Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
File: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft (raw, json)
Hash identifier: 2KYZGc2gAE7kxNMc9X0zglY3hZwaJTXAG04YQIDxRxI=
Subject key identifier: 4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79
Authority key identifier: 85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54
Certificate issuer: /CN=857F208698A249A0596079DE4F3DAE5FA7B96754
Certificate serial: 0B39
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
Manifest number: 0B39
Signing time: Sat 23 Aug 2025 16:03:52 +0000
Manifest this update: Sat 23 Aug 2025 16:03:52 +0000
Manifest next update: Sat 23 Aug 2025 22:03:52 +0000
Files and hashes: 1: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl (hash: P89NeHj//jQPyc+MiR25PPGuPIb1e29EhHKqkb+GSdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857F208698A249A0596079DE4F3DAE5FA7B96754
Validity
Not Before: Aug 23 16:03:52 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4D2836422DA4F14F8E8A7E1DDAA17BD2F2CF6279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:61:84:f2:15:6d:fb:f5:6d:1c:83:13:14:
46:d6:5f:2d:2e:43:72:41:d8:d1:e4:3a:ce:59:76:
0a:bb:77:95:38:9e:b5:ec:4f:d6:b2:17:78:c6:29:
03:5e:6c:85:17:f3:8b:5f:28:e8:8e:51:c4:f0:24:
56:16:e3:f0:03:d2:e8:f5:da:aa:0e:a7:c6:fa:6c:
1f:66:60:7e:72:9c:6e:44:95:00:10:e6:e0:38:90:
c1:f1:47:a3:33:63:bc:d6:85:92:5f:02:7c:e6:8c:
1e:4c:20:54:a3:77:ed:ca:8e:31:e3:8f:1d:62:14:
12:91:24:f2:28:30:a2:e1:70:54:ca:81:f1:3f:07:
4c:1f:e6:18:c0:df:9b:04:d7:61:63:f6:4a:b7:9a:
41:ea:38:f4:4f:65:75:92:26:97:0a:9f:39:4b:b1:
95:98:ce:a0:0a:48:2b:4c:52:26:91:22:1a:45:58:
5e:40:5e:ba:b9:52:80:58:9e:4a:7c:db:1a:dc:85:
d0:1e:e9:9a:08:d5:9d:47:48:46:ed:dc:e3:80:d8:
49:67:c5:9f:10:1b:db:6e:18:69:4b:72:06:ee:f1:
1f:8b:1e:2a:c7:60:e5:2b:90:f3:49:eb:f7:43:1e:
d3:c1:59:81:1a:51:f6:a6:24:17:3f:1f:33:94:28:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79
X509v3 Authority Key Identifier:
keyid:85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:6b:55:98:ac:d5:05:d2:49:b7:a8:b2:f0:7e:a4:42:e4:a3:
ae:83:42:14:61:94:11:68:b3:58:dd:74:8b:a7:6a:6f:4c:f5:
28:e3:83:09:d9:de:c0:91:aa:eb:73:35:cf:1d:1e:2d:19:0f:
db:ae:02:15:6f:0a:80:07:73:16:ed:c4:d7:8d:83:b1:6c:61:
00:6a:fc:56:c6:e3:2e:80:bd:04:bc:30:8f:46:93:66:e5:2b:
8a:9b:54:cf:55:96:1f:07:fe:3d:2c:54:06:6d:c1:ad:75:5d:
f7:e7:0d:a6:c1:75:7b:c1:3e:df:17:4e:5d:63:1b:62:1b:5d:
0b:62:8a:72:35:c4:bb:71:07:72:d7:7b:82:b8:8d:b3:5d:1b:
50:a5:e9:4f:44:42:9a:80:f4:65:10:5c:4e:62:6c:65:29:3d:
b8:e8:c7:8f:9a:60:5a:7d:4c:32:97:e1:16:40:c1:71:ed:10:
5f:b8:73:60:32:c4:05:75:63:58:c5:4b:af:6d:00:c7:62:3f:
ac:6d:49:22:ca:c9:b8:46:44:c9:21:be:eb:14:28:f9:12:a5:
15:b6:b4:cb:e5:5f:4a:e8:e3:20:b8:66:4b:a5:cd:22:b0:14:
43:20:3c:92:d3:de:8d:39:ce:b7:09:4e:ec:dd:db:0e:71:54:
6b:a1:a7:6c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU3
RjIwODY5OEEyNDlBMDU5NjA3OURFNEYzREFFNUZBN0I5Njc1NDAeFw0yNTA4MjMx
NjAzNTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDREMjgzNjQyMkRBNEYx
NEY4RThBN0UxRERBQTE3QkQyRjJDRjYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6wWGE8hVt+/VtHIMTFEbWXy0uQ3JB2NHkOs5Zdgq7d5U4nrXs
T9ayF3jGKQNebIUX84tfKOiOUcTwJFYW4/AD0uj12qoOp8b6bB9mYH5ynG5ElQAQ
5uA4kMHxR6MzY7zWhZJfAnzmjB5MIFSjd+3KjjHjjx1iFBKRJPIoMKLhcFTKgfE/
B0wf5hjA35sE12Fj9kq3mkHqOPRPZXWSJpcKnzlLsZWYzqAKSCtMUiaRIhpFWF5A
Xrq5UoBYnkp82xrchdAe6ZoI1Z1HSEbt3OOA2ElnxZ8QG9tuGGlLcgbu8R+LHirH
YOUrkPNJ6/dDHtPBWYEaUfamJBc/HzOUKBJ1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUTSg2Qi2k8U+Oin4d2qF70vLPYnkwHwYDVR0jBBgwFoAUhX8ghpiiSaBZYHne
Tz2uX6e5Z1QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
OS9oWDhnaHBpaVNhQlpZSG5lVHoydVg2ZTVaMVEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2hYOGdocGlpU2FCWllIbmVUejJ1WDZlNVoxUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTkvaFg4Z2hwaWlTYUJa
WUhuZVR6MnVYNmU1WjFRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACdrVZis1QXSSbeosvB+pELko66DQhRhlBFos1jddIunam9M9SjjgwnZ3sCR
qutzNc8dHi0ZD9uuAhVvCoAHcxbtxNeNg7FsYQBq/FbG4y6AvQS8MI9Gk2blK4qb
VM9Vlh8H/j0sVAZtwa11XffnDabBdXvBPt8XTl1jG2IbXQtiinI1xLtxB3LXe4K4
jbNdG1Cl6U9EQpqA9GUQXE5ibGUpPbjox4+aYFp9TDKX4RZAwXHtEF+4c2AyxAV1
Y1jFS69tAMdiP6xtSSLKybhGRMkhvusUKPkSpRW2tMvlX0ro4yC4ZkulzSKwFEMg
PJLT3o05zrcJTuzd2w5xVGuhp2w=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:13 2025 by rpki-client