Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft (raw, json)
Hash identifier: 4lm3rIceKvDCcilwx+tbrlLuhREmMoI0RP5cIB6J/Zc=
Subject key identifier: 7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
Authority key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
Certificate issuer: /CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Certificate serial: 0744
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
Manifest number: 0744
Signing time: Tue 21 Oct 2025 03:08:21 +0000
Manifest this update: Tue 21 Oct 2025 03:08:21 +0000
Manifest next update: Tue 21 Oct 2025 09:08:21 +0000
Files and hashes: 1: o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl (hash: xe/JX7U6teJlDC5NbWI/hN26K1vP6fsE8v8SOb+2weQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Validity
Not Before: Oct 21 03:08:21 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7DBCF4A1EA8EEB3E124E8E23CE7F82EEDDF04BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:95:67:6c:b0:cd:c7:64:a1:13:8e:d9:0d:
8d:96:58:1d:08:c8:2c:68:59:8a:4b:2a:92:76:32:
07:01:1d:ab:14:13:b2:ce:a1:06:a5:9b:84:5c:1c:
f8:a3:c2:22:9f:6a:5c:0e:f5:95:3b:4e:55:01:2e:
6e:17:d8:04:f1:c3:43:91:0a:b6:4e:01:cc:4d:6d:
66:ba:99:a5:a1:dd:0f:92:6e:ef:fa:55:e4:3f:16:
12:1d:85:09:6d:29:a0:57:1c:07:8f:a9:6b:ee:4f:
c7:ec:36:26:a6:f8:5a:0f:2b:24:7a:7c:c7:72:f4:
48:42:89:55:2d:21:d0:fe:de:be:51:86:02:d6:19:
38:32:ad:02:c7:d7:68:d5:7e:76:47:39:5d:01:42:
ed:ff:a1:f2:d8:e7:c3:ba:48:2b:e7:1b:ed:85:14:
23:56:60:aa:7b:95:6d:c7:1d:bf:f3:0a:a7:00:95:
ff:23:69:7a:be:8a:5c:7e:4c:ef:e5:12:77:c5:a5:
d1:44:61:77:6f:31:7a:8c:ed:49:3e:c9:2f:bd:ed:
ab:e6:75:17:61:3a:d3:ea:ef:6a:fe:74:9e:53:95:
be:f1:c7:28:dc:18:2d:c5:76:f8:15:59:77:df:c2:
8e:b3:19:c7:7e:0a:8e:d1:3d:6e:f5:87:c0:6e:42:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
X509v3 Authority Key Identifier:
keyid:A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:42:fd:b7:5d:31:6c:f6:ac:38:b4:58:e5:eb:95:92:ca:
1a:cc:14:9c:39:13:44:db:ff:1c:61:3f:50:24:c0:ef:75:94:
a2:d3:c2:2f:af:c5:6f:e6:f8:c6:7d:e9:40:63:54:cd:ab:66:
6a:8e:02:65:bd:60:75:8f:e9:22:be:aa:47:61:63:7a:71:5c:
ed:0c:8b:36:a6:ed:d2:0c:07:21:49:8f:f5:03:03:60:b7:35:
de:6a:96:90:ff:f3:88:6f:43:25:79:b3:00:37:6e:93:4e:24:
3d:b5:70:79:3a:9e:85:fb:08:b8:6b:d7:7d:e9:65:eb:9f:5a:
a5:ac:82:bc:ac:ea:b1:8b:cb:e4:bf:c3:21:d2:e0:d0:fe:aa:
0b:e7:cb:75:b3:c9:c4:9b:60:68:ed:ea:d5:d6:04:f7:32:c8:
5d:af:07:53:59:e0:52:5d:99:20:95:9c:42:b4:74:9a:fe:de:
bc:0f:ec:46:80:6e:18:a3:c5:77:ed:8d:de:be:ec:ef:36:3b:
dc:12:5f:73:d9:9f:90:fc:fd:c7:9c:37:c4:d1:0b:d9:4a:1c:
22:6b:4c:6b:ef:26:76:0c:f1:7f:79:f6:79:4d:1a:03:61:7b:
fc:ad:d7:ed:22:fa:32:b0:71:bb:6a:4e:7d:da:a4:ad:8b:ba:
88:71:36:9a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM4
RDVGM0VBNjU0QUQ4QzZENjU0REE1QkU5MDhBNjU4RjI2NkU2NDAeFw0yNTEwMjEw
MzA4MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdEQkNGNEExRUE4RUVC
M0UxMjRFOEUyM0NFN0Y4MkVFRERGMDRCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXtJVnbLDNx2ShE47ZDY2WWB0IyCxoWYpLKpJ2MgcBHasUE7LO
oQalm4RcHPijwiKfalwO9ZU7TlUBLm4X2ATxw0ORCrZOAcxNbWa6maWh3Q+Sbu/6
VeQ/FhIdhQltKaBXHAePqWvuT8fsNiam+FoPKyR6fMdy9EhCiVUtIdD+3r5RhgLW
GTgyrQLH12jVfnZHOV0BQu3/ofLY58O6SCvnG+2FFCNWYKp7lW3HHb/zCqcAlf8j
aXq+ilx+TO/lEnfFpdFEYXdvMXqM7Uk+yS+97avmdRdhOtPq72r+dJ5Tlb7xxyjc
GC3FdvgVWXffwo6zGcd+Co7RPW71h8BuQmDbAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUfbz0oeqO6z4STo4jzn+C7t3wS8AwHwYDVR0jBBgwFoAUo41fPqZUrYxtZU2l
vpCKZY8mbmQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx
OS9vNDFmUHFaVXJZeHRaVTJsdnBDS1pZOG1ibVEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL280MWZQcVpVcll4dFpVMmx2cENLWlk4bWJtUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvbzQxZlBxWlVyWXh0
WlUybHZwQ0taWThtYm1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAfSQv23XTFs9qw4tFjl65WSyhrMFJw5E0Tb/xxhP1AkwO91lKLTwi+vxW/m
+MZ96UBjVM2rZmqOAmW9YHWP6SK+qkdhY3pxXO0Mizam7dIMByFJj/UDA2C3Nd5q
lpD/84hvQyV5swA3bpNOJD21cHk6noX7CLhr133pZeufWqWsgrys6rGLy+S/wyHS
4ND+qgvny3WzycSbYGjt6tXWBPcyyF2vB1NZ4FJdmSCVnEK0dJr+3rwP7EaAbhij
xXftjd6+7O82O9wSX3PZn5D8/cecN8TRC9lKHCJrTGvvJnYM8X959nlNGgNhe/yt
1+0i+jKwcbtqTn3apK2LuohxNpo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:41 2025 by rpki-client