Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
File: VmmSAinFc-RDR45E9R7VvAKq9SQ.mft (raw, json)
Hash identifier: Fz9WOxB9WBjnoT01kTwinQCd4mzyjaEu2MzxYQv4IMw=
Subject key identifier: 1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50
Authority key identifier: 56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24
Certificate issuer: /CN=5669920229C573E443478E44F51ED5BC02AAF524
Certificate serial: 0246
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
Manifest number: 0246
Signing time: Tue 21 Oct 2025 02:05:29 +0000
Manifest this update: Tue 21 Oct 2025 02:05:29 +0000
Manifest next update: Tue 21 Oct 2025 08:05:29 +0000
Files and hashes: 1: VmmSAinFc-RDR45E9R7VvAKq9SQ.crl (hash: oLiej6Bh3GdDg531aOAcuyEm41O2nnKoklLjAFp9hE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5669920229C573E443478E44F51ED5BC02AAF524
Validity
Not Before: Oct 21 02:05:29 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=1D6F78409AFBA47BEFEB8514CAB34B993A168B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:6f:02:cf:f4:27:31:5e:ab:ec:89:c9:5a:
ca:9f:9a:b9:91:56:ad:bf:28:d0:aa:89:1e:ed:d0:
d3:fa:a7:f5:31:c6:39:05:05:e7:4d:55:3e:7e:f2:
de:34:6a:bc:f6:60:5b:1d:c7:75:81:9d:92:29:01:
11:3c:01:fa:f3:57:a0:88:40:4c:76:42:f4:fd:ac:
90:44:b8:8b:dc:24:20:25:d2:1c:4b:03:3c:d6:e9:
6c:27:23:c6:ac:b1:6b:18:b6:2d:ee:ba:3e:f4:d6:
fb:aa:e4:6d:b3:f6:92:ed:8d:49:45:97:6b:23:19:
c9:df:01:3a:14:be:ef:1a:cd:df:75:4e:26:82:a4:
ed:75:63:f0:39:fc:16:40:5e:04:eb:8a:33:17:45:
ee:60:87:d1:9e:13:17:9a:72:ca:94:27:d8:72:db:
fc:46:0d:e6:68:9e:94:11:5f:d0:9c:51:e8:91:19:
cd:99:25:b4:41:3d:8d:24:ac:5f:7b:d5:74:c1:fb:
73:63:90:67:b8:ab:e2:94:a8:65:6e:29:f3:a0:61:
fa:8e:7e:63:71:ac:44:00:14:07:21:a1:d2:4f:79:
7c:ac:f1:79:47:c3:6e:54:74:d0:2e:2a:a1:cf:32:
23:fb:53:21:7f:c5:d4:77:aa:35:8b:07:9b:65:4e:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50
X509v3 Authority Key Identifier:
keyid:56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:6d:2b:f0:9f:a1:85:34:e2:88:be:2d:7c:06:85:ba:af:64:
18:d7:74:b5:02:99:11:c2:b5:03:5e:a6:d9:b1:90:86:cf:fd:
ef:d6:00:a2:88:8c:9b:fc:36:90:8a:fe:15:dd:44:56:b6:8e:
b7:1a:26:b4:ab:3f:a3:48:c6:d2:4c:00:79:90:8d:e4:ed:88:
46:80:68:b8:6d:f7:fe:24:bf:2f:58:11:62:6b:29:39:0d:c5:
bf:0f:36:c4:be:10:ad:72:d6:db:61:8e:9a:31:b9:c7:73:0a:
12:06:79:8e:d5:d0:1c:9a:39:fb:1a:da:77:34:1e:f5:24:a4:
3b:85:39:49:94:56:30:db:60:5a:a2:d9:1c:b6:f2:17:83:55:
cb:a9:46:cb:4d:c6:06:72:aa:04:67:8c:66:6f:4c:80:b1:d7:
d2:15:7a:86:2b:b9:27:1c:42:81:98:63:0c:c4:9c:15:47:12:
14:ae:e8:ce:b5:c2:a7:05:f7:ab:73:74:bb:11:37:cf:55:69:
7e:1a:83:f5:30:67:28:5a:55:1d:0e:2c:64:13:ac:77:1d:a7:
cb:21:c3:7a:40:59:a6:a4:93:0f:53:f3:73:58:bd:9e:4e:15:
ae:f5:62:cd:40:9b:13:18:27:55:fb:25:52:b5:17:90:b8:98:
3b:b3:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:14:07 2025 by rpki-client