Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
File: OCdChXYoqbKyIFmuiEdvIwYL6tA.mft (raw, json)
Hash identifier: RYIvSYY5BZHwgpRpPa9K4fzKFsGvITETEywcIWY3yuc=
Subject key identifier: 28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05
Authority key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
Certificate issuer: /CN=382742857628A9B2B22059AE88476F23060BEAD0
Certificate serial: 0571
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
Manifest number: 0571
Signing time: Sun 24 Aug 2025 02:04:38 +0000
Manifest this update: Sun 24 Aug 2025 02:04:38 +0000
Manifest next update: Sun 24 Aug 2025 08:04:38 +0000
Files and hashes: 1: OCdChXYoqbKyIFmuiEdvIwYL6tA.crl (hash: OM0UuYvAZXf3buKm0j2g5VrfsTUCYzZKhtth3wU3qdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382742857628A9B2B22059AE88476F23060BEAD0
Validity
Not Before: Aug 24 02:04:38 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=28215B2684B251CBC16E81F45A46658D87987305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:72:d5:94:16:40:a9:56:11:27:83:ad:c9:
ac:73:2e:26:c8:68:e4:37:1c:e2:b9:5d:8a:dc:5d:
52:91:42:3b:2e:de:b3:6e:fb:38:6c:62:43:f2:65:
fe:2d:44:45:7d:02:5c:fb:a1:47:11:13:de:41:4b:
e9:61:23:81:c1:3c:01:8c:a8:0c:1b:2b:47:6e:19:
76:95:78:de:65:db:39:ce:e0:22:0e:f5:e1:af:50:
40:ed:f6:61:24:bf:62:9f:a0:eb:d9:b4:02:f1:ea:
85:d3:3d:5e:85:3b:d0:19:a7:a5:e5:cc:a8:12:69:
a0:7b:a1:8b:61:e3:bc:89:4a:5e:8a:2b:eb:9c:90:
c5:6c:a9:6b:a7:08:2b:86:ba:2e:62:d7:77:ef:ab:
37:a1:fa:a1:c6:27:4e:8f:b0:83:bb:7a:98:51:bd:
d9:c4:aa:06:f2:99:ec:0a:ac:d2:44:d7:21:1d:80:
f3:d8:6a:3f:70:e1:2f:01:12:2e:8c:85:b2:f7:0e:
f7:d9:ae:c6:09:03:cd:cd:05:0b:24:bb:11:96:78:
38:bb:bd:68:67:78:5d:33:a8:1e:f6:97:cc:61:ec:
a5:11:dc:9e:e2:70:3c:31:72:f5:59:be:13:fe:f5:
5c:38:80:94:e7:6d:06:32:ca:d6:37:3a:eb:b5:19:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05
X509v3 Authority Key Identifier:
keyid:38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:a7:6d:c8:06:c8:07:04:04:e3:13:c8:7f:1a:2a:a9:21:22:
9e:5e:6e:1b:f6:06:9f:28:a0:0e:1b:2e:f7:07:e9:fd:0f:c8:
ac:46:da:5a:4d:e1:0b:9e:d4:b1:5b:92:18:24:94:b3:9e:03:
85:d4:a0:ae:63:48:a4:a6:90:fc:cf:64:a8:74:99:ba:2f:1b:
7c:7a:9e:ad:90:16:99:e7:0b:69:38:5f:fe:2e:fe:df:8a:0f:
2e:d9:08:d7:7f:56:9b:85:ba:df:3b:03:16:15:2f:76:ea:60:
37:48:a0:00:ac:df:65:92:1a:c3:49:56:7d:da:71:e8:59:8c:
63:83:08:95:36:f3:45:3f:2e:9c:c1:2d:62:72:1f:08:86:ad:
72:20:64:5f:27:a5:7a:fe:ef:97:89:a3:0e:d3:06:40:12:54:
29:6e:d6:e5:ba:21:d5:f6:30:cd:ae:b3:cb:42:c0:79:f2:7b:
79:e8:9b:b4:f1:ab:36:df:3c:70:8a:03:17:32:7b:e7:25:11:
d2:13:37:dd:47:71:a2:93:4b:25:23:a1:95:ce:2c:c1:b2:10:
89:6b:1a:d2:78:da:09:be:71:dd:ef:e0:80:24:7b:39:d3:d5:
d2:41:2b:7d:f1:dd:ea:d3:9c:25:43:3d:a7:6d:dd:58:88:76:
8b:9f:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:37:19 2025 by rpki-client