Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json)
Hash identifier: j7Pl7I34Wx8wU57fZm3DxAOewktDFD6Q1uY7PSqZFCU=
Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Certificate serial: 05D0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
Manifest number: 05D0
Signing time: Tue 21 Oct 2025 03:08:07 +0000
Manifest this update: Tue 21 Oct 2025 03:08:07 +0000
Manifest next update: Tue 21 Oct 2025 09:08:07 +0000
Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: zm8d+Q86h8nG5ywt6U7OTHdJp+zP8gc/JGov3wn05SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Validity
Not Before: Oct 21 03:08:07 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83:
20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4:
66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71:
86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59:
a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81:
43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0:
d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50:
78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1:
2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45:
d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68:
4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f:
c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07:
60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d:
cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88:
31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3:
ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2:
fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
X509v3 Authority Key Identifier:
keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:f1:1c:50:80:2b:25:8b:5f:a1:8b:ae:07:68:07:4e:34:
c3:b7:11:4a:f2:b8:c0:cf:b5:14:93:78:b1:bb:87:a9:70:62:
c5:03:37:d3:b3:02:ef:d1:7b:61:0b:36:bb:b5:73:5a:60:4a:
01:51:a2:b3:31:0f:8c:3a:01:71:3d:9b:19:2d:15:f5:a4:69:
fc:c1:ac:17:71:34:f8:0d:9c:a9:7e:46:1b:63:1c:69:84:80:
38:cf:28:46:a7:6c:90:38:96:2f:97:5c:d9:89:85:40:f4:1a:
80:d4:47:b8:9c:3e:77:53:83:ca:6b:f4:db:20:02:c5:a0:bd:
21:d9:96:06:41:ee:e2:01:20:6f:7d:c0:fb:10:48:41:3a:6a:
1c:03:6e:9c:52:fe:2d:9e:d5:fc:4d:49:53:55:24:94:53:1e:
3a:1e:01:31:7f:a9:33:93:b5:21:ba:f6:7d:f5:1f:82:6b:a0:
d0:5a:a4:98:33:98:e0:c4:f4:20:f5:12:d9:21:af:a7:15:91:
7e:55:27:96:00:08:2f:11:34:77:f5:da:55:9c:78:97:35:3c:
eb:9c:3c:6a:c4:4c:eb:ae:ad:0b:b9:26:8b:86:22:ec:44:72:
60:5e:7c:f1:1d:01:52:55:77:ff:75:bc:56:fd:71:79:b6:2b:
c9:58:f4:44
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzUz
QUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIzODAeFw0yNTEwMjEw
MzA4MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM4QzMxOEI5QzgzRTQ4
MDRDNTBEQUM2NkQ2OUVDMENGN0I1M0U0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDp+WUC0bJtI8B2OYM/gyDMkb9FqjRlVjnV9ORC1GZZPfwXRUOw
i5c06JkccYbV4145kmBj0Bo3RqlkWanTufL7MUJcxeKH5R/jgUNQBzU2MIhX1jHW
3H3D8NlX4CO+In0dn+aHLKj4UHj24ZVcgmUaEGWoKUmj0SuiGjgNyzYYPamegxbV
RdZ83p3n2IuidhBPxc04aEqwgkb3W37Xe+rxaV2Cn8NyGS+Tw+fIcgjbCyp+B2AR
4tjHAhCR6JQ/9QbZTcv86Z1ECgXI2s26aIcQiDFBPCRySgAYvVpVlHnO8+rF8wQ5
8lP/ZTbGXrJosv0C9krUbUEjiBVaWMMe+PKpAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUyMMYucg+SATFDaxm1p7Az3tT5K8wHwYDVR0jBBgwFoAUxTr0BD/E0rAIWIIi
mrJ1BLaoIjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
MS94VHIwQkRfRTByQUlXSUlpbXJKMUJMYW9JamcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEveFRyMEJEX0UwckFJ
V0lJaW1ySjFCTGFvSWpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJ/d8RxQgCsli1+hi64HaAdONMO3EUryuMDPtRSTeLG7h6lwYsUDN9OzAu/R
e2ELNru1c1pgSgFRorMxD4w6AXE9mxktFfWkafzBrBdxNPgNnKl+RhtjHGmEgDjP
KEanbJA4li+XXNmJhUD0GoDUR7icPndTg8pr9NsgAsWgvSHZlgZB7uIBIG99wPsQ
SEE6ahwDbpxS/i2e1fxNSVNVJJRTHjoeATF/qTOTtSG69n31H4JroNBapJgzmODE
9CD1Etkhr6cVkX5VJ5YACC8RNHf12lWceJc1POucPGrETOuurQu5JouGIuxEcmBe
fPEdAVJVd/91vFb9cXm2K8lY9EQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:38 2025 by rpki-client