Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft (raw, json)
Hash identifier: N2yz1Y69Tsnrtbp4jrYGhy9Qtcz9eTmrzMffPcRl+cI=
Subject key identifier: DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35
Authority key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Certificate issuer: /CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Certificate serial: 2003
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
Manifest number: 2003
Signing time: Sat 23 Aug 2025 16:04:22 +0000
Manifest this update: Sat 23 Aug 2025 16:04:22 +0000
Manifest next update: Sat 23 Aug 2025 22:04:22 +0000
Files and hashes: 1: vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl (hash: s2xu79WeHdhLwbtNzEOS8Vni5nQJ+B3fgid8ZBmmB4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8195 (0x2003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Validity
Not Before: Aug 23 16:04:22 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=DBD9F4F5914A39ECDE3E5EAEB2E400EE30131135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:75:68:4d:86:6f:36:a4:da:5e:c9:c9:ac:
e4:0d:29:b9:86:9a:6c:b9:54:b5:76:2b:51:2e:7a:
f9:1f:8e:5f:c1:9e:74:c3:8b:1c:d7:28:d4:83:be:
96:5b:aa:b5:2a:fc:21:26:ce:12:62:66:c0:e9:38:
d6:b9:09:14:50:be:43:bf:6a:09:e1:0e:57:20:37:
de:05:f6:91:7f:40:75:d6:2b:29:7b:76:15:24:4b:
cd:71:18:cf:71:41:ea:fe:70:c4:a2:4a:e5:ae:83:
45:4d:29:54:9e:15:65:75:da:68:ff:db:ce:a6:e9:
b7:fb:24:89:2a:2a:bd:44:a9:d2:55:da:1d:2c:ca:
2e:8b:ae:87:ee:3e:1e:0e:9b:32:e4:22:61:f5:86:
fe:49:0e:d9:2c:26:6b:28:52:ba:76:32:24:b7:ad:
3f:65:2c:a5:8a:67:7d:c6:12:f2:2d:55:54:50:8b:
22:6e:65:32:1e:a3:4e:7d:3a:8d:f3:c4:34:6d:e2:
84:a4:48:d3:eb:18:0a:6c:c3:73:a9:f6:ce:58:fd:
c9:5e:17:d6:67:f0:75:14:b8:8b:73:3a:11:76:57:
8a:39:24:b0:d1:0f:48:6c:7f:77:25:33:37:f4:92:
54:a2:bc:0e:64:9e:90:e1:6a:b5:5a:7c:00:1f:24:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35
X509v3 Authority Key Identifier:
keyid:BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b9:33:4f:fa:55:23:eb:99:d5:1c:85:b3:c3:90:1b:99:30:
bd:48:c6:92:cd:81:49:34:10:4a:aa:c5:df:1f:7b:42:fa:1c:
ea:a8:66:98:8a:e2:38:de:5a:b2:91:a8:3f:76:06:8d:22:cc:
51:db:cb:ae:3b:1e:8c:8a:62:d7:a1:08:a0:8d:84:b2:07:01:
bd:0e:64:10:be:98:83:09:0d:b7:fa:08:c1:9d:a1:ba:f9:7b:
3e:e2:d8:80:af:4d:26:46:6b:4d:a3:f3:80:a5:a3:7f:4e:3c:
67:4a:b9:47:e1:f4:3b:14:fd:53:b7:59:e0:c3:a6:7b:f0:fb:
a9:40:ed:57:d5:71:0b:57:95:e7:88:09:14:cc:12:b7:1a:ac:
9c:12:13:f7:3d:df:1a:19:a4:7a:f4:c8:c2:09:9a:31:d7:45:
74:86:50:12:a1:c1:c4:5a:4a:16:bb:f5:71:28:4a:48:a0:ed:
7a:f0:12:61:51:53:a9:53:34:5f:37:f0:ed:9d:d0:d3:17:5f:
bd:b4:34:7e:fa:ab:7b:2b:67:26:65:9b:81:18:61:c0:a2:06:
8f:eb:34:03:d1:0f:7d:bf:79:15:19:b2:af:1e:9f:de:23:0c:
cd:25:b5:98:34:8d:3d:b0:10:5b:eb:1a:df:ff:0e:2d:cc:93:
86:10:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:37:51 2025 by rpki-client