Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json)
Hash identifier: Q2EXVD7xdsdfvgqIFhHr0QkoOd4giXd13iT5zQeTmW4=
Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09
Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC
Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC
Certificate serial: 068B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
Manifest number: 068B
Signing time: Tue 21 Oct 2025 03:07:54 +0000
Manifest this update: Tue 21 Oct 2025 03:07:54 +0000
Manifest next update: Tue 21 Oct 2025 09:07:54 +0000
Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: sW//FrH4k8ZZ2M5JA5X/2NuMTh6VJVX3Y6jOZld0gzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC
Validity
Not Before: Oct 21 03:07:54 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01:
96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb:
52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43:
c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66:
bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10:
13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02:
12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2:
ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f:
18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20:
dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4:
fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81:
a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab:
84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72:
08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca:
6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18:
ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24:
cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09
X509v3 Authority Key Identifier:
keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:4a:ce:dd:35:55:4b:16:92:95:76:0c:b4:99:f7:f1:a6:46:
e3:77:e7:84:7c:a4:49:9c:7b:23:dd:9c:57:ae:56:8d:69:9c:
a3:08:c7:48:32:44:92:be:97:d3:f5:f4:4c:52:c8:d4:11:05:
d7:31:8d:63:30:fe:02:03:e1:9c:6b:71:11:48:f3:59:71:b2:
63:98:e0:be:db:a0:df:c1:7a:dc:23:b7:b7:f2:2a:39:b1:f4:
35:d7:d7:82:fe:22:87:ed:1e:8c:71:4e:d3:c3:d5:b6:48:96:
60:18:10:67:7e:2e:86:af:ba:47:d2:ab:8a:9b:a9:5c:ea:07:
ec:d3:b3:1e:a5:8b:08:a6:5b:9d:a6:88:97:fd:6e:ad:c0:de:
83:a6:67:d1:ae:36:f8:16:80:bf:ce:26:86:e7:f7:69:4d:c6:
ad:40:a3:79:cf:7d:02:73:14:3b:ae:ef:f9:e5:f8:ef:e2:d3:
9d:d3:01:99:e4:28:48:3f:6a:5c:48:f3:9b:10:d5:a3:99:36:
08:61:0a:85:c2:27:c8:57:e3:b8:2d:86:64:e6:74:f7:64:f3:
2e:71:8e:4c:0c:b3:7e:52:a5:c4:d4:d4:0a:de:d1:7f:91:ad:
73:cc:d7:26:de:96:e2:0e:51:c4:5b:93:a7:a9:e6:22:f4:2c:
45:cf:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:08:59 2025 by rpki-client