Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft
File: yIjZVr3_KvKzDy02QXZk3ADZXOk.mft (raw, json)
Hash identifier: 1aMKfjxaaEX+QLLZb9fBD4yWhzxgBlDIAeUJ02JifPQ=
Subject key identifier: 84:7C:52:52:33:73:9A:86:8F:F8:4C:F4:97:6A:16:F2:2E:27:43:5E
Authority key identifier: C8:88:D9:56:BD:FF:2A:F2:B3:0F:2D:36:41:76:64:DC:00:D9:5C:E9
Certificate issuer: /CN=C888D956BDFF2AF2B30F2D36417664DC00D95CE9
Certificate serial: 0104
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yIjZVr3_KvKzDy02QXZk3ADZXOk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft
Manifest number: 0104
Signing time: Sun 19 Oct 2025 22:06:57 +0000
Manifest this update: Sun 19 Oct 2025 22:06:57 +0000
Manifest next update: Mon 20 Oct 2025 04:06:57 +0000
Files and hashes: 1: yIjZVr3_KvKzDy02QXZk3ADZXOk.crl (hash: 9AtM/oSkFXODP7vyc3B5ryLQWrP472VWR1y7NScG/iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C888D956BDFF2AF2B30F2D36417664DC00D95CE9
Validity
Not Before: Oct 19 22:06:57 2025 GMT
Not After : Aug 28 02:51:57 2026 GMT
Subject: CN=847C525233739A868FF84CF4976A16F22E27435E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:11:91:c3:0c:15:13:17:ae:3e:ae:1d:7a:
73:10:9c:ad:b0:cc:69:0b:b3:1d:9e:cb:b3:b2:96:
08:11:d5:ab:75:27:13:3d:83:78:76:3e:c6:2e:de:
c3:6a:93:83:8e:fd:24:bf:03:86:ce:e2:ad:37:19:
ec:87:87:72:a1:ae:b3:39:22:d0:3e:b0:54:67:39:
40:75:25:74:63:83:fc:8f:45:8e:56:f0:9f:3d:60:
9d:49:04:23:45:3b:ba:b2:0c:02:4e:7f:f5:45:c9:
99:41:89:0e:93:4e:5b:ea:6e:99:26:7a:f3:a8:ce:
c3:0d:56:dc:d5:3d:ce:15:78:a4:4e:91:2f:ae:b0:
c4:48:56:8e:99:ad:46:c8:9c:17:40:87:7f:59:68:
19:84:c5:c4:c7:15:b7:2c:7b:a6:d8:e4:ba:dd:6b:
77:8d:0e:d9:f1:11:0f:c2:93:c6:4b:05:93:65:a5:
88:fc:ef:72:35:f9:d8:ef:24:39:9d:0b:56:e6:2b:
e8:26:15:71:ff:2c:f7:6f:7f:f8:49:20:fa:c3:2b:
1a:b8:c6:d4:55:ae:8f:9d:9e:4f:1e:a0:6b:8b:57:
17:a6:78:bf:bc:1c:89:5e:64:7a:1e:bd:80:fe:4c:
94:c4:a8:6c:e1:ad:4a:0d:e0:39:f4:02:9a:41:7a:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:52:52:33:73:9A:86:8F:F8:4C:F4:97:6A:16:F2:2E:27:43:5E
X509v3 Authority Key Identifier:
keyid:C8:88:D9:56:BD:FF:2A:F2:B3:0F:2D:36:41:76:64:DC:00:D9:5C:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yIjZVr3_KvKzDy02QXZk3ADZXOk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:c8:34:54:a4:ce:46:c2:52:79:59:2f:b2:44:61:ca:60:
8f:a4:07:d7:aa:15:e4:7e:e5:7f:40:64:63:29:55:e7:f5:bc:
f9:eb:91:72:5d:eb:fd:eb:10:7b:10:7d:df:c3:b8:07:86:3c:
01:e1:16:72:b6:27:6e:44:93:5e:bb:00:78:fa:b9:48:4f:45:
87:bb:1d:0f:87:8e:7a:87:88:0b:43:96:56:7a:98:00:b2:09:
46:fb:c0:90:a8:52:2a:dd:43:91:0a:8b:9e:96:59:05:de:d0:
32:57:1e:9e:54:92:ce:9d:44:b1:d7:0a:ec:0d:1d:05:52:cb:
1f:98:d7:02:68:7b:de:06:ef:80:f9:bb:2a:72:d9:9f:12:10:
92:e4:74:bb:8f:15:63:36:f2:fa:bc:95:f2:9d:c9:5e:d2:73:
55:91:14:5e:78:cc:54:06:3a:75:d2:03:69:04:0c:90:18:8d:
02:71:9f:ea:c1:d0:f2:4b:57:cd:d3:c2:f1:a8:02:a5:12:af:
fd:65:e2:7e:a1:be:12:db:f3:8a:40:57:b3:0e:9f:48:2f:be:
11:f6:d9:a9:bc:e9:64:b9:df:23:e1:8f:fc:bc:44:bd:c2:a4:
9c:ea:f0:33:7f:bb:c3:37:16:5d:2f:4e:ef:7f:a5:f6:96:d8:
00:8c:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:09 2025 by rpki-client