Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft
File: kOpMYj8LihBi2qgOqaj0R49Z3oU.mft (raw, json)
Hash identifier: Zjkx6Ip3v4iiUkK+1p/aHasynfAZP07ZPC6UgTsjGfY=
Subject key identifier: 14:3E:EE:FE:12:08:DB:B6:7D:A9:53:F5:54:2B:95:1C:DF:56:0F:F0
Authority key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85
Certificate issuer: /CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85
Certificate serial: 09CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft
Manifest number: 09CA
Signing time: Sun 24 Aug 2025 02:05:59 +0000
Manifest this update: Sun 24 Aug 2025 02:05:59 +0000
Manifest next update: Sun 24 Aug 2025 08:05:59 +0000
Files and hashes: 1: kOpMYj8LihBi2qgOqaj0R49Z3oU.crl (hash: LfsLDIzfB7Ua3/6J1f32Z4L1TjQmvl4VTZ3l/BQL4AA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2506 (0x9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85
Validity
Not Before: Aug 24 02:05:59 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=143EEEFE1208DBB67DA953F5542B951CDF560FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:e8:f9:51:72:bd:f8:a3:49:d8:ab:7e:aa:
a3:cc:28:a1:fb:5b:74:e3:a0:5f:7b:99:a5:f9:26:
e8:12:6d:46:15:bc:ca:55:de:ff:37:96:fa:17:70:
9d:8f:52:40:b7:7c:97:d9:d6:e1:87:3e:3a:c1:fd:
21:66:93:03:c3:4e:0c:85:c6:28:8b:0d:e4:2e:71:
f4:12:85:5c:63:2f:8c:28:d7:66:ad:e0:d5:48:fb:
f2:c5:5c:67:42:f7:f8:30:33:74:99:56:39:80:a0:
ed:66:5b:7c:88:85:fa:59:05:b1:21:67:0a:b6:1e:
cc:2a:cd:79:f5:61:48:18:95:dd:61:50:ce:e6:d5:
d8:87:91:08:36:9e:f3:9a:e7:a2:be:53:06:8e:45:
04:93:bb:04:07:75:58:39:7d:0a:ce:fd:52:42:c9:
e6:66:19:ad:15:cb:11:ae:35:a6:de:87:44:48:82:
e0:31:06:b7:98:b9:6b:e1:22:7b:07:82:22:96:41:
ae:af:51:d0:51:c3:c9:02:79:e8:0d:0a:cd:98:ef:
66:fc:fd:a2:86:c0:a3:0b:35:84:4b:6b:7d:57:93:
14:bd:94:2b:a0:4b:48:0b:58:a2:1a:6e:f3:b4:e2:
c0:97:59:25:20:02:bd:ed:c6:8c:b4:fa:63:53:03:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:EE:FE:12:08:DB:B6:7D:A9:53:F5:54:2B:95:1C:DF:56:0F:F0
X509v3 Authority Key Identifier:
keyid:90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6a:17:a8:36:e8:c4:35:58:ad:ea:e3:7b:9b:c3:de:86:cb:
81:76:09:67:a1:f4:0a:38:26:63:89:28:e3:22:36:d5:f5:1f:
de:b1:c3:6e:c4:e9:c2:56:00:75:71:8e:09:bd:8e:67:95:8f:
5e:7b:64:90:b4:d6:a5:ab:cd:f8:1d:47:3c:8b:23:b7:2c:51:
3c:2a:38:d7:42:dd:33:8c:98:03:23:32:95:f9:f1:01:9a:35:
cd:a4:77:12:e1:90:b8:fe:6f:7a:75:e3:46:75:90:0e:e5:1c:
af:c9:32:00:47:2f:ce:48:fc:66:8f:e2:ac:42:a3:3d:74:a0:
4d:fe:4f:5f:b2:04:d3:5a:45:b3:f0:82:a1:fe:ed:0e:8a:3c:
d5:68:dd:2c:0d:61:93:f0:91:e0:99:a2:13:b5:f6:62:44:0e:
91:6b:8c:f6:68:81:11:0d:5f:ce:ef:7c:f1:65:05:f7:dd:90:
60:fe:20:48:69:8c:5a:7d:b4:65:b0:e8:d0:ec:be:17:c2:49:
0a:3d:17:0f:c8:e9:df:9b:29:1f:be:f1:26:29:5a:60:a6:2e:
14:7b:87:93:39:07:96:92:cc:51:db:41:be:58:a3:80:39:a1:
62:48:a8:42:93:26:9a:ca:2b:08:f5:36:15:11:8b:9d:e1:98:
f5:11:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:16:19 2025 by rpki-client