Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
File: 9GZUo8iCR6UBa64ysnJws0hfNMU.mft (raw, json)
Hash identifier: 3urQxO+0YzJtGzAzEXw9rmnZWTjsS/sym4t/VqIUEBo=
Subject key identifier: 31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
Authority key identifier: F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
Certificate issuer: /CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Certificate serial: 1CF0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
Manifest number: 1CF0
Signing time: Sat 23 Aug 2025 16:05:54 +0000
Manifest this update: Sat 23 Aug 2025 16:05:54 +0000
Manifest next update: Sat 23 Aug 2025 22:05:54 +0000
Files and hashes: 1: 9GZUo8iCR6UBa64ysnJws0hfNMU.crl (hash: 54pefhxeWvHtbJiJRcKbRpZNln9yY6S/CxPfo2yllh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7408 (0x1cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Validity
Not Before: Aug 23 16:05:54 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3182D6E3A719B347F2ECDE0854CFFCF02BB683E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:f3:1e:e4:06:6a:fe:8e:31:88:2f:77:a6:
a6:6e:27:df:a3:aa:d6:23:2e:42:3d:f9:4c:f3:c0:
a4:f7:c6:58:12:04:63:f8:69:d9:5f:11:30:91:02:
36:4e:57:87:10:ff:b4:39:82:cb:d3:72:82:d4:16:
24:47:e5:d2:1d:5b:77:a4:90:3e:1d:91:19:ba:00:
a7:c4:ab:50:bb:02:51:1f:bb:53:e4:e4:0a:12:58:
04:11:9d:86:3a:2b:f3:a3:6e:7a:2e:60:d2:ab:8a:
f9:40:ad:4b:64:ce:76:03:08:21:d0:30:89:b4:9a:
ef:d8:98:3d:40:41:fa:97:fc:e2:13:64:a2:8b:41:
07:17:21:db:ad:81:95:1e:c1:ff:3e:72:d1:c4:23:
f5:59:79:16:0b:32:16:0b:a1:cf:99:4c:01:73:2c:
40:a1:5f:64:3c:98:17:27:a2:2d:77:eb:c9:42:3c:
26:e6:90:99:41:40:ac:ed:74:33:0a:a6:36:f8:42:
6c:eb:77:41:7c:f8:17:f5:2f:91:53:39:aa:9a:a2:
4f:a7:1b:2f:27:2b:49:0f:d4:ab:fc:cb:6a:2c:73:
19:f4:10:71:a8:26:28:c1:9a:e2:3b:1e:d4:03:f9:
8c:cb:80:b8:a4:20:8e:8b:ae:4f:60:39:72:74:24:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
X509v3 Authority Key Identifier:
keyid:F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:87:95:ba:d8:c8:61:20:56:df:1a:ba:c9:97:79:fa:eb:ff:
73:d4:e2:0c:fe:b1:70:64:98:84:c6:89:9c:d8:6e:44:38:74:
45:0e:23:da:fb:49:06:2d:3f:3e:32:51:a0:2b:32:cc:70:53:
94:5a:0a:44:8f:2e:a8:53:e4:fe:e4:9d:9d:93:fb:c4:b3:7f:
7a:39:8c:6c:d1:ad:5b:fa:5e:d7:b2:60:df:9e:2c:63:18:d3:
ef:1c:a0:6e:b9:61:51:4f:5a:1f:5f:2e:0a:87:d8:d2:ab:e8:
0a:f4:36:67:c4:78:cf:1e:0e:4e:41:0d:66:fb:40:fb:0f:f5:
0b:68:00:a7:b1:52:56:ba:8d:5d:83:52:23:0c:51:c9:5a:67:
8f:0a:80:83:e2:0f:9c:3a:1c:67:9b:7c:a4:99:e6:ba:88:0b:
60:07:70:6e:db:33:58:20:32:62:99:f3:f5:4a:1f:24:83:2e:
88:a0:92:3b:82:ac:99:8a:4b:a0:dd:13:a1:d9:7b:9f:3e:f1:
10:14:c9:d5:43:42:a4:62:11:aa:c7:6c:6f:38:30:58:de:9c:
76:a3:53:07:4a:b1:95:b9:fa:5d:5d:0b:b9:b2:48:89:10:9d:
06:52:a6:17:a5:50:3f:99:5b:f3:b6:6e:13:c3:13:6a:da:a1:
d0:21:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:13 2025 by rpki-client