Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/TS5d7go2tf_p5yUbBV1NHkKmGIc.mft
File: TS5d7go2tf_p5yUbBV1NHkKmGIc.mft (raw, json)
Hash identifier: ZT8FRbHow9093sxXOCuWHkc7O5Yr5slKgIRMrN35YMk=
Subject key identifier: 90:40:1A:87:A8:3A:65:FD:F0:30:D1:E6:9D:AE:32:0E:98:8C:C5:4B
Authority key identifier: 4D:2E:5D:EE:0A:36:B5:FF:E9:E7:25:1B:05:5D:4D:1E:42:A6:18:87
Certificate issuer: /CN=4D2E5DEE0A36B5FFE9E7251B055D4D1E42A61887
Certificate serial: 0C1C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS5d7go2tf_p5yUbBV1NHkKmGIc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/TS5d7go2tf_p5yUbBV1NHkKmGIc.mft
Manifest number: 0C1C
Signing time: Tue 21 Oct 2025 03:06:04 +0000
Manifest this update: Tue 21 Oct 2025 03:06:04 +0000
Manifest next update: Tue 21 Oct 2025 09:06:04 +0000
Files and hashes: 1: TS5d7go2tf_p5yUbBV1NHkKmGIc.crl (hash: 6rGenoP/RfrhiKtMT/Q4lVUdQ0WP3gXQ+tCBxjXjpHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D2E5DEE0A36B5FFE9E7251B055D4D1E42A61887
Validity
Not Before: Oct 21 03:06:04 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=90401A87A83A65FDF030D1E69DAE320E988CC54B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:f4:b5:01:bc:cb:c6:cc:da:44:10:d7:c6:
1c:c4:12:a2:c0:22:d2:10:61:96:13:6a:ac:76:b6:
18:3c:a4:12:6f:4d:1f:c4:0b:2a:9e:c8:ca:d3:86:
e8:d3:df:da:c0:ba:97:44:7d:82:15:a5:66:7c:a4:
01:10:9c:25:9f:76:3a:3b:74:c3:5a:59:3d:97:80:
38:11:4e:ce:05:c5:49:71:69:a6:95:6f:77:37:fa:
1f:c1:f9:cb:10:7d:4c:39:3f:62:58:39:50:b6:b8:
5c:63:27:72:a6:da:af:19:5d:b7:0f:e2:f4:f0:00:
1e:70:d8:e5:71:d6:9f:8d:a7:74:a1:32:35:ac:eb:
5e:a4:43:b2:61:35:57:d1:77:51:a0:39:3a:1c:c8:
96:4a:41:07:36:83:a2:fc:94:8a:55:c6:8e:7c:c0:
ba:b2:c5:26:2a:50:0b:c1:c6:98:de:a1:f0:18:61:
48:e0:7b:a0:ed:35:2d:d6:e7:6d:4e:9a:a3:bb:e0:
ee:b9:78:11:42:8d:34:c7:d8:c2:62:80:a6:1c:10:
e0:b0:49:92:24:d1:b5:8b:9f:36:f7:a5:ab:fc:66:
af:75:ba:98:9d:a2:14:ba:78:18:42:c5:5c:2c:c5:
ae:d4:7e:48:c0:54:7d:2e:f9:eb:f0:3c:84:b5:66:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:1A:87:A8:3A:65:FD:F0:30:D1:E6:9D:AE:32:0E:98:8C:C5:4B
X509v3 Authority Key Identifier:
keyid:4D:2E:5D:EE:0A:36:B5:FF:E9:E7:25:1B:05:5D:4D:1E:42:A6:18:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/TS5d7go2tf_p5yUbBV1NHkKmGIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS5d7go2tf_p5yUbBV1NHkKmGIc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/TS5d7go2tf_p5yUbBV1NHkKmGIc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:fd:b8:7f:83:87:ce:5b:44:19:62:bf:4f:b0:7d:a8:e2:
c1:c3:b2:69:33:70:32:9e:95:04:64:50:ce:37:6f:fc:95:18:
d4:a8:23:b0:01:e4:24:dc:47:c8:51:11:4c:d7:e6:d7:c2:84:
e5:be:b8:28:73:d3:e4:80:44:ea:5d:5b:24:b8:b5:50:07:b1:
31:2b:ab:58:bf:ce:90:21:a7:12:88:b8:2d:e5:b1:ab:ac:f1:
50:ef:cf:ee:67:47:a6:ac:e2:cc:b2:2e:cf:d4:1f:ce:c8:ee:
30:36:2f:a5:4e:e8:cd:09:9e:5f:23:dd:8a:30:3b:15:2d:06:
fd:a1:27:c4:07:d8:6d:94:bb:e7:89:15:ae:ba:89:35:82:04:
41:aa:26:84:51:67:7b:ce:1b:47:b2:09:d1:db:e4:c1:b1:ea:
e2:ca:9b:f9:48:7c:96:7d:f2:77:bd:0c:eb:70:fa:9a:51:a4:
90:b1:a9:dd:8d:a8:b9:42:39:92:ea:29:1e:e6:55:8d:4f:17:
b0:e0:af:48:ae:86:cd:ec:10:35:d5:f0:0f:5e:d1:b1:9e:d5:
ec:ec:26:6c:e1:cc:d5:cc:87:b4:66:98:3f:c5:68:11:d6:4d:
4d:b9:3b:dc:f7:31:e8:f0:d6:eb:dd:f5:f0:3e:b8:14:ae:59:
69:5b:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:12 2025 by rpki-client