
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
File: kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft (raw, json)
Hash identifier: eYDpA16g5Zmt6aX3sQMHt7s1PbKRfrwBKnfNfyWEVQc=
Subject key identifier: 02:BE:71:AB:DC:17:50:55:EE:56:6B:24:25:4B:64:E8:B0:74:2F:4B
Authority key identifier: 90:77:E7:B0:AF:58:0F:78:FE:01:06:99:FA:0D:B8:10:7E:18:6F:07
Certificate issuer: /CN=9077E7B0AF580F78FE010699FA0DB8107E186F07
Certificate serial: 083D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
Manifest number: 083B
Signing time: Sat 29 Mar 2025 09:27:15 +0000
Manifest this update: Sat 29 Mar 2025 09:27:15 +0000
Manifest next update: Sat 29 Mar 2025 15:27:15 +0000
Files and hashes: 1: kHfnsK9YD3j-AQaZ-g24EH4Ybwc.crl (hash: /k9CWpfmIKeBR5XuNqOhnWxcSjJwr0d9I2yiGVkPxrk=)
2: pAdMn1MlkjJlCVSP2QmkkAwaBc8.roa (hash: 1Ko/Sx6oQmP0Opi3hp+4gnvjm2R0mnMU8LAySvjv/+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9077E7B0AF580F78FE010699FA0DB8107E186F07
Validity
Not Before: Mar 29 09:27:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02BE71ABDC175055EE566B24254B64E8B0742F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:bd:b4:6b:bd:11:af:30:2c:d0:71:fd:49:
1f:03:b2:6b:b5:d8:8d:53:07:dd:d3:83:d6:09:75:
9c:d1:03:b3:14:fb:e4:07:00:76:be:03:b6:13:6d:
82:32:7e:39:ab:c4:dd:18:d1:e4:a7:a1:72:07:12:
3f:1d:da:60:0c:05:cb:3e:a7:7c:2d:eb:a1:77:3a:
6e:95:7e:6a:0f:b3:d0:cf:d9:d5:72:88:87:7b:bf:
cd:45:d8:3d:b7:5a:51:9a:c5:82:33:0c:ca:f8:46:
0f:5c:ba:16:92:05:2f:cc:cd:bd:d7:dc:95:5b:40:
3e:56:bf:65:af:99:b1:23:83:5c:d3:23:46:4b:c0:
1f:db:a0:fa:f9:10:a3:35:29:c7:1b:49:c0:a0:88:
66:f7:f0:f2:b4:e4:12:d7:f2:45:10:5a:be:9a:8a:
bb:68:30:a3:62:6e:df:30:e5:58:0c:e4:03:22:bd:
b6:bb:b5:6c:27:fa:4c:62:02:b3:03:d9:f3:2c:4b:
93:97:3b:1c:3d:3a:d5:e6:ba:81:ad:c0:84:99:c2:
b0:a0:b6:b9:cf:04:5f:c9:57:91:d7:68:a4:65:fe:
3d:d2:e0:1e:5b:94:f5:63:c0:3c:ce:bb:da:8d:ae:
8e:76:32:4c:b2:dd:4e:6c:a0:9b:2d:4b:ad:3a:c1:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BE:71:AB:DC:17:50:55:EE:56:6B:24:25:4B:64:E8:B0:74:2F:4B
X509v3 Authority Key Identifier:
keyid:90:77:E7:B0:AF:58:0F:78:FE:01:06:99:FA:0D:B8:10:7E:18:6F:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ce:32:b5:f1:b3:8b:7d:22:7c:b5:95:1f:90:22:ed:df:da:
a0:c6:f3:f0:69:02:23:1b:21:8a:6f:a9:29:d1:65:93:2f:3d:
34:31:64:e1:8f:9f:10:bb:6c:43:3f:52:4a:8e:59:95:db:39:
c5:88:c1:83:94:d5:81:db:c9:d6:ec:44:1e:12:1f:af:59:4c:
07:52:00:7a:fb:08:ec:88:92:b9:d9:3b:1e:33:db:c4:c4:d9:
17:e2:12:16:99:50:7d:16:96:24:4a:d1:6e:8b:aa:73:0e:55:
ec:b2:b3:68:11:39:72:68:5a:45:d5:85:b1:10:09:f5:61:c9:
e1:30:9c:36:bb:ed:36:23:b9:a7:f0:b3:0d:54:cd:6f:b7:fd:
ba:84:b3:22:e7:e1:b1:e5:83:1c:d1:35:19:ca:f4:d3:6e:c1:
f1:a6:f8:64:af:ef:9b:b6:67:f4:ec:36:96:7a:fc:a5:dd:d6:
72:0d:cb:87:26:d6:e8:60:4e:73:92:e9:52:98:58:6f:85:95:
9a:c5:b3:45:21:5b:ea:dc:ac:a0:8d:55:c5:87:f4:10:07:a6:
04:47:ec:45:9b:05:cc:d3:ef:d2:8c:60:37:7e:0d:56:c6:10:
4a:35:c9:24:7b:b3:3d:0f:07:9b:81:68:37:95:b9:3a:fb:5c:
b7:3f:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:59:46 2025 by rpki-client