Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
File: fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json)
Hash identifier: JdxMNMsAXnpUO+Dqe7vlEN4PWO3GVBZWKHgB4G2/WOc=
Subject key identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A
Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60
Certificate issuer: /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360
Certificate serial: 095A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
Manifest number: 095A
Signing time: Tue 21 Oct 2025 05:34:10 +0000
Manifest this update: Tue 21 Oct 2025 05:34:10 +0000
Manifest next update: Tue 21 Oct 2025 11:34:10 +0000
Files and hashes: 1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: /G7V7mM0pmAZPY9xZLZRbA6g8+dbdF+9Bz3UeKBuafc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360
Validity
Not Before: Oct 21 05:34:10 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0:
a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82:
16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04:
91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43:
6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a:
17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96:
cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe:
0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af:
ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3:
0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47:
d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5:
ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22:
61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb:
d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9:
da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d:
7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61:
87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A
X509v3 Authority Key Identifier:
keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:58:88:e9:c7:6d:c8:b4:68:5c:47:d0:38:85:b9:07:a0:b8:
7f:96:ad:08:80:29:88:a0:d5:6f:c4:f8:64:38:9f:ba:83:2d:
fc:2d:37:8d:e4:02:8c:eb:ba:dd:b3:3c:c5:19:19:d9:a9:56:
82:5b:c6:56:8e:c9:db:5c:6b:d9:8f:2d:d3:1b:6c:cb:37:44:
cc:b9:2f:d5:84:62:02:67:d1:d9:15:a7:f8:92:93:83:c8:56:
58:bc:ef:22:8d:b3:84:0b:ca:f0:0c:0f:f4:c8:aa:6f:cd:cc:
5f:4e:00:98:0c:9b:5f:af:72:7c:ec:e7:7c:3b:d7:7e:38:ea:
4e:36:94:2f:b3:c6:38:46:9a:b2:da:4d:0c:7c:f3:bd:3c:3a:
55:9f:a9:05:cf:36:46:df:ec:26:96:d4:e8:3d:57:59:c8:ff:
6e:29:79:bc:7c:33:52:11:1c:64:07:04:b9:ef:ca:64:5d:16:
19:ea:82:ae:d9:2b:37:8b:6e:dd:1d:21:a4:5b:0d:4f:ad:d2:
cc:82:e0:47:ef:d8:2c:81:91:8f:c5:ac:95:46:c6:bc:93:1b:
c6:1f:15:15:98:55:44:c5:38:18:a0:96:46:1d:e6:00:8c:a1:
8d:48:9b:8a:64:8d:fa:fb:ae:23:6f:7b:a3:79:b0:0f:94:13:
c1:95:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:35 2025 by rpki-client