Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft (raw, json)
Hash identifier: AYn6NBp8V84K+2KQj6DGehKrHcmnfaKm+yIopJ0tiro=
Subject key identifier: D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45
Authority key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
Certificate issuer: /CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9
Certificate serial: 097F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
Manifest number: 097F
Signing time: Mon 20 Oct 2025 07:36:30 +0000
Manifest this update: Mon 20 Oct 2025 07:36:30 +0000
Manifest next update: Mon 20 Oct 2025 13:36:30 +0000
Files and hashes: 1: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl (hash: 2h9rwIEZLkt4TKHS2RYVe1TJqBkT+ygECmDFL6LW/Uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9
Validity
Not Before: Oct 20 07:36:30 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D6B5D0D793BEE5208699C6F0E215FCD9707B1F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:d3:0e:1b:f9:dc:f6:c3:da:9d:8d:58:6b:
30:74:cc:fd:09:29:47:9c:42:0f:f9:5a:0c:5b:55:
53:de:89:be:bb:75:56:38:3b:da:0d:68:d3:2b:70:
b1:26:7a:56:ae:ba:25:52:b2:76:d1:4e:f7:45:ca:
d6:71:1f:b7:99:69:7a:00:54:ef:ae:86:fc:af:88:
78:a4:02:52:49:6e:1e:42:20:5c:5d:d4:93:21:45:
e6:2d:9b:4f:d4:1f:4a:75:a5:6a:62:9e:42:77:a2:
77:67:7b:8f:c8:cc:8a:b3:cc:64:11:c1:42:46:c4:
0a:8c:18:e6:ab:8d:da:1e:5b:5f:69:c8:02:8d:00:
ba:8d:99:4a:00:a9:63:9f:e1:98:17:5f:7e:e0:c9:
13:28:4f:df:dd:a6:7c:e5:95:05:b2:4b:fa:50:54:
fd:70:66:ba:85:3d:a9:a7:dd:04:08:ed:40:c0:21:
de:12:93:80:09:36:b2:16:c0:04:3a:5f:a1:12:18:
c6:5a:ec:e1:a5:92:18:ee:25:d9:96:fa:43:60:f4:
51:89:df:74:0e:96:d3:3a:54:72:a0:e3:b5:f8:b0:
97:44:2b:86:d0:c0:ee:6c:00:55:a1:de:ba:7e:79:
43:e8:04:5c:5f:7a:20:47:ad:55:f9:6f:15:cb:99:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45
X509v3 Authority Key Identifier:
keyid:AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:25:d9:b5:d4:31:f1:e2:2e:da:22:24:9a:3b:25:8f:c0:
5c:26:33:94:3f:ef:ec:ec:32:dc:09:77:44:34:17:cc:28:94:
ac:84:77:f9:e2:d6:d1:2a:94:51:23:f2:33:5f:85:b8:64:1e:
a8:30:a4:5b:b8:b9:4b:a0:6f:c7:52:61:7c:82:e8:f9:2e:2a:
f9:ed:14:c2:0f:48:2b:1b:5f:01:28:fe:b1:8f:4c:0a:02:62:
c2:00:62:c7:0c:71:8d:ae:1d:33:60:0d:72:0f:01:7f:d5:f4:
ae:1a:fd:25:94:36:a9:e9:d5:b6:2d:f5:75:a2:62:04:f4:c1:
c8:a8:a0:f3:5d:c9:7e:0c:42:b2:6c:10:3d:24:f0:32:14:8a:
fd:d4:c2:5c:74:95:17:87:3d:bd:4e:66:be:22:86:8f:ac:23:
1c:35:fa:3f:19:2b:9e:4b:3e:79:a5:4f:83:f1:0f:f3:60:75:
2a:f8:62:32:b9:3c:46:ef:fe:ee:1b:84:25:20:e7:67:8d:24:
6f:8f:d1:41:22:5f:fe:80:ff:5f:be:0e:f2:56:f2:3f:fb:51:
82:3a:73:ca:2f:a6:a3:01:80:f4:bb:38:15:2d:d0:8d:13:63:
54:44:f0:a0:7d:83:dc:8c:46:6b:c5:49:0b:3a:77:34:90:c3:
d0:50:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:42 2025 by rpki-client