Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json)
Hash identifier: yVQlZX3zOoFENfDoNriGo/ftDiWEPwDefZ+DDUlyEI0=
Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Certificate serial: 54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
Manifest number: 52
Signing time: Sat 23 Aug 2025 16:03:19 +0000
Manifest this update: Sat 23 Aug 2025 16:03:19 +0000
Manifest next update: Sat 23 Aug 2025 22:03:19 +0000
Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=)
2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=)
3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: NpsIJRN2NGZXTPL8Trdb9DiLvu2Cmn4wJtmxpPOHhHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Validity
Not Before: Aug 23 16:03:19 2025 GMT
Not After : Aug 7 05:14:01 2026 GMT
Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f:
f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a:
b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d:
ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d:
40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8:
b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c:
d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32:
da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed:
5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5:
b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53:
b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af:
43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac:
5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5:
61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73:
22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6:
bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99:
4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
X509v3 Authority Key Identifier:
keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5f:c6:36:4c:ea:22:28:b0:ed:32:73:c2:90:50:1a:23:1a:
40:79:6a:bf:f1:d8:fe:ff:52:82:b4:53:7a:52:df:52:9d:c5:
d7:1b:be:e2:bd:99:a6:87:02:67:16:6e:c1:32:dc:c0:31:76:
65:ef:b7:c2:6e:92:66:19:a1:b4:54:fe:32:3e:17:1a:c7:dc:
8c:ba:cb:75:3e:75:09:a0:db:e2:cc:5b:84:63:fd:cb:d3:68:
9e:53:64:d4:17:c5:77:4c:b3:2e:6b:1c:19:77:ba:9e:fc:18:
f2:b2:6b:80:3e:34:8d:72:90:f6:96:09:da:84:cc:8f:d5:42:
c6:06:c0:e1:b9:ba:53:0d:40:57:b5:1e:4c:bc:80:aa:00:7f:
5d:c0:32:a5:93:ca:33:5b:ff:c8:54:54:6c:86:81:ea:d7:1c:
73:04:2a:66:a4:64:21:3a:74:16:e0:4b:11:f9:26:c0:ae:da:
2e:61:c5:8a:5e:74:a4:d3:12:85:05:73:4e:53:85:ae:5b:c1:
ae:e4:6a:7e:a0:a2:19:92:99:86:6d:6c:61:06:bb:46:aa:75:
81:70:66:84:d5:2d:83:8a:56:6a:69:54:27:c2:76:c0:2e:1c:
c2:7c:b2:f6:af:63:36:4b:95:5b:47:33:e3:6e:2c:9b:77:e8:
f1:c5:4a:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBMUEw
QUJDNUNBNkY1MDhGMTlGNzkwN0U5NEMzMTYyMTUyMjk2OTM0MB4XDTI1MDgyMzE2
MDMxOVoXDTI2MDgwNzA1MTQwMVowMzExMC8GA1UEAxMoMjNERkFENUREMTM4NDc0
MkY0MEFGQjg1NTdEMjZGOTQ0NDFCMjE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3LukarJixuBV/mCMpf8QpqmUvbUqFYebf4JVoqsoT4716abRLz
j5idCOxt7K6S4cYz+u7ABV0r0zFtQPkhbeJqJdt4Z6JKt/rYsTpIFQPb1WgfEhcB
GgQM2C7M/AvtO0SKETXwWWEy2ux4WUI5BaOm3DOPj8rtXXhUcCyoXtnv4iVfsZbF
tkL7bipDgQiOl5eLu69TtcZS4h+PpCXbxx1huhmvQyegZIOeFpOr7+J9dYesXq2x
bP2l3AiRzwndFte1YelLOdqQiLTj2fFEITRzItq28K9nPg6ESRh4YRvWvHyR708R
BpiAtAczQF6ZT5AQWNXxVygBduKaZ1W6lJ0CAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBQj361d0ThHQvQK+4VX0m+URBshfTAfBgNVHSMEGDAWgBShoKvFym9Qjxn3kH6U
wxYhUilpNDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzg3
L29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvb2FDcnhjcHZVSThaOTVCLWxNTVdJVklwYVRRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4Ny9vYUNyeGNwdlVJOFo5
NUItbE1NV0lWSXBhVFEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsF/GNkzqIiiw7TJzwpBQGiMaQHlqv/HY/v9SgrRTelLfUp3F1xu+4r2ZpocC
ZxZuwTLcwDF2Ze+3wm6SZhmhtFT+Mj4XGsfcjLrLdT51CaDb4sxbhGP9y9NonlNk
1BfFd0yzLmscGXe6nvwY8rJrgD40jXKQ9pYJ2oTMj9VCxgbA4bm6Uw1AV7UeTLyA
qgB/XcAypZPKM1v/yFRUbIaB6tcccwQqZqRkITp0FuBLEfkmwK7aLmHFil50pNMS
hQVzTlOFrlvBruRqfqCiGZKZhm1sYQa7Rqp1gXBmhNUtg4pWamlUJ8J2wC4cwnyy
9q9jNkuVW0cz424sm3fo8cVK8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:42 2025 by rpki-client