Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft
File: xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft (raw, json)
Hash identifier: 5xs0hxstDdnWZlnVcoDpI/UpSW6ZiTMX4iKdb4o1xoE=
Subject key identifier: 9F:9F:D7:7C:42:8A:22:10:D4:59:6D:86:9B:62:A5:3F:EA:4E:5B:36
Authority key identifier: C6:72:8F:33:8C:FF:81:21:5A:8A:84:51:30:FF:53:8C:51:78:C7:46
Certificate issuer: /CN=C6728F338CFF81215A8A845130FF538C5178C746
Certificate serial: 01F1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft
Manifest number: 01F1
Signing time: Wed 16 Apr 2025 18:35:48 +0000
Manifest this update: Wed 16 Apr 2025 18:35:48 +0000
Manifest next update: Thu 17 Apr 2025 00:35:48 +0000
Files and hashes: 1: xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl (hash: u0U26OOHovDl1QQssbJQ/jD6SOY4p1gRs8Ijr3lHGB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6728F338CFF81215A8A845130FF538C5178C746
Validity
Not Before: Apr 16 18:35:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9F9FD77C428A2210D4596D869B62A53FEA4E5B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:db:33:d6:35:7f:68:1e:7f:57:9d:12:42:
4e:97:69:b3:31:72:51:da:99:ca:52:f1:c6:ef:5f:
39:2c:28:a8:d3:45:36:29:d3:b4:c7:eb:3c:e5:b5:
af:72:59:8c:0f:9c:05:d4:3c:2f:6f:d4:03:85:67:
5b:fc:a6:54:2c:c1:a1:35:7f:aa:8c:4d:79:da:f3:
cc:13:e9:78:bb:47:66:1c:ca:29:74:d1:e6:cc:6e:
29:94:c1:d9:ec:6f:b5:15:98:83:00:5c:24:0d:c8:
21:22:cf:e0:ae:16:6e:77:be:88:f2:48:49:f1:e1:
ba:b8:ef:e0:db:8d:5e:a7:7d:a4:5a:22:12:95:c4:
47:8a:6b:83:cc:4c:03:33:8a:48:4c:1b:ab:e5:aa:
21:17:d3:28:33:c9:0a:eb:00:4f:82:0a:8b:e2:6c:
a6:7c:61:95:3b:ef:01:07:41:01:bf:12:1d:f9:b6:
33:3f:6e:88:0b:4d:d2:91:74:38:a8:27:b7:f4:f4:
2d:8f:0a:eb:70:67:81:f0:d7:5a:75:e1:d6:66:c2:
f3:84:9e:04:6b:dd:5a:a1:2b:9b:0e:6f:62:1e:15:
cd:93:a0:d5:34:99:35:fa:0f:28:62:ac:46:4e:48:
56:3c:db:07:d0:6b:01:64:65:41:07:2e:7a:d5:8c:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:D7:7C:42:8A:22:10:D4:59:6D:86:9B:62:A5:3F:EA:4E:5B:36
X509v3 Authority Key Identifier:
keyid:C6:72:8F:33:8C:FF:81:21:5A:8A:84:51:30:FF:53:8C:51:78:C7:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:df:97:6f:64:31:6e:c9:fc:c0:15:7d:20:19:3c:f7:4e:
95:65:46:e8:dc:6b:1d:7f:78:25:8f:93:94:0a:72:e4:51:20:
de:df:cd:26:ee:59:43:68:32:82:33:27:98:e3:f4:e2:87:36:
7b:52:99:a1:0c:d2:11:ff:e7:42:85:9f:b4:2a:a5:eb:40:24:
94:ea:e2:d7:94:af:7d:14:3c:67:54:17:e5:fe:21:c3:2b:42:
25:38:ff:c3:d5:7b:90:d2:c3:81:9d:7c:e9:af:38:d9:be:bc:
17:72:0e:43:12:e1:67:c1:d6:d2:f1:dd:27:60:a0:79:14:8b:
7e:4f:01:e0:a7:32:9b:13:8d:f8:b6:e9:e6:c1:5d:4d:da:94:
d4:fb:f1:53:c5:df:9d:86:75:9e:b1:6f:f5:3e:a2:c1:be:1b:
b0:b8:14:6e:0b:98:dd:30:4f:9c:22:f4:0a:7e:60:7d:db:ec:
1b:3a:48:b9:69:43:b4:b6:d7:05:f4:2d:b6:4f:12:d4:5a:16:
5b:f4:a6:6f:43:88:6c:0f:0e:5a:38:18:e7:b4:80:d6:8d:f5:
19:e7:4c:3d:78:d7:2a:34:d8:dc:3c:a7:a0:88:04:ca:fb:0f:
8d:ae:b0:50:65:57:87:49:c2:17:1c:c2:1c:bd:0c:25:54:19:
9d:7e:c8:7d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY3
MjhGMzM4Q0ZGODEyMTVBOEE4NDUxMzBGRjUzOEM1MTc4Qzc0NjAeFw0yNTA0MTYx
ODM1NDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlGOUZENzdDNDI4QTIy
MTBENDU5NkQ4NjlCNjJBNTNGRUE0RTVCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsm9sz1jV/aB5/V50SQk6XabMxclHamcpS8cbvXzksKKjTRTYp
07TH6zzlta9yWYwPnAXUPC9v1AOFZ1v8plQswaE1f6qMTXna88wT6Xi7R2Ycyil0
0ebMbimUwdnsb7UVmIMAXCQNyCEiz+CuFm53vojySEnx4bq47+DbjV6nfaRaIhKV
xEeKa4PMTAMzikhMG6vlqiEX0ygzyQrrAE+CCovibKZ8YZU77wEHQQG/Eh35tjM/
bogLTdKRdDioJ7f09C2PCutwZ4Hw11p14dZmwvOEngRr3VqhK5sOb2IeFc2ToNU0
mTX6DyhirEZOSFY82wfQawFkZUEHLnrVjAS9AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUn5/XfEKKIhDUWW2Gm2KlP+pOWzYwHwYDVR0jBBgwFoAUxnKPM4z/gSFaioRR
MP9TjFF4x0YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
OS94bktQTTR6X2dTRmFpb1JSTVA5VGpGRjR4MFkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3huS1BNNHpfZ1NGYWlvUlJNUDlUakZGNHgwWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDkveG5LUE00el9nU0Zh
aW9SUk1QOVRqRkY0eDBZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKat35dvZDFuyfzAFX0gGTz3TpVlRujcax1/eCWPk5QKcuRRIN7fzSbuWUNo
MoIzJ5jj9OKHNntSmaEM0hH/50KFn7QqpetAJJTq4teUr30UPGdUF+X+IcMrQiU4
/8PVe5DSw4GdfOmvONm+vBdyDkMS4WfB1tLx3SdgoHkUi35PAeCnMpsTjfi26ebB
XU3alNT78VPF352GdZ6xb/U+osG+G7C4FG4LmN0wT5wi9Ap+YH3b7Bs6SLlpQ7S2
1wX0LbZPEtRaFlv0pm9DiGwPDlo4GOe0gNaN9RnnTD141yo02Nw8p6CIBMr7D42u
sFBlV4dJwhccwhy9DCVUGZ1+yH0=
-----END CERTIFICATE-----
Generated at Sat May 17 19:30:39 2025 by rpki-client