Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
File: -apYG28sznwRZ_8uDAIJY5n_aHQ.mft (raw, json)
Hash identifier: uRCzcQu83KiUXMNrS9/CN+VPVqzUbFp9wD99+yHp2Mc=
Subject key identifier: F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
Authority key identifier: F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
Certificate issuer: /CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Certificate serial: 09AF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
Manifest number: 09AF
Signing time: Tue 21 Oct 2025 03:04:24 +0000
Manifest this update: Tue 21 Oct 2025 03:04:24 +0000
Manifest next update: Tue 21 Oct 2025 09:04:24 +0000
Files and hashes: 1: -apYG28sznwRZ_8uDAIJY5n_aHQ.crl (hash: ZobvJ7RE7o+BgOR5dTi2v/0ELFqriTWK91lAVWR4OSI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Validity
Not Before: Oct 21 03:04:24 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=F6BE244A9EA105ACF95769A4EE1FE02A7635E532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ac:c3:8a:ec:46:74:e6:0f:fd:0b:2c:51:
0e:25:65:06:03:2f:b6:88:d0:2d:b7:b4:5c:11:2a:
c1:9c:81:61:5f:b8:c5:76:cf:d0:66:9d:49:1b:75:
39:e5:76:e3:07:4c:bb:98:71:9b:c1:b1:19:7d:b2:
47:f7:aa:25:c9:95:fc:15:8c:75:f3:d9:7f:02:26:
54:04:8b:25:4c:01:0d:9c:cf:34:6e:c8:9a:a5:3f:
a7:b9:27:63:76:cd:0c:f7:2d:e0:4d:43:fa:30:55:
c3:ca:59:eb:d9:1d:be:74:84:b4:c9:c5:55:62:40:
c4:ef:aa:3b:3a:c2:42:a2:59:e8:81:e8:ed:df:87:
4c:ae:a7:a9:23:d6:4d:8b:7a:e8:ff:91:15:c4:73:
84:02:79:2d:28:57:ec:8a:9e:ee:52:08:23:0b:9f:
26:2c:73:44:db:61:e4:db:5a:5d:80:b9:53:ca:c4:
29:a5:cf:c1:3a:73:c1:89:ea:49:38:d2:3f:f8:3f:
1e:99:df:a4:09:fd:5c:e4:0c:83:e9:48:2d:c4:72:
1d:65:92:82:40:12:e9:4e:d8:f0:db:85:a5:85:0e:
e6:7c:cb:26:76:69:44:4f:16:44:5e:8e:49:3e:7e:
74:eb:16:87:d6:8b:b9:d7:2b:6f:51:85:0b:66:d3:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
X509v3 Authority Key Identifier:
keyid:F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c8:19:ca:a5:03:fd:9e:fe:f5:5b:87:4b:4b:9d:68:e9:ff:
eb:d7:3f:5d:72:44:7c:f2:73:c7:24:ec:72:0c:ec:d2:9c:b0:
5b:58:66:65:5a:1b:99:26:06:a1:25:f7:4d:7e:db:51:b9:a8:
40:60:52:dd:28:d4:cb:85:b4:dd:fe:dc:82:c3:af:58:d0:f6:
8a:de:e5:a1:b1:1f:96:41:cc:28:f0:5a:55:b4:e4:07:4f:a2:
12:93:07:69:33:33:cb:b5:dc:ef:b5:c4:1e:26:0f:04:75:f0:
36:41:ed:a1:be:6f:7a:56:4b:ad:9e:25:ba:b4:86:b0:84:67:
fd:05:84:1a:76:dc:33:12:a2:10:32:ce:0d:7d:3c:85:5e:ee:
3a:71:92:16:7f:1d:c9:94:fd:ea:0c:91:6d:bf:27:f0:d1:33:
b9:78:26:45:71:f2:a1:a2:ae:20:08:fe:52:d6:e0:ae:54:f7:
48:b8:e2:9a:f2:9d:d3:4b:a3:1d:96:b9:bf:f1:b1:de:24:39:
1f:89:fc:40:d3:21:af:77:71:56:cd:6e:37:f1:2c:88:3b:0e:
7b:11:02:c2:da:76:b9:58:28:3f:1a:c9:a7:42:9a:19:ff:db:
55:ba:c9:a7:84:cd:7b:fa:d2:41:7c:62:14:44:6d:60:19:47:
39:90:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:13 2025 by rpki-client