Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
File: TnhsicjML72c4lQNmb4SziD2uLM.mft (raw, json)
Hash identifier: pU18m8FdUlR+cPmZYeYCQe8gYZBZyXaZyDcxsMBmhfE=
Subject key identifier: 9F:63:9C:D9:A3:0D:BF:38:00:4F:0F:8F:1F:47:30:E9:EE:E7:DD:4D
Authority key identifier: 4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3
Certificate issuer: /CN=4E786C89C8CC2FBD9CE2540D99BE12CE20F6B8B3
Certificate serial: 19E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TnhsicjML72c4lQNmb4SziD2uLM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
Manifest number: 19E3
Signing time: Tue 21 Oct 2025 04:34:22 +0000
Manifest this update: Tue 21 Oct 2025 04:34:22 +0000
Manifest next update: Tue 21 Oct 2025 10:34:22 +0000
Files and hashes: 1: TnhsicjML72c4lQNmb4SziD2uLM.crl (hash: YSadNm+tI7In7xDs2/T/YeCWPdEUHvWDNGelnKSsIMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6627 (0x19e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E786C89C8CC2FBD9CE2540D99BE12CE20F6B8B3
Validity
Not Before: Oct 21 04:34:22 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=9F639CD9A30DBF38004F0F8F1F4730E9EEE7DD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:d5:95:90:65:ec:e1:dd:9e:9c:49:5a:57:
6d:f6:b6:6a:3d:8d:6d:25:0e:d4:5d:f2:3e:77:48:
0f:c9:7d:ab:8a:44:55:7d:ae:fa:15:13:25:0b:42:
93:3f:09:bf:20:b6:4d:5f:be:ce:df:b8:0d:ac:55:
0a:07:5f:1b:cf:05:8b:c3:06:36:47:0b:9f:42:a7:
9f:b9:93:0b:e9:47:80:e8:59:b4:bf:72:85:f8:4a:
a0:d9:50:87:7b:f1:77:ee:55:05:e8:ec:c5:74:b1:
9c:17:d4:bc:b1:74:4e:b5:a3:0a:10:f5:71:11:7b:
1b:43:d5:64:02:7b:d7:4e:59:ac:53:8c:ee:9e:c6:
93:27:16:5d:53:59:2b:f7:4e:6c:79:ce:72:3e:a7:
65:61:8b:75:41:12:f1:12:ab:51:8b:d9:b6:2a:d1:
a4:9d:39:d2:7b:7d:11:e4:69:1a:4e:65:ce:0c:69:
57:b5:e5:da:d9:66:04:da:a2:4b:f3:ac:7d:3d:ee:
91:08:a6:31:16:7e:f6:97:d2:4b:28:6e:60:6d:8b:
ab:89:73:f7:14:f2:64:4d:e2:5c:cb:cf:b2:e7:ca:
10:7a:e1:c7:1c:9f:66:76:9b:01:63:6f:56:80:af:
ec:ab:e9:73:1d:11:d4:08:00:e4:96:27:06:a3:4e:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:9C:D9:A3:0D:BF:38:00:4F:0F:8F:1F:47:30:E9:EE:E7:DD:4D
X509v3 Authority Key Identifier:
keyid:4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TnhsicjML72c4lQNmb4SziD2uLM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:27:15:60:37:46:47:47:dc:77:e1:ea:81:14:fe:0c:c0:2c:
8b:41:f5:2b:26:d9:6d:3c:53:01:a6:7c:cf:a4:e4:0f:07:7c:
77:48:b6:13:3c:72:9f:ce:96:e1:5a:2e:4d:24:7b:86:d1:ab:
fa:73:02:6b:44:6d:4f:db:c9:b2:13:42:5f:00:43:08:19:a4:
bd:07:89:49:6d:8f:96:18:c0:59:76:d9:15:b8:11:b6:94:63:
e6:34:50:65:ea:de:f5:80:4c:da:c0:ee:df:e2:b1:86:16:70:
f6:f1:49:94:85:66:74:cb:59:d4:d0:ba:b7:d0:29:93:44:99:
e1:9b:68:43:4e:d6:9b:1f:dc:a0:8a:c8:c8:f4:c0:57:8f:41:
ec:07:fe:5b:fe:1f:5a:3e:ab:ec:0f:35:5c:97:a6:cf:9b:85:
96:d4:f2:ba:f1:a2:87:d3:ad:62:32:5e:0d:11:22:5f:2b:a7:
91:94:c1:fd:0c:2a:61:84:c1:8b:c8:4e:d9:a1:60:6b:98:6e:
94:13:a4:54:f6:1e:fc:9f:37:98:a2:5b:c8:59:91:e4:1a:c7:
fc:e3:d1:1c:32:89:24:28:3b:54:af:f8:63:b0:80:f3:b5:65:
39:de:47:21:55:b3:d0:a7:c3:42:5a:22:cd:07:56:82:9c:d5:
85:62:6c:17
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICGeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3
ODZDODlDOENDMkZCRDlDRTI1NDBEOTlCRTEyQ0UyMEY2QjhCMzAeFw0yNTEwMjEw
NDM0MjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDlGNjM5Q0Q5QTMwREJG
MzgwMDRGMEY4RjFGNDczMEU5RUVFN0RENEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtCtWVkGXs4d2enElaV232tmo9jW0lDtRd8j53SA/JfauKRFV9
rvoVEyULQpM/Cb8gtk1fvs7fuA2sVQoHXxvPBYvDBjZHC59Cp5+5kwvpR4DoWbS/
coX4SqDZUId78XfuVQXo7MV0sZwX1LyxdE61owoQ9XERextD1WQCe9dOWaxTjO6e
xpMnFl1TWSv3Tmx5znI+p2Vhi3VBEvESq1GL2bYq0aSdOdJ7fRHkaRpOZc4MaVe1
5drZZgTaokvzrH097pEIpjEWfvaX0ksobmBti6uJc/cU8mRN4lzLz7LnyhB64ccc
n2Z2mwFjb1aAr+yr6XMdEdQIAOSWJwajTmBrAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUn2Oc2aMNvzgATw+PH0cw6e7n3U0wHwYDVR0jBBgwFoAUTnhsicjML72c4lQN
mb4SziD2uLMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx
L1RuaHNpY2pNTDcyYzRsUU5tYjRTemlEMnVMTS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvVG5oc2ljak1MNzJjNGxRTm1iNFN6aUQydUxNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxL1RuaHNpY2pNTDcyYzRs
UU5tYjRTemlEMnVMTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAkJxVgN0ZHR9x34eqBFP4MwCyLQfUrJtltPFMBpnzPpOQPB3x3SLYTPHKfzpbh
Wi5NJHuG0av6cwJrRG1P28myE0JfAEMIGaS9B4lJbY+WGMBZdtkVuBG2lGPmNFBl
6t71gEzawO7f4rGGFnD28UmUhWZ0y1nU0Lq30CmTRJnhm2hDTtabH9ygisjI9MBX
j0HsB/5b/h9aPqvsDzVcl6bPm4WW1PK68aKH061iMl4NESJfK6eRlMH9DCphhMGL
yE7ZoWBrmG6UE6RU9h78nzeYolvIWZHkGsf849EcMokkKDtUr/hjsIDztWU53kch
VbPQp8NCWiLNB1aCnNWFYmwX
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:17 2025 by rpki-client