Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft
File: yHk93n6DuKXGasUI_NGLn1hMkng.mft (raw, json)
Hash identifier: C6DkQx4uDdfx8G6Ra/QwJHbmOp0MlL6HvrWF2Tl3+Fg=
Subject key identifier: 67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E
Authority key identifier: C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78
Certificate issuer: /CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278
Certificate serial: 0206
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft
Manifest number: 0206
Signing time: Mon 20 Oct 2025 04:04:26 +0000
Manifest this update: Mon 20 Oct 2025 04:04:26 +0000
Manifest next update: Mon 20 Oct 2025 10:04:26 +0000
Files and hashes: 1: yHk93n6DuKXGasUI_NGLn1hMkng.crl (hash: bflpB2UmTQdzL2imuuBysW73uo5Z7aMVX2e8qI2N63g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278
Validity
Not Before: Oct 20 04:04:26 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=67D0EC2C23DB72F7191514F0D95CB5F7CA7B5B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:8b:ee:7c:97:9f:21:3e:06:47:9a:65:f4:
61:7d:f8:b9:50:54:ab:37:b6:87:b2:01:be:cf:59:
8d:4f:5c:86:9b:53:01:73:53:5a:16:49:2e:f8:a2:
fe:63:4d:45:8a:fd:6a:ac:f1:44:12:13:41:30:83:
e3:92:ef:5c:cb:7d:62:81:a9:d9:a3:c3:c1:61:6e:
5f:f2:90:60:38:6e:70:0b:d7:ea:dc:72:03:eb:ab:
ee:e9:85:0c:9b:d3:c5:02:c3:a1:a7:09:40:62:f2:
1d:b8:df:00:b3:d3:cc:2b:f9:56:85:83:c3:51:ed:
62:55:00:06:de:75:8a:5f:3a:48:a8:c1:90:8c:83:
37:3f:50:d4:b1:9b:49:98:7f:24:72:a8:2c:e6:f7:
d9:33:13:1e:f8:06:0f:85:26:58:3b:4c:1e:d2:04:
bd:19:6f:49:14:4c:4d:f4:49:92:80:f4:a8:20:7e:
e8:1a:67:cf:74:52:e8:61:fc:c8:58:19:65:42:ee:
22:23:aa:3e:ae:26:1a:25:95:d1:47:52:3e:d3:ed:
3a:1c:d5:45:bb:16:42:ff:95:71:e9:63:3f:63:aa:
e8:4e:5f:85:8e:bb:b1:c2:ab:49:28:4a:b7:59:61:
e9:0a:d4:0e:e6:8c:6f:e4:9a:4c:b1:2e:48:65:60:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E
X509v3 Authority Key Identifier:
keyid:C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:fc:fd:9b:72:0f:86:1e:f1:40:f4:b3:3f:f3:e7:df:d6:
67:eb:a4:33:06:32:7e:37:51:e4:fd:31:b6:b2:76:17:d8:8a:
45:40:5f:5c:59:96:68:e2:62:05:a5:4f:a9:25:f3:9b:a9:85:
ed:74:76:f0:28:df:9d:54:df:67:96:01:e8:c5:fe:85:07:d9:
e6:82:e0:b5:cf:95:35:e7:9a:ba:0e:c4:36:d3:d7:e3:63:f4:
8c:a1:7a:77:f3:cb:07:7c:ef:b7:47:a9:d0:7b:28:7e:49:e1:
1c:68:f7:8c:0f:7c:37:a0:f1:e6:90:12:8e:58:49:fe:b6:c8:
37:7b:76:81:77:b0:3b:08:a1:bd:cd:9d:e5:4f:6a:12:fc:76:
85:bb:0e:25:07:b0:b6:82:59:d0:01:27:cd:5f:cd:e5:ee:eb:
0f:36:61:a6:11:86:e4:0f:24:01:35:0f:18:28:d1:ae:46:62:
41:e5:ed:b7:4b:de:a5:18:52:bb:48:56:04:1a:b8:8f:08:cb:
3b:3a:ac:79:48:a0:43:dc:92:a1:6f:68:fe:77:0a:ab:e9:32:
62:0c:08:42:46:1d:da:d9:ea:7c:f2:ef:f8:3b:52:df:21:43:
cc:62:d2:0c:37:48:3d:6c:49:46:0f:0c:e5:45:ea:a2:47:9e:
84:c4:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:13 2025 by rpki-client