Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3351/17ShZ52D0ID8_qOSpk1CSkdVt4A.mft
File: 17ShZ52D0ID8_qOSpk1CSkdVt4A.mft (raw, json)
Hash identifier: m92pOfSIIBk0eGzOwUT2+/VLHQDr/jPk4Ui6NqiU++M=
Subject key identifier: 78:47:71:EF:7C:83:CC:DF:49:9C:7D:42:EA:01:D3:B7:5E:CF:4C:DC
Authority key identifier: D7:B4:A1:67:9D:83:D0:80:FC:FE:A3:92:A6:4D:42:4A:47:55:B7:80
Certificate issuer: /CN=D7B4A1679D83D080FCFEA392A64D424A4755B780
Certificate serial: 039B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/17ShZ52D0ID8_qOSpk1CSkdVt4A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/17ShZ52D0ID8_qOSpk1CSkdVt4A.mft
Manifest number: 039B
Signing time: Sat 23 Aug 2025 11:02:13 +0000
Manifest this update: Sat 23 Aug 2025 11:02:13 +0000
Manifest next update: Sat 23 Aug 2025 17:02:13 +0000
Files and hashes: 1: 17ShZ52D0ID8_qOSpk1CSkdVt4A.crl (hash: JulVNIYMl/MQzAWBEqEyU6Byxaxdwpu2D3TYaWHklUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B4A1679D83D080FCFEA392A64D424A4755B780
Validity
Not Before: Aug 23 11:02:13 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=784771EF7C83CCDF499C7D42EA01D3B75ECF4CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:88:43:47:11:66:8a:5c:73:9b:37:4f:cb:
a5:99:bd:12:6e:cd:51:bd:7e:6f:16:fd:6b:0f:0e:
19:cf:a2:f5:f0:3f:54:d4:4d:e8:9b:1f:74:f9:19:
f6:02:9d:39:d8:20:d0:58:dd:2e:e5:23:63:4c:d2:
25:b5:d4:3b:9f:f7:ff:bf:08:2e:3b:5f:1c:e8:08:
b6:70:35:5a:25:8b:76:be:20:be:a0:c1:1e:7c:7a:
26:9c:bf:9f:5c:25:3e:03:18:c0:fb:ae:1b:34:c1:
0c:ff:80:24:ca:d4:2f:96:a7:47:7d:c2:26:68:b8:
e3:c7:0a:2b:6c:91:52:36:26:a9:e8:c7:af:ec:4a:
a1:26:c3:28:ea:b1:26:17:8d:02:62:ae:7f:88:6e:
d3:d8:ee:77:52:27:72:c3:64:05:b2:fa:5e:ce:20:
aa:c4:9b:e8:79:c2:a3:28:1e:c5:54:09:ce:fa:bf:
67:5b:86:b5:eb:51:34:86:54:8d:12:db:0c:81:ec:
4c:68:43:b6:a4:c7:02:a6:10:a9:0b:b8:8c:72:db:
f7:b6:e5:98:45:27:31:23:22:ef:53:d0:12:15:26:
9d:00:a6:19:03:fe:c0:a4:dd:51:66:b7:99:93:96:
3a:df:bd:8c:06:61:ae:b8:cd:b6:a9:26:8e:9c:c1:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:71:EF:7C:83:CC:DF:49:9C:7D:42:EA:01:D3:B7:5E:CF:4C:DC
X509v3 Authority Key Identifier:
keyid:D7:B4:A1:67:9D:83:D0:80:FC:FE:A3:92:A6:4D:42:4A:47:55:B7:80
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/17ShZ52D0ID8_qOSpk1CSkdVt4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/17ShZ52D0ID8_qOSpk1CSkdVt4A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/17ShZ52D0ID8_qOSpk1CSkdVt4A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0c:d5:89:03:12:73:5c:1f:a2:cf:bb:e1:62:e2:3f:66:da:
41:15:fd:b8:a1:66:4e:28:fa:4c:5c:05:06:68:6d:75:ec:fa:
14:55:82:e3:49:7f:d1:81:81:3f:c4:f8:01:6f:e8:99:63:5f:
eb:1d:f0:25:fc:ac:d7:10:b7:35:0f:6c:9d:ad:25:a3:45:8a:
2c:da:e5:83:23:97:ea:a6:5f:27:a2:7d:96:b5:77:3c:42:a4:
af:f4:5a:b0:2d:51:f7:b9:d0:28:7a:70:c2:43:20:8b:da:9c:
4a:7a:7b:50:63:97:9a:d5:7d:46:01:07:62:5c:5e:f4:76:df:
65:f7:77:7e:f7:48:88:c6:40:7f:f6:0e:16:85:38:9a:e7:5f:
0f:52:f1:f5:1e:e7:03:a3:7e:dd:99:d1:ed:d6:00:9a:99:66:
50:96:d8:f3:91:05:db:94:34:36:a4:c4:b4:25:cb:9f:7f:54:
b9:5c:d1:6e:e4:b5:d2:cf:e4:6a:45:83:2b:32:96:b6:8c:17:
ea:f6:91:ff:98:73:ef:b8:3b:e0:c1:ff:0d:f4:ea:84:2b:e1:
8e:42:9e:b7:97:90:ed:9f:7c:98:a5:3e:6e:0b:a9:1a:c4:72:
13:f6:4d:db:24:64:4e:9f:f1:f2:ee:ec:a0:fc:22:e8:f9:ba:
f7:dd:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:17 2025 by rpki-client