Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.mft
File: DemIf5Do0YZKVgk_qrfOoVJUYDk.mft (raw, json)
Hash identifier: YK+jhIeJlQ4wfqH5m0e/Cm9zorPDFTlwF0ajoFXGbag=
Subject key identifier: E7:C9:04:2B:93:1F:0B:C5:7C:9D:B3:C7:80:82:DD:8B:C6:5E:92:04
Authority key identifier: 0D:E9:88:7F:90:E8:D1:86:4A:56:09:3F:AA:B7:CE:A1:52:54:60:39
Certificate issuer: /CN=0DE9887F90E8D1864A56093FAAB7CEA152546039
Certificate serial: 025A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DemIf5Do0YZKVgk_qrfOoVJUYDk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.mft
Manifest number: 025A
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sat 23 Aug 2025 17:02:22 +0000
Files and hashes: 1: DemIf5Do0YZKVgk_qrfOoVJUYDk.crl (hash: 6mxsZh5FLIOV3gEtaoLvCVN3VzsvDsykHGr0Ml/+zjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DE9887F90E8D1864A56093FAAB7CEA152546039
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=E7C9042B931F0BC57C9DB3C78082DD8BC65E9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:e0:ee:53:1c:45:d4:6e:d1:d7:e3:9c:8e:
f6:94:6d:e8:a8:25:0d:1c:a1:72:da:ae:19:18:82:
6b:d9:c8:b1:cb:48:94:e2:61:9c:c0:97:f1:78:a7:
b1:9e:bc:94:5f:ad:62:85:44:d1:dc:22:b0:b3:d4:
a6:fd:f0:5a:17:2c:16:00:5f:ec:83:c1:8b:5a:1b:
9f:e3:97:ef:02:ec:15:a7:c2:91:9d:ac:14:c9:25:
08:f2:ae:8e:b8:8f:e0:d8:e2:f0:af:a8:f9:bf:4c:
02:cf:dc:65:4a:f3:55:92:5a:81:f7:2b:14:3c:56:
84:b2:ee:8d:66:4c:46:f9:26:ab:e1:a6:c9:3c:b7:
b9:81:5b:04:34:98:32:77:b1:44:8f:1e:fb:eb:a5:
d7:aa:67:b5:cc:a6:d0:bd:42:1b:99:40:78:ca:a8:
ea:7f:36:93:30:b6:39:6a:7a:8d:86:a3:e3:37:0e:
bb:f3:d4:52:51:b8:83:fb:f0:10:df:67:31:1d:a2:
60:45:68:5c:d9:f3:ca:c5:a3:91:4d:bb:83:70:b1:
9e:aa:a7:0e:62:8f:d3:a6:9e:44:bc:4a:0c:77:eb:
73:1c:eb:8a:12:65:12:8d:30:ec:a5:6f:95:99:54:
be:15:90:7a:4b:27:b8:98:c5:e7:d6:13:23:42:6b:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:04:2B:93:1F:0B:C5:7C:9D:B3:C7:80:82:DD:8B:C6:5E:92:04
X509v3 Authority Key Identifier:
keyid:0D:E9:88:7F:90:E8:D1:86:4A:56:09:3F:AA:B7:CE:A1:52:54:60:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DemIf5Do0YZKVgk_qrfOoVJUYDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cb:71:ce:52:8d:6c:31:2d:d7:bb:ab:27:69:da:bb:8f:25:
b2:3c:57:06:6a:0e:da:01:d4:10:7e:07:f0:bd:a8:c8:8c:2d:
23:22:61:58:87:20:b6:08:05:d8:02:9e:f8:2a:15:c7:7b:31:
b9:37:82:e0:30:16:f1:44:eb:db:9e:8d:cd:81:bf:3f:72:4e:
56:b3:5b:d2:0b:6c:4e:83:50:0c:1e:b6:72:17:d7:22:7c:a4:
4d:9e:14:c3:83:88:f0:bf:7a:ea:d0:d1:05:bd:76:0b:bb:d0:
bc:52:24:6f:d9:fa:7f:08:1e:b2:2a:9b:dd:79:d8:85:c7:3b:
42:4c:4b:d3:9e:f4:71:fb:90:f5:bf:34:ae:43:57:5d:fb:df:
e1:9a:84:93:59:a3:7a:92:1e:3e:44:32:05:e4:61:bc:8e:69:
f6:e1:19:68:43:67:9d:b0:81:5c:9d:17:04:26:c7:45:72:f5:
c3:1a:20:78:37:4c:0b:39:76:14:45:97:d4:a3:c7:6d:86:6b:
bd:c2:b1:b5:33:b6:00:45:52:e8:5b:c1:b6:35:d7:81:5e:ac:
39:46:59:dc:98:cd:3d:7b:9b:f3:c2:32:dc:42:c9:4c:10:ab:
7c:6c:17:f3:52:57:92:7d:3f:de:a5:51:86:24:0d:a8:ad:bc:
0f:04:4a:7c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERF
OTg4N0Y5MEU4RDE4NjRBNTYwOTNGQUFCN0NFQTE1MjU0NjAzOTAeFw0yNTA4MjMx
MTAyMjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU3QzkwNDJCOTMxRjBC
QzU3QzlEQjNDNzgwODJERDhCQzY1RTkyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgQuDuUxxF1G7R1+OcjvaUbeioJQ0coXLarhkYgmvZyLHLSJTi
YZzAl/F4p7GevJRfrWKFRNHcIrCz1Kb98FoXLBYAX+yDwYtaG5/jl+8C7BWnwpGd
rBTJJQjyro64j+DY4vCvqPm/TALP3GVK81WSWoH3KxQ8VoSy7o1mTEb5Jqvhpsk8
t7mBWwQ0mDJ3sUSPHvvrpdeqZ7XMptC9QhuZQHjKqOp/NpMwtjlqeo2Go+M3Drvz
1FJRuIP78BDfZzEdomBFaFzZ88rFo5FNu4NwsZ6qpw5ij9OmnkS8Sgx363Mc64oS
ZRKNMOylb5WZVL4VkHpLJ7iYxefWEyNCaz4LAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU58kEK5MfC8V8nbPHgILdi8ZekgQwHwYDVR0jBBgwFoAUDemIf5Do0YZKVgk/
qrfOoVJUYDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2
Ny9EZW1JZjVEbzBZWktWZ2tfcXJmT29WSlVZRGsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RlbUlmNURvMFlaS1Zna19xcmZPb1ZKVVlEay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjcvRGVtSWY1RG8wWVpL
VmdrX3FyZk9vVkpVWURrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABvLcc5SjWwxLde7qydp2ruPJbI8VwZqDtoB1BB+B/C9qMiMLSMiYViHILYI
BdgCnvgqFcd7Mbk3guAwFvFE69uejc2Bvz9yTlazW9ILbE6DUAwetnIX1yJ8pE2e
FMODiPC/eurQ0QW9dgu70LxSJG/Z+n8IHrIqm9152IXHO0JMS9Oe9HH7kPW/NK5D
V1373+GahJNZo3qSHj5EMgXkYbyOafbhGWhDZ52wgVydFwQmx0Vy9cMaIHg3TAs5
dhRFl9Sjx22Ga73CsbUztgBFUuhbwbY114FerDlGWdyYzT17m/PCMtxCyUwQq3xs
F/NSV5J9P96lUYYkDaitvA8ESnw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:00 2025 by rpki-client