Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
File: maW4vf7fXMZl0xiUSxszfKze1CA.mft (raw, json)
Hash identifier: ZUgmmMJLjvbOI1Jsw/frCY8X6Oov4z15i69SMoRjjHE=
Subject key identifier: 54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27
Authority key identifier: 99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20
Certificate issuer: /CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420
Certificate serial: 37C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
Manifest number: 37C0
Signing time: Sat 23 Aug 2025 16:06:05 +0000
Manifest this update: Sat 23 Aug 2025 16:06:05 +0000
Manifest next update: Sat 23 Aug 2025 22:06:05 +0000
Files and hashes: 1: maW4vf7fXMZl0xiUSxszfKze1CA.crl (hash: 7TlPYDDgGn2EvHTDLJv/+VtM+0b5VRvGIzfHwMZ59eI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14272 (0x37c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420
Validity
Not Before: Aug 23 16:06:05 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=543B0A2B5DEF06DFDD0E4008AD86D319CCA2F027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:8b:5a:c2:04:42:25:22:b5:09:56:5b:18:
c8:7d:be:9b:b6:05:ed:c7:f5:3e:04:0e:ee:02:b3:
d9:e0:40:0b:c1:50:59:35:35:bf:d8:2e:5f:f0:a6:
51:49:e6:55:b4:4f:c6:9b:80:10:27:d5:5c:52:6a:
32:8e:77:be:2a:50:c9:06:56:95:15:fd:dc:fa:93:
d8:f5:3e:27:e2:56:68:db:81:bd:62:c9:a7:d9:50:
5e:d1:5c:45:59:06:cd:f9:5a:f8:9d:11:ca:8f:58:
5f:53:75:7d:ba:be:3a:e7:b4:45:a6:04:6d:13:e3:
e6:71:be:3e:20:36:00:4a:d7:7e:53:31:3b:ff:24:
bc:9e:e9:d0:a1:5f:32:33:f7:0d:4e:e6:8c:2d:86:
bf:84:9a:41:7f:f8:1f:89:d9:c2:7c:e5:68:a0:3f:
4f:4f:24:3e:52:a0:c7:aa:77:0a:43:9a:55:76:5a:
06:d6:5c:b9:a2:17:5a:f1:bb:eb:4c:67:4b:fa:ed:
e4:35:31:82:f0:eb:86:ee:89:94:3f:3d:fe:cf:4a:
e9:bb:76:4d:8a:1c:ca:9c:1c:75:9d:05:6e:20:7f:
92:a3:61:5a:83:a4:32:b8:bc:b7:34:44:7f:2d:26:
07:39:46:fc:e9:59:ad:59:f5:dd:0f:ff:63:6c:52:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27
X509v3 Authority Key Identifier:
keyid:99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:2f:d2:23:d0:04:ad:69:b8:43:3e:57:18:7e:a2:42:7b:f3:
2b:0b:e3:fe:a7:3c:6e:4d:34:88:28:c8:51:2f:f5:0c:ec:9f:
63:09:b4:59:2e:b5:27:9f:f2:b8:48:45:50:75:f8:bd:d0:16:
2b:a1:2e:7a:08:19:ac:7f:2b:57:ca:71:b1:c6:fc:cd:99:96:
fd:f6:34:78:5a:92:6a:a3:b2:ca:7b:c8:28:2b:cc:a7:93:56:
7a:d9:ce:4f:c3:4d:5f:50:cf:ab:a7:d8:32:66:c7:6d:07:e1:
3d:d0:13:23:75:f2:0b:34:12:46:ec:96:45:2a:8b:db:f1:25:
62:6f:ca:c0:3d:7b:0e:be:2b:9e:2c:e2:84:e6:e5:c5:31:ee:
b2:cb:78:3c:f2:aa:dd:a0:8b:41:e6:73:74:08:df:47:67:a1:
80:fa:0e:a4:33:e3:37:b9:80:4b:da:e6:0c:79:18:0c:f9:e1:
d8:51:02:71:3b:f4:8f:ea:f3:16:1a:4b:56:5f:e2:1b:27:ba:
55:a1:89:07:c7:f7:67:6e:91:fe:56:c8:d3:cc:b5:4c:39:c4:
da:26:71:ea:b5:09:5b:99:95:cc:e7:02:fb:8f:57:35:bc:70:
46:f2:78:17:b7:ff:40:14:d8:b5:e4:c6:9c:a0:22:80:6a:b8:
0e:c0:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:21 2025 by rpki-client