be:d7:78:24:d9:b6:88:
00:63:8c:06:4f:42:82:60:c3:38:98:7a:37:73:45:f0:96:bc:
81:a1:f6:9a:43:32:38:a2:ef:f4:23:5b:8e:49:33:63:97:85:
19:65:a8:0f:8e:b6:08:7d:5c:b7:22:d6:b9:88:e5:c8:3d:53:
1e:82:4d:c3:a0:32:1e:28:90:6e:81:d2:2f:fc:98:cd:d7:7d:
ed:9d:45:09:20:4a:85:ba:ed:1a:88:e7:df:c1:20:b3:95:75:
cc:c5:d8:62:de:06:7c:c9:87:52:0d:65:12:d4:35:e3:08:9f:
49:b6:7f:c6:68:bd:0a:5a:01:df:84:66:b6:b3:ba:fc:75:8a:
76:f0:80:c1:41:1c:c3:84:bc:4f:b6:a2:dc:f1:65:10:50:53:
ce:ed:1d:e9:fe:87:19:07:e8:25:28:b8:dd:cc:03:ef:ad:6f:
32:37:01:68:35:42:f7:05:77:9c:83:6f:54:9b:50:1a:c9:de:
01:a6:48:ec:c1:40:fa:94:62:e7:31:f4:b7:32:1e:ea:de:03:
bf:e5:d5:bd:f9:76:c8:a6:dc:38:5f:ca:05:8a:9f:4b:5c:16:
f2:2c:d0:96
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICIjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4
M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNTEwMjMx
MjM1MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY5MjM3MTU3NjFDNjQz
NUI4RDczRjg5RDgzOUEwNDk2MTY0ODUyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa80VeFXXU3U5/RfJoTsxhqGcmEz+snSucevafgIXTj39nya9r
ejrcJjPjnxd3jfEkOK6YtxqAGb1onifZSm7QC09DO2VwcSB7sptLMLgOmAWjUrwU
wreWhXs0GKMRLSlbdn8d+Im9bocsoexPzEp+En1QDuhaSLsjmItvi0nK/z0GRflk
h6LKK9tCmyYdw2I2oCqJFYW7yNwxM1ghMy2EE4ultgdI9/Ht+rkjanFZeMq5Joij
nofBFfOcuk+zdbCja+fcs7FLVdL5m8TjmtpQYMo7ExREk6XCLk660lhiwzrxY768
p9LoGtsebcZy3R7umm3SJ33YZXtsjn7SkRGJAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU+SNxV2HGQ1uNc/idg5oElhZIUjgwHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt
eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz
L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL0xvUHJEaHkzdEtkaGVn
U3Rlb0ppblppNVc1US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCk9RiX+5p/VwSl8gI7QTlRxS0dtoYAhOzKSlfTtb7XeCTZtogAY4wGT0KCYMM4
mHo3c0XwlryBofaaQzI4ou/0I1uOSTNjl4UZZagPjrYIfVy3Ita5iOXIPVMegk3D
oDIeKJBugdIv/JjN133tnUUJIEqFuu0aiOffwSCzlXXMxdhi3gZ8yYdSDWUS1DXj
CJ9Jtn/GaL0KWgHfhGa2s7r8dYp28IDBQRzDhLxPtqLc8WUQUFPO7R3p/ocZB+gl
KLjdzAPvrW8yNwFoNUL3BXecg29Um1Aayd4BpkjswUD6lGLnMfS3Mh7q3gO/5dW9
+XbIptw4X8oFip9LXBbyLNCW
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:40:24 2025 by rpki-client