Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
File: g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft (raw, json)
Hash identifier: 6c7H/sonXnD6vMoSRqP8/r2G+DsDr5t8e0FTdGEEV78=
Subject key identifier: 70:B5:D5:E3:57:44:42:A0:C2:98:7E:6D:B0:3A:35:5E:40:F8:B1:53
Authority key identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44
Certificate issuer: /CN=835518B3540E89A2C3983213E02FEAAB77BDA544
Certificate serial: 0E80
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
Manifest number: 0E80
Signing time: Sun 24 Aug 2025 02:06:00 +0000
Manifest this update: Sun 24 Aug 2025 02:06:00 +0000
Manifest next update: Sun 24 Aug 2025 08:06:00 +0000
Files and hashes: 1: g1UYs1QOiaLDmDIT4C_qq3e9pUQ.crl (hash: ZOzBhvKAA18wWo7q0PtMDSas5l3rbfINBMHIoyjAGPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3712 (0xe80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835518B3540E89A2C3983213E02FEAAB77BDA544
Validity
Not Before: Aug 24 02:06:00 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=70B5D5E3574442A0C2987E6DB03A355E40F8B153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:42:32:c2:8e:52:16:e5:e1:ee:c4:e0:2c:
e7:0d:06:ac:17:56:47:b2:f0:66:77:c6:5a:e4:e9:
f5:6a:1b:d7:b0:b2:96:29:ea:75:b0:ac:33:12:7c:
aa:42:33:56:37:5e:c3:e1:92:59:79:96:19:30:fc:
5e:10:dd:4e:56:c7:61:53:90:db:54:27:89:72:65:
85:1d:3d:e3:d4:02:50:44:ef:97:88:a4:59:7f:76:
14:1a:c3:76:a0:c7:ba:87:8a:4d:34:bd:44:af:c1:
94:d5:90:07:9b:69:3e:80:f3:82:ba:eb:18:52:a6:
af:bc:00:33:a8:87:8c:35:3a:5f:09:1a:28:8d:6f:
b7:cd:17:12:08:f4:f0:ac:0e:a0:87:1d:b5:0d:cb:
1e:a7:82:ef:a3:f3:3b:b6:09:fb:59:ea:25:f5:b5:
e6:26:f4:c4:76:ba:92:ea:de:53:34:9a:d8:ca:a6:
17:a1:02:8d:33:2c:38:30:90:ba:5c:ed:27:92:40:
0c:7c:65:ea:b5:7f:a2:b7:88:5d:f5:71:24:9d:27:
bf:14:5d:6f:ce:2d:e4:f5:73:7b:60:2c:71:de:44:
e8:2a:35:75:42:58:1b:8f:f9:93:90:e8:57:a3:8a:
3b:b2:6c:10:c3:a4:12:2c:27:d3:ab:ed:d8:72:a7:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:D5:E3:57:44:42:A0:C2:98:7E:6D:B0:3A:35:5E:40:F8:B1:53
X509v3 Authority Key Identifier:
keyid:83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:36:4b:4b:3b:14:03:b3:af:57:43:2a:0f:22:28:73:a6:78:
64:dd:8c:a8:ae:42:9a:d2:1f:74:1d:1b:ab:25:5c:a6:8a:c3:
f7:57:32:fa:b7:93:d5:91:cf:25:c7:d4:b3:b5:20:51:9b:11:
9a:bd:1c:c3:b5:39:3e:58:ac:17:a3:76:d5:8b:0d:73:2f:31:
02:2d:18:51:70:a1:90:d5:49:65:e5:72:4c:ac:e5:37:05:5d:
d3:c0:b5:68:48:e8:dd:4c:2f:60:3f:00:b1:44:9a:e3:dc:7c:
ec:b8:7f:98:f7:f7:52:09:7e:94:30:b2:df:4d:e4:e5:50:44:
9e:0f:1d:6c:32:c9:1c:f9:de:df:93:af:03:0d:79:a4:f7:84:
3f:11:89:12:0d:9d:3a:fb:f4:b5:b3:b3:6e:cf:a4:1d:2f:05:
62:1a:68:f8:0a:f3:1d:7a:3e:b4:f0:fd:d7:bb:4a:f5:17:d3:
fc:7e:99:57:36:ce:a8:74:c8:7d:c8:72:61:6f:d3:09:66:70:
04:6a:2d:a8:01:c9:04:6f:f7:38:b2:90:0c:a0:67:65:07:67:
d7:79:ba:0d:fa:64:cf:e1:4d:37:18:90:9a:76:2f:23:78:2d:
7a:27:9d:af:44:84:53:73:dd:e4:41:e1:ad:ae:99:88:37:d9:
31:f9:76:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:01:53 2025 by rpki-client