Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
File: 1QAwVnGrPHmFR9q6evmujfSpq34.mft (raw, json)
Hash identifier: /4TUb3v/399UfgzBLqy/t/RgjLfmpViLcEI5WYV+ycw=
Subject key identifier: 51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59
Authority key identifier: D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E
Certificate issuer: /CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E
Certificate serial: 0A90
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
Manifest number: 0A90
Signing time: Sun 24 Aug 2025 00:03:35 +0000
Manifest this update: Sun 24 Aug 2025 00:03:35 +0000
Manifest next update: Sun 24 Aug 2025 06:03:35 +0000
Files and hashes: 1: 1QAwVnGrPHmFR9q6evmujfSpq34.crl (hash: C7q9J6sEsqWOKi4zBcRiODwNlAJrmwf/pfjL/1FvIP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E
Validity
Not Before: Aug 24 00:03:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=519BEB121C96ADC56DA70EF392EE915B31F20C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:5a:08:12:50:fa:ce:7c:45:93:8e:c2:f6:
34:b9:5d:99:04:ed:34:b6:83:ce:51:0e:c1:d8:8a:
14:31:34:78:ee:11:e8:2a:6d:b3:19:27:2c:cc:42:
98:88:77:8d:3b:da:71:84:e2:bf:80:38:3d:10:8b:
4e:cd:b7:89:72:95:d6:d2:e5:8e:c9:15:67:df:6e:
49:8e:49:52:59:5b:db:ee:b2:6d:b0:e8:69:f4:68:
2e:af:82:e4:b3:19:42:7f:d1:da:18:88:9c:43:26:
a5:40:23:da:aa:f8:7a:13:ad:c9:75:20:cc:67:4d:
97:f4:7b:ac:01:18:52:84:28:52:24:d6:87:cd:c3:
f1:bf:ab:d7:a0:f2:2c:bf:71:7f:c4:a3:96:e4:91:
d1:53:27:f9:84:60:c8:9a:c0:78:e7:01:39:ec:dd:
ff:27:4c:45:cb:58:48:a9:63:24:91:b5:e5:21:07:
a2:f4:34:14:df:fd:6b:0f:e6:71:72:e2:a1:86:bb:
a8:9f:a3:6c:8b:b0:37:d1:8e:cd:1c:40:71:bd:70:
b2:12:ae:6d:24:56:16:d2:79:db:57:9e:67:54:33:
c7:fc:a2:f2:42:29:c6:5d:64:b7:62:d6:7f:da:cd:
96:f1:ff:1c:ef:fa:e3:54:6f:94:dc:4a:47:f9:52:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59
X509v3 Authority Key Identifier:
keyid:D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:f8:19:bc:1e:c9:1e:ed:f2:b4:0f:7a:a7:ae:a2:09:bf:
54:22:3d:46:4e:f8:cd:85:97:01:83:62:58:ff:ad:84:78:c4:
0a:d2:19:9b:58:5b:c1:8f:df:2d:5d:f0:ab:34:84:21:1e:fa:
b9:06:d0:b7:ca:36:c2:20:72:0a:f3:71:4d:4c:38:a6:7a:a7:
fa:0a:76:e1:71:75:11:69:13:b4:07:5b:c6:61:c9:ef:0b:db:
e3:0f:78:d5:41:4f:88:fe:39:5e:28:e3:ce:31:e4:ab:53:c7:
9e:2f:ae:f9:6f:4d:e0:3e:8e:17:9c:a2:72:8f:60:e0:e4:09:
9e:b5:21:b3:06:6e:a0:4f:9b:7a:97:e0:44:f1:fb:3b:51:41:
2b:ba:97:aa:53:54:40:31:d3:fd:3d:a7:48:77:3e:94:37:b2:
48:65:6e:2f:37:eb:e4:76:27:6a:e3:b5:ca:ee:82:79:8c:3b:
04:d7:42:0a:e6:b9:af:83:f5:24:98:0f:e2:9d:fd:8e:e0:44:
74:98:15:36:3f:a7:af:e4:0b:26:69:9d:bb:29:8d:9a:98:01:
c9:55:46:6e:07:a8:95:8d:83:40:de:af:46:b1:b5:50:30:28:
60:25:e2:9a:1a:2c:e4:37:d1:f5:02:af:1e:67:5c:c8:cd:46:
cd:af:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:34:11 2025 by rpki-client