Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
File: bMukxhA3mRD8FzJKB0sOAEAkeDM.mft (raw, json)
Hash identifier: 1xxN+B+7KgoyCeHAFY4BbLGoGZHRdDGCiW6uy+PJAzY=
Subject key identifier: D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
Authority key identifier: 6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
Certificate issuer: /CN=6CCBA4C610379910FC17324A074B0E0040247833
Certificate serial: 030C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
Manifest number: 030C
Signing time: Tue 21 Oct 2025 04:34:23 +0000
Manifest this update: Tue 21 Oct 2025 04:34:23 +0000
Manifest next update: Tue 21 Oct 2025 10:34:23 +0000
Files and hashes: 1: bMukxhA3mRD8FzJKB0sOAEAkeDM.crl (hash: I2Huo5tIpMVHzHc3SoyiO+kMR32gf2NCeZkL5eS/ZcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CCBA4C610379910FC17324A074B0E0040247833
Validity
Not Before: Oct 21 04:34:23 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D589D477C7F2031A37EED4CE504EA8A2ADF2FB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:3d:34:a7:bb:0f:d3:e8:9f:f8:60:4a:5a:
02:d3:b1:af:5a:f6:bf:e2:17:df:84:80:e4:9e:77:
da:08:7c:43:e1:be:dd:1e:2e:9b:6e:2a:e7:73:aa:
55:3a:db:d5:5a:1b:17:ac:29:0c:90:b3:f1:f9:31:
9b:17:da:f5:92:18:ed:d0:9b:e0:18:53:fe:2c:bb:
0d:d8:78:d3:e1:f5:78:ae:34:97:4a:af:3d:2b:10:
ac:ea:24:cb:55:ca:ca:30:9b:b1:38:39:f8:56:11:
a1:f4:7e:af:49:20:02:3d:f3:b1:d9:23:a1:5d:72:
3f:16:40:31:4d:33:56:01:c2:42:73:fd:f8:ea:d3:
3a:fc:f3:35:26:c5:01:86:c7:35:66:7d:cf:e0:71:
fd:3a:69:f6:3c:da:8a:1d:7e:b8:5d:2d:92:f0:ba:
72:dd:c1:c5:4c:42:f0:52:66:54:0f:a9:33:73:59:
1c:e0:63:12:6c:6b:53:de:26:77:55:47:5a:40:40:
1e:14:a4:d7:f8:fe:0c:83:02:85:70:0b:80:08:27:
6c:37:36:10:aa:7c:0e:f7:ed:f5:f0:fa:3e:ba:99:
ed:9a:2e:90:9b:86:1b:bc:db:12:01:2a:69:16:09:
c3:d6:c2:de:fb:08:29:03:a3:ce:a5:a1:66:ed:df:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
X509v3 Authority Key Identifier:
keyid:6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b8:25:e1:95:0d:12:26:03:6d:0f:3c:ad:49:11:82:2f:c8:
d5:07:a9:35:e9:dc:64:b7:3a:f9:86:70:f9:7f:6a:f2:c7:49:
b4:95:d7:c8:db:60:4f:1f:3b:65:8e:84:b3:0e:00:a4:16:09:
8f:43:5a:ea:b3:31:f9:59:e2:76:63:35:67:ef:48:25:39:50:
a1:c5:ca:48:be:b6:07:32:76:18:52:83:36:1b:d9:44:af:36:
de:cb:cf:9a:9d:f1:b6:69:ce:72:58:c2:a8:f4:38:63:b4:89:
7b:d3:91:76:d0:6b:84:88:a1:25:40:a3:bf:44:81:21:ad:94:
12:a8:a6:2e:6e:37:82:f2:e1:ac:8d:c6:fb:0f:00:6b:31:4b:
45:f2:11:f9:b0:76:7f:f5:99:b8:43:ba:f8:74:01:94:fd:52:
57:3a:d5:2b:1d:fa:d1:e7:56:d3:75:70:c9:2b:c1:73:12:7f:
e7:98:0c:17:df:d6:6d:89:91:31:eb:ea:26:63:39:8a:2f:3d:
62:1e:03:40:3d:ad:cb:da:ac:75:8f:28:ba:86:02:1a:dc:42:
3c:38:b2:24:49:e8:3a:94:41:93:0a:f4:5e:0e:95:4f:9d:2b:
ba:2e:89:71:1b:2a:ed:b6:9f:b7:c3:c9:d6:1a:56:c9:38:ea:
d5:7c:80:e0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkND
QkE0QzYxMDM3OTkxMEZDMTczMjRBMDc0QjBFMDA0MDI0NzgzMzAeFw0yNTEwMjEw
NDM0MjNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ1ODlENDc3QzdGMjAz
MUEzN0VFRDRDRTUwNEVBOEEyQURGMkZCM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ4z00p7sP0+if+GBKWgLTsa9a9r/iF9+EgOSed9oIfEPhvt0e
LptuKudzqlU629VaGxesKQyQs/H5MZsX2vWSGO3Qm+AYU/4suw3YeNPh9XiuNJdK
rz0rEKzqJMtVysowm7E4OfhWEaH0fq9JIAI987HZI6Fdcj8WQDFNM1YBwkJz/fjq
0zr88zUmxQGGxzVmfc/gcf06afY82oodfrhdLZLwunLdwcVMQvBSZlQPqTNzWRzg
YxJsa1PeJndVR1pAQB4UpNf4/gyDAoVwC4AIJ2w3NhCqfA737fXw+j66me2aLpCb
hhu82xIBKmkWCcPWwt77CCkDo86loWbt38LvAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU1YnUd8fyAxo37tTOUE6ooq3y+z4wHwYDVR0jBBgwFoAUbMukxhA3mRD8FzJK
B0sOAEAkeDMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIy
OC9iTXVreGhBM21SRDhGekpLQjBzT0FFQWtlRE0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2JNdWt4aEEzbVJEOEZ6SktCMHNPQUVBa2VETS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMjgvYk11a3hoQTNtUkQ4
RnpKS0Iwc09BRUFrZURNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKS4JeGVDRImA20PPK1JEYIvyNUHqTXp3GS3OvmGcPl/avLHSbSV18jbYE8f
O2WOhLMOAKQWCY9DWuqzMflZ4nZjNWfvSCU5UKHFyki+tgcydhhSgzYb2USvNt7L
z5qd8bZpznJYwqj0OGO0iXvTkXbQa4SIoSVAo79EgSGtlBKopi5uN4Ly4ayNxvsP
AGsxS0XyEfmwdn/1mbhDuvh0AZT9Ulc61Ssd+tHnVtN1cMkrwXMSf+eYDBff1m2J
kTHr6iZjOYovPWIeA0A9rcvarHWPKLqGAhrcQjw4siRJ6DqUQZMK9F4OlU+dK7ou
iXEbKu22n7fDydYaVsk46tV8gOA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:38 2025 by rpki-client