Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
File: 43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json)
Hash identifier: kevL7KoYmZorY7jY3f2+7+BkS2jwhnlbtj+/oHZwyvU=
Subject key identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
Certificate issuer: /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Certificate serial: 0A12
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
Manifest number: 0A12
Signing time: Tue 21 Oct 2025 03:06:57 +0000
Manifest this update: Tue 21 Oct 2025 03:06:57 +0000
Manifest next update: Tue 21 Oct 2025 09:06:57 +0000
Files and hashes: 1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: zRoGf5mXFIVFPLz96gs54f15jy4xJwaSsNCg8gIf6x0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Validity
Not Before: Oct 21 03:06:57 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=11520E6037D0A611A827119800481055018824E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e:
b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63:
76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d:
61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4:
4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20:
22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0:
60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c:
62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2:
84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f:
54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2:
bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60:
87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82:
03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2:
3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70:
8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53:
71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea:
e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
X509v3 Authority Key Identifier:
keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ed:cb:93:2b:fa:f9:29:e0:0a:b4:21:9c:8c:e2:70:e2:15:
03:27:50:73:6f:b0:0d:cb:c6:fc:14:a3:10:c1:c1:91:ba:3c:
d7:47:a9:25:6f:15:f9:3c:4a:c8:a0:95:95:ba:1b:5c:dd:7b:
bf:0d:dc:74:e1:6c:0d:9e:eb:0b:5e:da:4c:ac:cc:9a:f8:f1:
ce:1a:37:fc:4c:d3:aa:ae:23:ab:52:ba:78:ca:09:9f:16:b2:
00:a4:08:f2:af:76:ce:04:bf:23:19:3e:39:77:64:67:57:a8:
68:7a:ae:53:4e:2f:56:d7:3c:54:f3:a8:cb:54:79:24:62:87:
c4:44:7f:50:46:d2:49:d2:7b:9e:2c:fb:d5:24:4a:42:1e:3f:
ed:5d:ee:b2:5b:02:e1:a6:30:16:e9:b2:42:1f:9d:77:16:b7:
70:b7:41:be:a4:9e:ca:ed:eb:01:a7:66:92:bb:b1:a9:85:99:
8f:40:20:e2:d4:ed:32:23:58:08:f6:43:54:ef:cc:68:20:31:
00:4a:33:66:cd:6c:29:f0:63:7a:19:19:ee:99:da:3b:5c:f4:
e8:bf:ea:40:22:c2:1c:b3:5d:e5:ed:02:81:f7:3b:1d:3a:f9:
ff:54:f4:8e:e9:38:11:d4:26:c9:38:e6:49:bc:75:90:61:fa:
9d:23:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:14 2025 by rpki-client