Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: fVp+xHbuqQTJAsQk9z0+hk0icBAFUO1J92CYkGm2BjQ=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 4E31
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 2C95
Signing time: Sun 24 Aug 2025 05:02:12 +0000
Manifest this update: Sun 24 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 11:02:12 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: aAY1I/8qVugi7P1K1JrVLcHFDqVZQ5WLsyFZ6GAFJO0=)
2: 2HOU41wf-RNx3ns6fUrUfDuRc6U.roa (hash: b3lr36MN4jCPuHOJb0pCCMEylOVXJG558DXiQogiClM=)
3: 4fYbpNe8CQVYM5sf-n1vymbHxB8.roa (hash: AnAnUofisqOZA5C22/BresBuf1+JOGJ2xmaLz1b+fPM=)
4: S1b1QC-7Gd1YelgXPO2pZ0tIwnI.roa (hash: Lh14zV1oLfHMD4mzXC3dalPPWZ3FBceh1noY6QxG4GU=)
5: hClPUnKZuAxsWwfQLw22FkUyHeM.roa (hash: 3jlVgVH+FCbudtpl6tLV+UmB6U3EaSEXQMSz/+0UPtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20017 (0x4e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Aug 24 05:02:12 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:ad:70:40:01:dd:2c:22:a0:b4:f9:c5:75:7b:9b:c9:5c:
7d:08:51:e2:52:24:8c:44:49:ca:a1:dd:13:4b:cc:2c:d4:0a:
cb:4b:47:58:b8:57:3f:6f:fa:34:47:f7:0d:82:86:04:69:f5:
23:c9:07:29:47:56:15:75:6c:a6:8b:85:d5:97:94:b1:a9:c1:
a2:7d:a4:31:94:25:1c:07:e4:99:15:0c:eb:17:e8:ac:b3:e5:
d3:30:6e:f3:ff:c6:37:49:1f:05:d2:fe:1c:a2:57:92:b8:ed:
42:fc:25:c1:47:32:1c:ee:21:e7:f9:be:f6:52:23:c9:28:d3:
90:82:a5:05:68:4a:01:ac:02:56:00:57:0b:47:f6:46:f3:b5:
f4:e0:29:52:a6:21:89:97:fa:df:bb:b7:3b:4e:c0:4a:8e:65:
9f:bb:7b:95:b9:70:74:af:c1:0d:b2:4f:07:5a:97:ba:e7:c8:
70:3b:cf:ea:ba:8a:5e:ee:07:35:47:e6:17:97:15:ac:71:93:
ad:b1:94:df:b7:17:e9:c1:68:54:53:ba:b9:06:fd:28:03:bc:
a1:34:0d:e7:5d:0e:58:d4:7c:dc:80:f1:bc:bf:5e:72:af:38:
6d:c4:f2:6e:09:fb:dd:15:02:db:55:08:66:e9:6c:8d:ad:0a:
76:f0:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:16:23 2025 by rpki-client