Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json)
Hash identifier: 2zhwmfxQVN34PuFl7AZ76Xjm4hy4IUE8BnygIjREy6k=
Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Certificate serial: 0944
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
Manifest number: 0944
Signing time: Tue 21 Oct 2025 03:07:01 +0000
Manifest this update: Tue 21 Oct 2025 03:07:01 +0000
Manifest next update: Tue 21 Oct 2025 09:07:01 +0000
Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: F9d/QcJbYVPsSJy2MDnk+jJ+M0wC9ZyTA9KgwCTQAAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372 (0x944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Validity
Not Before: Oct 21 03:07:01 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24:
aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e:
ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae:
75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a:
08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44:
f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a:
13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1:
9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f:
3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b:
d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99:
26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28:
e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49:
5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a:
a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a:
87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28:
6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0:
d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
X509v3 Authority Key Identifier:
keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7c:ca:9c:14:a8:63:db:3d:4c:c4:81:22:b5:8e:84:65:36:
21:5d:1d:b8:f7:1c:c4:bf:e2:9a:6f:09:9d:0c:07:c4:40:4b:
a8:dc:25:71:15:16:82:1a:09:a3:e0:45:e3:30:6c:d3:e9:36:
3a:0c:7d:ea:f4:d8:9f:40:c5:da:04:f1:28:ac:69:27:49:7c:
b6:bd:05:4a:75:86:de:68:00:8b:6d:12:a7:a3:33:99:14:68:
2a:2f:65:aa:b7:a3:dd:7c:76:f9:49:6f:9b:df:70:ce:f4:4f:
c0:36:9f:6b:a5:ef:d5:fb:0c:27:9b:f1:d5:24:35:44:8a:35:
b8:84:74:33:5b:52:04:9e:07:5e:83:bb:a5:8e:64:3d:5d:89:
07:67:a9:2e:64:b5:0c:ca:3b:77:58:dc:ea:c4:6a:21:6f:f4:
e4:ee:b5:61:e4:b0:b9:7f:14:89:00:aa:01:b4:98:02:52:54:
7b:d5:2a:80:ec:f3:3f:96:cc:0b:1d:05:cb:8e:15:21:7a:2e:
57:9f:39:4c:f3:82:d9:5e:bf:bf:7f:0c:04:eb:ac:06:8c:6e:
b8:c6:1c:70:be:f0:b0:60:1a:3f:84:24:b6:dc:11:7e:13:69:
9b:ac:e0:ae:86:14:86:1d:c7:89:14:91:44:70:44:5b:e5:c5:
b5:32:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:07 2025 by rpki-client