Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json)
Hash identifier: GJ6BZP/Bfy2t0sOtno88BbQGT5X6AJ1oCZWXIrHDx+w=
Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C
Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Certificate serial: 82
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
Manifest number: 7F
Signing time: Thu 05 Jun 2025 16:38:49 +0000
Manifest this update: Thu 05 Jun 2025 16:38:49 +0000
Manifest next update: Thu 05 Jun 2025 22:38:49 +0000
Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=)
2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=)
3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: jOxHDacfWn5up++QAaa5KrQqlr0phSJQ5b0nT1JoYxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Validity
Not Before: Jun 5 16:38:49 2025 GMT
Not After : May 12 12:19:28 2026 GMT
Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d:
45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b:
7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08:
35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1:
5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46:
86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c:
c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8:
1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d:
b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6:
6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31:
7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07:
01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31:
15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76:
d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5:
c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41:
77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4:
f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C
X509v3 Authority Key Identifier:
keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:62:94:4c:4e:e4:fc:01:f1:1a:24:c5:cd:74:be:66:23:
0a:22:fc:72:73:60:a5:99:01:1a:f8:20:c0:67:2a:2f:36:d8:
8c:89:b2:09:08:b5:37:d8:c3:51:63:dd:4c:7b:25:28:f9:db:
94:3f:12:6b:9b:57:30:b1:b6:75:84:47:6a:83:e1:71:b7:73:
d0:96:6d:55:d7:a1:00:09:dd:cc:12:54:ae:69:3c:24:24:c8:
c0:9f:94:b6:d1:fc:96:16:b1:77:e5:0d:80:a0:90:7a:b7:84:
7c:48:7f:98:62:99:b0:64:dc:82:18:c1:41:8b:ca:98:27:cf:
54:ef:b7:a4:72:e8:81:9f:4c:46:68:b7:32:da:0f:e9:c9:e2:
35:32:a1:18:5c:d4:17:2a:ef:e6:0e:ca:21:36:1c:2f:35:2d:
41:84:d0:e2:fa:ef:19:9d:31:d0:57:b8:1f:80:4f:01:eb:87:
b7:09:40:b1:5d:f9:05:77:cb:82:3d:a8:76:58:88:bb:62:57:
cb:92:15:ab:cb:36:c2:ec:94:92:d1:a1:09:ed:f3:0c:ed:b7:
f1:a0:d0:1c:0e:bf:79:e7:7e:dc:bd:38:c8:e8:de:2c:cb:90:
06:5b:7d:d9:34:73:7d:d0:3e:f2:a3:22:41:c4:d7:32:0d:a0:
a5:5d:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:03:31 2025 by rpki-client