Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
File: KiJnreDthkvp9oLDpe2qFRu6hmQ.mft (raw, json)
Hash identifier: z/mCR5xzJd8WpcND91+QdoTs1VLF02ZzLpYk7fcsdpQ=
Subject key identifier: 9D:B8:B3:1D:70:A0:9D:50:14:14:79:71:2B:74:C8:29:C7:59:61:89
Authority key identifier: 2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64
Certificate issuer: /CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664
Certificate serial: 0A56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 16:04:57 +0000
Manifest this update: Sat 23 Aug 2025 16:04:57 +0000
Manifest next update: Sat 23 Aug 2025 22:04:57 +0000
Files and hashes: 1: KiJnreDthkvp9oLDpe2qFRu6hmQ.crl (hash: ngCPWD0RtzcvLiFXI2paOKSn1atC6Q4ePpiDVM1FAT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2646 (0xa56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664
Validity
Not Before: Aug 23 16:04:57 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=9DB8B31D70A09D50141479712B74C829C7596189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:f4:b4:fc:14:06:23:af:c2:7f:14:0d:38:
0c:fa:8f:a1:9f:f8:90:2d:50:98:3c:36:e2:7a:9e:
07:98:0c:ec:e3:4b:b0:7c:f6:62:11:04:69:1b:2b:
39:07:4d:56:32:8f:78:5c:53:35:eb:b1:24:d1:cd:
74:3f:1c:33:ec:0e:b5:1c:f2:ea:24:02:65:29:54:
9a:20:01:8e:25:a7:90:a0:1d:dc:6c:9c:b5:71:fd:
af:cf:07:dd:0e:5d:13:d1:7b:cd:5d:f0:d5:aa:67:
82:8e:db:33:c0:b2:99:6a:93:53:e4:da:7e:2c:a5:
5b:05:94:38:51:fc:96:7c:2b:6f:c9:3a:9e:95:05:
ef:90:9d:13:de:47:31:13:cf:dc:dd:bb:02:a1:f4:
6a:93:a8:67:3b:da:05:ba:6b:e5:b7:09:54:c8:10:
04:80:59:11:39:be:fb:d9:51:cf:d5:b4:bb:1e:3a:
f4:8d:ba:02:7b:9d:a9:93:6e:8d:ed:a9:f3:dc:97:
ef:ac:17:ad:e0:17:be:22:24:b8:0a:60:e7:8c:f9:
e0:ab:58:cf:be:b3:fd:c8:b7:04:8b:df:3b:26:bf:
7e:79:78:e0:fd:f6:e0:fb:79:ee:88:52:dc:aa:23:
1c:53:f2:83:a0:a9:7b:ca:10:00:1a:5b:72:e9:09:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:B3:1D:70:A0:9D:50:14:14:79:71:2B:74:C8:29:C7:59:61:89
X509v3 Authority Key Identifier:
keyid:2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:6d:71:59:1b:5d:ce:22:76:3b:6d:27:f5:9d:b2:de:fd:
c1:b5:f3:16:f7:45:26:f3:2b:aa:81:38:af:89:c6:82:04:25:
de:82:7a:de:2b:26:5d:9d:09:11:b6:86:c5:41:28:ea:12:5c:
13:62:98:1a:53:16:9a:30:e3:ec:08:08:3d:c2:54:14:3c:da:
fc:a3:b2:50:d7:5b:7f:b9:6c:4f:24:e7:82:88:13:46:1b:80:
f6:9e:f3:4d:88:65:70:8a:f4:9e:68:16:60:9f:24:7f:ce:1d:
08:1f:fd:4e:a1:ce:6b:c2:6f:f1:2d:75:45:22:ff:dc:46:5b:
82:38:ec:75:da:6e:7a:14:48:24:75:bb:ab:e4:0c:e4:e6:66:
93:31:91:83:c9:6e:23:89:1c:3b:e2:45:d6:07:90:30:a1:c6:
e7:de:7c:c3:e0:0c:14:7d:42:66:05:95:fe:a9:66:fd:18:5c:
91:3d:c2:fb:67:53:57:5a:9e:18:8b:7b:83:46:99:91:7e:60:
ae:2d:c0:46:1a:7e:e9:43:66:9d:58:59:7c:ed:41:04:4f:f5:
98:d1:e6:43:74:41:dc:60:d6:c1:27:80:5e:a1:69:34:5e:3f:
c3:5e:06:dc:76:57:2e:fd:27:21:0b:e5:fe:bb:98:d4:16:1c:
a6:d0:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:24 2025 by rpki-client