Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
File: pA1lo5gglIcI0bteqCt6TVTUS4U.mft (raw, json)
Hash identifier: ZBmZONMLXZ9h8MR66Svw7/yAocVzGYEu83jslxq/Mgw=
Subject key identifier: BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4
Authority key identifier: A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85
Certificate issuer: /CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85
Certificate serial: 29AC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
Manifest number: 29AC
Signing time: Sat 29 Mar 2025 10:32:07 +0000
Manifest this update: Sat 29 Mar 2025 10:32:07 +0000
Manifest next update: Sat 29 Mar 2025 16:32:07 +0000
Files and hashes: 1: pA1lo5gglIcI0bteqCt6TVTUS4U.crl (hash: t5Y3DlBsvMDG/TekTXe62BUzRncw2OFecPmHh7xYD/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10668 (0x29ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85
Validity
Not Before: Mar 29 10:32:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BD60D280CD3292125E67AFB55C7708FE5BF3E7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:20:01:54:ae:bf:a5:82:f7:7f:e3:e4:b0:
97:16:a8:27:c2:a5:53:50:9c:04:0c:a9:3e:f1:68:
49:8c:36:fb:73:04:13:0b:6f:f2:e9:e9:3f:b6:c0:
c3:ca:90:92:63:e0:65:ce:a4:1c:4d:27:5d:c8:cd:
1b:7c:3c:99:b1:c6:f2:bb:a4:f3:5f:b5:7a:7b:53:
a5:2f:e8:59:8b:04:8d:90:c0:4c:1f:30:24:2c:a9:
99:2f:c7:e1:5d:01:e1:8f:dd:cc:04:35:a8:77:b8:
78:5b:c6:61:70:72:91:94:16:6a:b5:15:7a:32:c3:
6f:af:d0:5b:7b:ca:f7:1e:bd:59:e1:cc:6e:fb:4b:
b4:f7:96:82:a6:8f:4d:a8:58:e4:76:86:58:3c:99:
35:87:1a:1e:69:a6:c7:c1:d8:32:56:04:10:a2:30:
5c:63:5b:a5:df:ee:55:aa:ee:d6:ca:79:80:e3:31:
fe:5c:a0:d7:bb:c6:5a:18:07:e7:97:42:58:07:63:
58:0f:c6:00:23:5f:f6:96:cc:d7:45:48:56:52:2f:
70:1b:b5:eb:8c:68:ec:1e:59:3f:00:14:37:72:5b:
e9:bd:2c:80:6b:a2:74:67:49:da:78:2d:62:95:0c:
10:59:65:a8:1a:d9:9d:38:a0:39:5a:4e:bd:bb:fc:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4
X509v3 Authority Key Identifier:
keyid:A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:1c:f1:0a:5d:5f:f3:cc:97:07:30:2e:5a:19:9f:d9:e1:b3:
52:d3:1f:f5:68:f7:a2:e8:5f:7d:cb:c2:20:c4:66:2c:fd:b0:
27:32:c5:c9:63:0e:c9:1b:e8:31:b1:79:a5:be:41:0e:cd:56:
e0:17:59:d0:6d:9d:b5:de:40:17:d8:b2:0d:13:63:51:3c:aa:
a6:82:d3:c3:82:4d:93:6c:8b:6f:af:a5:e4:ef:f3:bf:93:9f:
7a:8e:69:97:f6:62:48:c0:54:a8:9b:18:8b:95:bb:d1:70:c7:
7a:5d:3e:39:10:ff:0f:65:d3:b8:a2:e1:4f:90:4a:98:7c:1f:
bd:4c:38:14:52:d7:1a:c6:05:49:17:9d:f9:66:58:a7:b0:47:
e8:10:9d:fb:e2:21:b4:b8:41:90:c7:5a:b6:01:87:a7:0a:d9:
6c:b8:44:c3:d4:4f:18:8a:13:a6:62:9f:d1:67:1e:63:52:4f:
14:93:70:9c:f3:34:52:4e:7d:a4:42:a5:0d:14:bd:07:fb:5b:
00:72:44:a8:89:f5:d7:75:43:25:56:8d:9b:bd:4f:dd:c5:a6:
f7:3a:eb:a7:e8:aa:7f:20:6d:47:46:0e:af:e1:2a:c8:2f:87:
24:97:1f:bf:1b:a7:c1:fe:4c:41:df:32:11:05:3d:5a:b7:57:
ed:39:aa:a0
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICKawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTQw
RDY1QTM5ODIwOTQ4NzA4RDFCQjVFQTgyQjdBNEQ1NEQ0NEI4NTAeFw0yNTAzMjkx
MDMyMDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJENjBEMjgwQ0QzMjky
MTI1RTY3QUZCNTVDNzcwOEZFNUJGM0U3QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdLSABVK6/pYL3f+PksJcWqCfCpVNQnAQMqT7xaEmMNvtzBBML
b/Lp6T+2wMPKkJJj4GXOpBxNJ13IzRt8PJmxxvK7pPNftXp7U6Uv6FmLBI2QwEwf
MCQsqZkvx+FdAeGP3cwENah3uHhbxmFwcpGUFmq1FXoyw2+v0Ft7yvcevVnhzG77
S7T3loKmj02oWOR2hlg8mTWHGh5ppsfB2DJWBBCiMFxjW6Xf7lWq7tbKeYDjMf5c
oNe7xloYB+eXQlgHY1gPxgAjX/aWzNdFSFZSL3AbteuMaOweWT8AFDdyW+m9LIBr
onRnSdp4LWKVDBBZZaga2Z04oDlaTr27/IahAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUvWDSgM0ykhJeZ6+1XHcI/lvz57QwHwYDVR0jBBgwFoAUpA1lo5gglIcI0bte
qCt6TVTUS4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzMv
cEExbG81Z2dsSWNJMGJ0ZXFDdDZUVlRVUzRVLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9wQTFsbzVnZ2xJY0kwYnRlcUN0NlRWVFVTNFUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83My9wQTFsbzVnZ2xJY0kwYnRl
cUN0NlRWVFVTNFUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
7RzxCl1f88yXBzAuWhmf2eGzUtMf9Wj3ouhffcvCIMRmLP2wJzLFyWMOyRvoMbF5
pb5BDs1W4BdZ0G2dtd5AF9iyDRNjUTyqpoLTw4JNk2yLb6+l5O/zv5Ofeo5pl/Zi
SMBUqJsYi5W70XDHel0+ORD/D2XTuKLhT5BKmHwfvUw4FFLXGsYFSRed+WZYp7BH
6BCd++IhtLhBkMdatgGHpwrZbLhEw9RPGIoTpmKf0WceY1JPFJNwnPM0Uk59pEKl
DRS9B/tbAHJEqIn113VDJVaNm71P3cWm9zrrp+iqfyBtR0YOr+EqyC+HJJcfvxun
wf5MQd8yEQU9WrdX7TmqoA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:25 2025 by rpki-client