Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json)
Hash identifier: 0ynU32c6X5DY+ZBxyEEgDeQ0Y5PsCxarZ2kzkHG4/Oo=
Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3
Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA
Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA
Certificate serial: 0C14
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
Manifest number: 0C14
Signing time: Sat 23 Aug 2025 16:04:36 +0000
Manifest this update: Sat 23 Aug 2025 16:04:36 +0000
Manifest next update: Sat 23 Aug 2025 22:04:36 +0000
Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: 5F66NmU0ViJ3MG5oIor8TI9R/I0iHPjplM3CIpi+jiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA
Validity
Not Before: Aug 23 16:04:36 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92:
31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4:
43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de:
82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef:
2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b:
50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77:
e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce:
cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7:
08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85:
f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11:
95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02:
5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89:
58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b:
84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44:
15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91:
25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f:
40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3
X509v3 Authority Key Identifier:
keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4b:32:72:2b:6a:ed:40:5e:e8:4d:e5:66:41:0e:8c:04:7d:
b9:ad:06:47:ff:49:5f:ed:6c:a7:2d:75:0b:ba:d4:31:49:3f:
da:a2:ba:c3:74:ba:87:8a:e8:07:c0:b2:a8:48:4b:82:de:05:
e9:e8:38:f5:3b:4f:ec:22:88:40:43:81:5d:f8:2a:58:6d:f5:
fe:58:32:a8:c8:6f:8e:d1:03:0a:ae:3c:53:81:49:91:cf:6d:
a0:bd:b5:3d:ca:60:88:e6:ad:f8:20:7e:89:7b:d9:e0:20:5c:
5e:e4:52:c3:94:ed:55:cd:d0:1b:c1:e5:75:a7:67:53:6a:69:
07:f9:63:48:da:14:4b:82:e1:9e:b5:e8:b9:68:9f:51:fe:ca:
8c:24:d7:80:c8:7c:94:ee:85:41:29:88:9c:6c:fb:28:87:e6:
91:f9:60:36:26:07:d3:76:58:a3:6b:b9:d6:ab:c5:6c:0d:c2:
79:ab:41:50:c5:c2:2c:de:52:9a:86:7e:ff:2d:b5:96:cf:32:
8d:89:b3:79:f9:41:f5:2a:30:42:83:5c:10:d6:09:17:9a:02:
63:f9:1a:e7:35:13:76:5d:3c:0b:df:19:f5:70:18:94:27:59:
42:bd:93:71:38:f3:cd:ef:d2:d7:9a:de:01:c1:96:e5:0a:28:
7a:06:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:43 2025 by rpki-client