Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.mft
File: H8rXIlZ3kf1zoJH-iRyUjxkU1nI.mft (raw, json)
Hash identifier: riFVwQFZ5+yU6ZkMKCUWXydhItAlcBj3pQhC2DUZr9o=
Subject key identifier: DC:8B:89:B1:D5:3C:AB:99:01:35:B7:A9:A7:19:93:8D:DB:78:30:50
Authority key identifier: 1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72
Certificate issuer: /CN=1FCAD722567791FD73A091FE891C948F1914D672
Certificate serial: 084E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.mft
Manifest number: 0838
Signing time: Sat 23 Aug 2025 16:02:21 +0000
Manifest this update: Sat 23 Aug 2025 16:02:21 +0000
Manifest next update: Sat 23 Aug 2025 22:02:21 +0000
Files and hashes: 1: 6Ox9vYEkQ0kauWeF3ci5J0DCnyY.roa (hash: 7JH9vYwSOtQSmbNbZ1sNn45vDXImlBZc/Di0RUGYK+w=)
2: H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl (hash: EJDupBQlMmL1k24d//VcZgWmx6IJ8PEBgZh23xEIPQE=)
3: JSD6su-8GmSdAloMCdElkEvt0AM.roa (hash: byIajotq4oMDlZPGW2paVqqfxYBJgKLLUDwL6wPkwLA=)
4: VboEPjdm3B9tpkGKHcEJa1gcG54.roa (hash: Bd9t5IO7ldMac3QGg6dlL68DuVE/YizSDPaV1MMd6Fg=)
5: a-C0ZcbMEIueflbcZASicAD8he0.roa (hash: j0QlysAnrzL+WWQvVGQm8SUA6f3yOOh++yMn2DzuE1Q=)
6: ac9zn1KZz8GSplsJ7n3whpOXZ6Y.roa (hash: MxCG7/kDUHT7A7/tLKuXfkqQIyrHEPkO+54grftcmBg=)
7: qOLyqTgKKgxRxyxeuJhc3_cZGQ4.roa (hash: anm9VRDFQVYzPYFRpltgoGJtk4c3JmQwvUl1Lz2LLYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FCAD722567791FD73A091FE891C948F1914D672
Validity
Not Before: Aug 23 16:02:21 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=DC8B89B1D53CAB990135B7A9A719938DDB783050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:cb:45:b2:c5:2f:03:6c:6a:0c:af:3d:a8:
6f:3f:89:56:60:42:17:3b:2c:ef:61:bd:97:10:61:
71:3e:a1:78:4c:87:b3:24:8d:42:42:ce:26:38:be:
1f:46:01:f5:6a:ad:d9:48:b0:22:d7:f4:93:f3:b9:
3c:f8:b9:1b:cb:3b:9e:20:41:23:05:6f:c7:34:76:
a1:dd:9d:e2:8a:2c:d6:12:6f:6a:53:ba:09:36:cd:
fd:80:df:e7:1e:b7:55:4f:8d:01:9e:6f:0f:e8:d0:
d9:9f:c6:7a:af:a5:71:7c:15:45:18:6d:c6:01:4b:
2f:22:8d:af:e6:b8:03:93:3e:de:39:f0:79:83:f7:
b0:9e:96:e5:da:a1:98:5e:a2:9f:d9:64:39:8a:15:
f0:c4:23:f4:15:f8:04:a7:7f:6b:ae:af:76:d2:7b:
67:e3:6a:5e:0b:d9:d4:98:51:cc:83:e0:c6:82:52:
b3:84:f1:64:96:bc:d6:bf:d7:21:b2:82:23:6f:68:
1d:a4:a0:c9:de:1c:48:94:18:9d:05:86:cc:4e:2f:
92:93:3a:44:45:35:3f:1e:b5:52:3f:2e:36:cc:ea:
d3:13:04:7a:08:4c:f4:ce:ed:9c:97:23:6d:ca:59:
f9:33:63:ee:84:98:58:1a:4d:ae:a2:19:d4:57:a4:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8B:89:B1:D5:3C:AB:99:01:35:B7:A9:A7:19:93:8D:DB:78:30:50
X509v3 Authority Key Identifier:
keyid:1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b6:5d:b0:f6:c6:cd:15:74:9c:a0:c0:e4:fc:7f:e2:5d:02:
09:b3:77:e4:34:05:bf:c5:8e:2d:4b:b2:c0:4a:9e:bf:90:4e:
da:51:70:b7:6d:65:86:3a:e2:ff:e0:39:62:18:8a:36:af:a6:
60:a0:a1:3f:68:60:c5:83:c4:f3:90:08:b7:cf:68:a9:42:46:
2b:94:b1:4d:89:b8:31:18:4b:28:49:3a:dc:39:1a:f2:3a:20:
a8:59:4b:c3:a0:ce:19:be:1f:55:ca:75:9c:61:81:cf:11:8f:
de:1b:5c:0b:aa:17:05:9e:c9:88:ac:3d:e5:a3:fc:9a:fd:28:
54:b4:95:c5:c8:c6:47:db:50:1f:38:ff:d7:e7:29:d4:60:9d:
3a:22:4a:39:f2:5b:91:0b:f5:d1:d2:91:ff:83:3d:89:86:61:
95:af:09:f1:1e:5c:c6:35:4e:78:eb:e5:fd:cd:9e:ce:30:20:
4c:2b:3c:4e:a5:0a:a2:93:0f:7c:ec:e6:c2:ce:8f:46:2f:12:
fa:ef:f6:f9:be:0b:cf:06:b0:ed:41:4d:bf:23:47:ff:0f:d3:
24:26:4e:44:75:47:ef:0f:68:85:0a:df:3b:2c:81:4a:30:11:
df:49:bb:32:a8:c8:44:ec:9a:d0:e0:64:14:67:bb:61:ab:e8:
a6:cd:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:32 2025 by rpki-client