Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
File: YBt2TrIFMYSt13mb83x-Ctsz99w.mft (raw, json)
Hash identifier: FmIMGje6nfyToShFBRX4Xi8hnKHHdgL/mVTjdA/i5BY=
Subject key identifier: B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
Authority key identifier: 60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Certificate issuer: /CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Certificate serial: 0513
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
Manifest number: 0513
Signing time: Sat 23 Aug 2025 16:05:01 +0000
Manifest this update: Sat 23 Aug 2025 16:05:01 +0000
Manifest next update: Sat 23 Aug 2025 22:05:01 +0000
Files and hashes: 1: YBt2TrIFMYSt13mb83x-Ctsz99w.crl (hash: ZdmMV7Eg8VPmNKj+JxhknUYMNmlNrd53Lw0YkJ12/1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Validity
Not Before: Aug 23 16:05:01 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B17C3CF44BF980D1A0BF8E7479DA9078E8290A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:eb:28:ea:a9:81:15:e8:67:3f:e4:f3:8a:
14:e9:34:01:10:18:8d:d3:fb:a9:6a:ed:20:f6:02:
72:24:f9:94:e1:cc:e5:9a:94:95:d1:bf:0b:fd:0e:
d7:fc:4c:c7:06:e7:99:e1:aa:fd:93:f6:05:76:69:
f8:28:79:bc:77:65:1a:1c:da:11:24:68:6d:7f:1f:
e8:34:2b:ab:73:bf:ca:23:95:b9:57:40:e3:70:71:
f0:02:3c:40:22:9c:ae:65:97:7d:cc:d4:50:41:17:
a2:11:16:e8:69:cc:2a:38:eb:6a:6f:98:83:14:99:
7e:d1:ec:11:11:5b:a2:42:ed:d7:00:96:5c:51:f2:
0a:3c:53:af:c7:16:a2:e5:9c:c4:51:cc:bc:5f:49:
e2:f8:6f:4c:c8:12:6e:32:14:23:34:1d:84:77:6f:
40:4d:aa:5a:a7:a3:b5:8a:27:62:64:8a:53:b1:60:
77:b5:ee:d5:f7:20:1c:35:fc:9e:b7:08:ca:42:34:
5f:22:a9:f7:98:2c:3f:eb:40:dc:16:55:97:e9:da:
6b:a4:fd:8e:46:7f:bd:a0:94:d2:b4:08:c6:df:a8:
61:1a:f2:0a:57:ac:97:65:73:88:d2:3c:2e:3c:63:
eb:87:e2:40:0d:58:9a:a8:0a:6b:9e:31:59:d2:36:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
X509v3 Authority Key Identifier:
keyid:60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6a:fd:90:3f:91:e7:21:42:c7:d9:d0:c2:70:52:8b:05:5e:
af:d6:32:d1:4e:8c:f6:75:d0:b5:94:7c:d8:96:f7:4d:67:cd:
10:3c:44:89:0f:23:4e:0d:26:9d:8b:d2:19:65:9f:29:03:8c:
87:79:23:c1:5a:1f:b1:17:5e:d4:a5:2f:6d:07:65:0d:de:90:
93:4c:27:34:da:09:b7:0d:ef:0c:de:26:9d:fb:2f:fe:87:9f:
a1:62:a6:c9:53:4a:c5:89:08:ee:f3:c5:39:91:6d:52:6e:ed:
0b:bb:2e:0b:77:52:04:69:53:ff:05:69:73:ea:b4:a7:cb:d5:
65:52:e5:0d:0f:4e:13:53:e4:d2:7d:0a:d9:33:bc:1e:18:df:
f0:c6:b0:53:21:4e:20:44:bd:92:92:af:a1:6c:1a:59:09:c2:
51:c8:79:44:a5:89:b1:ba:fd:17:b2:60:d6:ed:b3:27:02:8a:
7f:b1:03:ad:72:7d:74:d7:6a:43:6f:21:88:f8:72:e9:b9:2f:
2e:06:5c:34:9e:32:17:15:51:33:07:4b:64:cd:8e:0b:c2:ee:
66:e6:91:c5:00:1d:cf:97:d8:68:b6:6b:32:c6:f9:b9:ff:3e:
6e:1c:b1:f7:2f:fe:6d:66:53:f8:30:a3:b4:8d:d8:32:3d:1d:
6a:26:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:34 2025 by rpki-client