Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
File: GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json)
Hash identifier: L3pZuWaXEzdwva7o4czhkT2Gj8awzJzWLOIIKIlNDnI=
Subject key identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6
Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0
Certificate issuer: /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
Certificate serial: 0244
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
Manifest number: 0244
Signing time: Mon 20 Oct 2025 13:34:33 +0000
Manifest this update: Mon 20 Oct 2025 13:34:33 +0000
Manifest next update: Mon 20 Oct 2025 19:34:33 +0000
Files and hashes: 1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: YUgkJH1BsuMZ3dcuz6oPk78Swd7H4g/liv5Btxjvhnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
Validity
Not Before: Oct 20 13:34:33 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=418CE576B99D09444358380CFC60C020975464F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61:
59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0:
99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86:
90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8:
9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3:
49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e:
ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b:
eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60:
76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc:
ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae:
82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07:
b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb:
1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d:
44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2:
1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24:
0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d:
a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6
X509v3 Authority Key Identifier:
keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:40:8e:46:f8:9f:ab:c8:ad:fc:79:d6:aa:65:e6:d1:99:b3:
c0:8a:76:8f:fc:b2:4f:f7:91:c5:cc:d8:a0:7a:e9:5b:83:bb:
2c:88:02:37:4a:ba:1a:5c:69:c2:ce:fd:d7:b5:a8:44:31:0e:
54:9f:80:e5:0a:27:37:d3:b0:84:56:72:46:89:e6:3a:b3:54:
d4:ad:62:3c:2a:09:b9:df:31:76:53:21:0a:90:0c:ed:f5:65:
80:65:31:ed:16:dc:de:6b:36:0e:78:3e:ad:d8:23:1b:51:15:
e4:1e:04:72:57:85:4a:e0:a6:ad:e5:7c:49:f2:a2:cf:29:2a:
47:25:2d:6c:55:78:45:1e:f6:cc:91:5e:38:8b:16:3d:cc:15:
a7:ce:d7:e6:cc:26:3b:50:b8:4c:1e:5c:cd:44:80:3e:31:57:
d4:00:25:18:e1:8b:57:7a:6c:db:c6:5a:20:f8:c5:1a:13:9d:
79:80:d7:fb:d1:6c:db:aa:eb:c8:fd:54:cb:91:5b:ea:48:ae:
05:1f:47:9e:ae:21:3c:04:f0:1b:67:a5:95:62:82:35:72:34:
59:3f:16:21:89:92:b4:d5:08:a5:6d:9d:ab:d4:de:2b:47:db:
93:32:e6:c7:69:cf:29:ae:a1:50:cc:6b:13:33:72:9e:ed:e9:
2a:50:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:02 2025 by rpki-client