Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft
File: mrrecAs2LxliBhrdcaRLR6WWdCI.mft (raw, json)
Hash identifier: +p0q6qzdBmJtAZXztaRQsMB80VFubihdw/y2h6siwpc=
Subject key identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B
Authority key identifier: 9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22
Certificate issuer: /CN=9ABADE700B362F1962061ADD71A44B47A5967422
Certificate serial: 0F5D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft
Manifest number: 0F5D
Signing time: Mon 20 Oct 2025 12:09:00 +0000
Manifest this update: Mon 20 Oct 2025 12:09:00 +0000
Manifest next update: Mon 20 Oct 2025 18:09:00 +0000
Files and hashes: 1: mrrecAs2LxliBhrdcaRLR6WWdCI.crl (hash: ZYbTFpCVLeUjGMerFqKbyr1ZGp6QNNLP8+cZzYRqUaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3933 (0xf5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ABADE700B362F1962061ADD71A44B47A5967422
Validity
Not Before: Oct 20 12:09:00 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=236CA93F1D5B9BC23F52190F2875A25D0BEAD53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:18:04:af:03:61:6d:a6:62:30:e1:8b:fd:
57:73:5b:df:6c:8b:d4:94:40:0f:00:21:6f:76:c1:
06:a7:fa:b0:8e:16:44:bf:13:41:15:85:80:45:62:
44:c6:be:db:f9:4b:43:98:db:59:c5:47:34:4d:a9:
94:fd:d3:4b:02:c5:e2:7f:5e:06:b2:9b:a2:95:11:
1a:f9:74:c9:2d:e8:39:6d:46:40:6a:71:29:f4:1e:
21:8f:71:30:09:2a:62:5b:2e:a4:e9:d7:57:c9:c6:
3a:ba:6f:32:95:c0:ea:c7:45:3c:ac:91:20:43:f2:
03:17:4a:5c:c9:9e:a2:70:75:35:9f:6f:40:f6:f4:
0b:66:7b:68:c6:bb:77:f3:56:49:a1:ad:8f:50:de:
df:c1:e5:1f:32:7c:c6:4f:8b:e5:4a:f4:e6:c7:c4:
5e:92:2d:53:02:e0:e3:47:65:63:31:9d:c9:7d:ce:
9c:d2:13:fc:4c:40:b2:7b:7b:b6:d3:32:f4:98:2b:
68:bd:c0:b1:95:7c:b4:f6:43:8a:89:2e:b2:33:f5:
fd:9e:59:54:6a:8e:65:7e:40:d2:c8:fc:d3:9a:db:
05:4c:13:1b:7a:48:1e:52:de:8d:5a:e8:0c:29:f6:
97:c3:30:85:d5:95:23:b0:7d:df:80:ef:8b:d4:5a:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B
X509v3 Authority Key Identifier:
keyid:9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:fa:1f:9e:a8:39:aa:8f:22:e5:d6:23:bc:74:c0:cf:ce:
fe:3f:fc:6c:f2:6d:cf:fb:da:35:d1:9e:27:d0:cd:7c:a4:fc:
a6:ae:89:e7:2b:f3:fe:f1:24:ff:a3:15:44:30:15:06:5d:2f:
a8:fb:ba:b5:2d:e7:6e:43:7a:8c:f6:7f:1e:0c:57:f6:46:70:
86:57:be:35:3c:b1:d1:bf:22:1f:60:4b:75:eb:a2:a2:69:d0:
47:6b:fa:fc:d7:ed:b9:35:0b:fb:95:01:0e:a2:42:b8:cf:0a:
e4:3e:ed:50:0c:87:2e:fa:26:08:94:7b:93:2f:13:ec:17:1d:
02:65:b7:d4:43:9b:83:12:53:4d:7b:53:43:30:06:84:87:b5:
dc:e9:d5:81:e3:42:4b:36:51:0a:07:d6:ff:b9:24:50:ee:4e:
f5:9b:c1:06:7b:43:ec:12:a9:34:ed:b7:5a:11:a3:b8:78:a3:
bd:37:52:80:58:92:29:11:9a:1c:1b:a8:21:66:14:1f:f0:7a:
aa:f3:09:7a:0d:b7:0f:14:61:d1:d6:45:33:b1:ba:12:a7:58:
cd:05:46:4b:80:68:5e:be:3e:72:b9:b9:3a:99:06:51:dc:ef:
ad:77:67:d9:6c:c4:e1:2e:4a:23:13:3d:ed:c2:e0:3f:b7:80:
11:c7:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:13 2025 by rpki-client