Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
File: 2wnDhcqGTQSV-VGV_38HvFdh4XY.mft (raw, json)
Hash identifier: 2bmyStGMdjJRyi6qIacBK66k5u4tOEU+KvkARDqHCMY=
Subject key identifier: 04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
Authority key identifier: DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
Certificate issuer: /CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Certificate serial: 062B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
Manifest number: 062B
Signing time: Tue 21 Oct 2025 03:07:19 +0000
Manifest this update: Tue 21 Oct 2025 03:07:19 +0000
Manifest next update: Tue 21 Oct 2025 09:07:19 +0000
Files and hashes: 1: 2wnDhcqGTQSV-VGV_38HvFdh4XY.crl (hash: 8IFCa02UaGdUj9XFfSrp3e8MOlDGokKHFkR51Fcy1wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Validity
Not Before: Oct 21 03:07:19 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=041AA5E81743B74248C3C196FF3D9237B7687FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:76:e4:6b:ce:10:9a:1b:62:cc:f1:71:7e:
61:36:c7:6b:20:47:da:a5:25:c4:bc:d0:40:10:60:
35:fd:34:4c:6b:c5:32:bf:8b:d8:d4:36:a3:2a:63:
51:5a:a4:3f:a8:d8:71:40:65:03:dc:8d:bc:4f:7f:
4a:aa:8c:80:55:83:73:ef:9a:4e:92:94:1d:b4:bd:
eb:37:17:2c:32:a1:35:26:32:fc:aa:00:cf:9d:d3:
49:74:19:ca:0d:92:0d:29:b5:f8:ad:88:67:db:3a:
92:17:68:83:a9:dc:51:09:5f:f6:5d:7c:b1:34:37:
f4:73:d9:01:14:88:09:e0:94:f4:59:f2:8a:01:98:
36:20:d7:59:9c:65:e5:4a:20:b6:e8:47:fb:ea:c6:
cc:13:56:a1:a0:63:d5:d4:13:e8:6e:86:04:cb:4e:
f2:0a:5d:27:82:4c:16:86:7d:b4:87:b3:aa:49:48:
df:a0:d3:20:29:9f:08:fc:64:79:84:22:16:50:d0:
63:ea:89:4d:d1:08:87:13:04:7a:17:4e:97:fc:e7:
5d:14:6d:af:83:03:16:b3:7e:23:58:a9:7e:b5:12:
ae:4b:b3:74:84:fd:7b:6a:c0:f4:49:7c:e3:d6:66:
54:b9:d7:dd:44:50:85:04:8e:78:5a:ed:2c:04:96:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
X509v3 Authority Key Identifier:
keyid:DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:9d:3c:f4:2e:19:e7:57:5a:9c:9f:e0:20:00:5c:a4:56:
df:ef:01:00:f2:75:ca:e3:22:22:64:37:be:c3:fd:2d:4a:67:
ea:e5:fb:d3:5a:b6:8a:2d:32:2f:8c:57:7b:d7:32:67:bf:6e:
da:b3:9d:29:a7:38:74:11:e8:78:e7:2e:df:1e:f7:43:a6:85:
53:2d:80:fb:b7:69:11:bc:71:43:bd:a2:e2:07:95:24:b9:15:
ef:38:d0:7f:a1:6b:f4:74:5e:e6:a8:d9:f0:a8:87:21:c9:cc:
00:08:2e:94:05:3f:39:ac:04:34:c5:57:00:f2:ec:00:27:4c:
18:48:27:96:13:0a:e5:41:d7:a5:ab:04:fc:7e:27:3a:0d:80:
21:98:bd:ab:9c:a4:53:4b:fa:47:02:9d:a3:fa:a6:60:3f:c1:
67:09:3a:cb:ab:06:03:b8:01:65:43:6c:8b:a6:b8:d9:51:07:
0d:45:1f:a9:a0:a2:7e:a7:c4:e5:bd:95:78:ce:60:b4:e2:72:
93:4a:cb:03:6d:f1:98:15:2d:38:b5:8e:ab:56:21:25:e3:b6:
da:46:39:9b:10:b5:32:8c:c5:bb:f7:e6:d8:00:0e:a5:d4:4e:
c1:2b:a9:30:d9:e4:db:ae:6e:72:e3:fd:f8:ea:b4:17:00:76:
5f:c2:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:14:03 2025 by rpki-client