Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
File: jj4CcULGM9VlmEGN9t68Ab3YAIw.mft (raw, json)
Hash identifier: Y/ERoo74GERIUR8OR+oMEg/LxpqgE0OLiKsUURStS/w=
Subject key identifier: CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 16DB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
Manifest number: 16D3
Signing time: Sat 23 Aug 2025 16:03:28 +0000
Manifest this update: Sat 23 Aug 2025 16:03:28 +0000
Manifest next update: Sat 23 Aug 2025 22:03:28 +0000
Files and hashes: 1: 4mivCFMBAf7EEBKKxRo0rub4T64.roa (hash: jz9z1yXxrP3c49QtbOgAGOSwj2Y8ZkTwUpXiF59bJtI=)
2: jj4CcULGM9VlmEGN9t68Ab3YAIw.crl (hash: djIEdm35riEIjpxBXk9NdysnDWLp/fXKdecZBgq3Tjo=)
3: kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa (hash: XHI0J5/o5O5ceg1Z+ckCn+FaTtcIPko4W8gNfs++aKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5851 (0x16db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: Aug 23 16:03:28 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=CD0DA4347661962168388026EA8966599564316C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:1c:56:12:f8:80:bf:f0:c2:fd:a7:4d:2d:
16:9e:1d:4d:9e:3e:08:a2:38:57:36:91:63:3d:f1:
e4:5b:44:e8:9e:e7:a7:79:48:59:02:ec:34:53:6b:
ac:59:7f:70:4b:62:43:fa:08:97:27:12:4f:31:13:
e9:1a:eb:49:15:35:eb:7f:75:7c:2e:98:23:ed:f4:
7c:15:ec:81:50:d2:bb:63:2b:70:f6:af:ce:34:eb:
88:fe:46:f2:d3:9f:fa:3c:f2:96:6b:31:26:5a:f4:
c3:7f:19:06:92:95:ae:2c:ac:5e:eb:77:b4:c8:1b:
26:15:84:ec:8e:f0:a9:48:25:5f:d9:46:3a:16:42:
8d:5f:aa:ef:04:6f:2d:5b:7d:68:ea:0f:44:48:d5:
d1:db:ff:ce:07:3f:7b:65:09:55:7b:b2:2f:b0:be:
55:97:02:ef:2e:a3:8b:f0:01:87:57:38:a8:24:bf:
b9:5f:65:23:4a:7d:56:3b:b2:3d:71:04:31:d5:74:
dd:c0:b1:12:81:8f:82:50:8d:5f:3e:50:d6:f6:18:
b4:66:f1:27:d9:90:62:79:c2:c1:0b:d5:d9:7c:20:
12:0c:b6:5b:ce:6f:6c:8a:c9:0e:c4:db:18:65:53:
d6:17:a0:aa:da:28:8e:d2:25:62:50:bd:0e:51:20:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:8a:97:e7:17:cd:61:2d:c9:e1:cc:67:74:d8:27:bc:de:79:
2c:87:99:6f:06:66:cf:98:3f:4f:61:d3:75:ea:e4:6c:ba:e1:
e6:11:e9:10:bc:88:30:9e:b3:46:2e:c2:d0:67:4f:3b:df:77:
f1:4f:7c:0b:9c:b2:c1:7a:18:76:33:9b:c0:dd:47:fe:49:f6:
d9:68:71:af:b0:cb:91:10:18:0b:94:f9:08:d5:db:2c:92:b0:
62:1c:9a:58:fd:e1:f7:59:c8:66:67:2c:1e:c9:98:aa:b7:22:
78:9e:d9:45:89:2a:87:d5:21:a9:14:2d:c8:b5:6f:ec:5e:ba:
2b:83:97:9b:f8:eb:9c:7c:d5:7c:25:f5:92:05:8c:6e:1a:94:
8e:68:af:bd:d7:ae:81:e0:21:44:7f:5f:6d:6b:22:42:72:4d:
67:61:90:e0:59:36:45:e4:b5:5b:4c:ec:51:16:c1:fa:8e:ab:
7e:63:c0:22:07:4b:f3:70:39:5a:71:b0:44:ee:a7:06:9a:30:
6f:3d:ee:cc:83:42:28:2b:b9:aa:bb:01:05:e9:6d:6d:29:17:
a4:d7:d1:d6:83:f2:73:d5:8e:63:73:f7:12:bb:4c:d1:c7:7a:
13:7a:57:ea:85:82:d8:1b:ad:18:7f:ff:63:13:89:98:54:56:
34:40:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:41 2025 by rpki-client