Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft
File: qP3wu66meVNpOJbHY_Ep2jtBg-s.mft (raw, json)
Hash identifier: V6Cl+DEjFFCq65hI76ORnOMnh+TUD8AqTorosr/OKPk=
Subject key identifier: 81:42:3B:A7:7A:B7:08:72:49:D6:8E:24:98:CC:5E:6A:24:72:0A:E3
Authority key identifier: A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB
Certificate issuer: /CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB
Certificate serial: 011C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft
Manifest number: 0113
Signing time: Sun 19 Oct 2025 23:04:29 +0000
Manifest this update: Sun 19 Oct 2025 23:04:29 +0000
Manifest next update: Mon 20 Oct 2025 05:04:29 +0000
Files and hashes: 1: 3gLZcEB9b6CcG88DthuUvQzuMng.roa (hash: sTik18vjb2qG/NYnXK3uG9tY/DL8xWE+DymUfLAIlnE=)
2: F0kSGnAIagivcV8g5cUdsyi-f3E.roa (hash: UcsToYzGinH+LaJVhXhSb5v+g/uBThplPaSlnEqw7FM=)
3: RXJSANHbZrdpPxa1bsPmTvjO39Q.roa (hash: 95CUp/VfY7PSkOcAscjkDxH3xv1Hjai/9RJJgyl0Hqs=)
4: WC1nHAg0yIPcV3WIpCTCZDMOWmM.roa (hash: aYTc6ZXigj8FqXcD/bFRpNLNct9j8zBZNjugMTj8hX8=)
5: qP3wu66meVNpOJbHY_Ep2jtBg-s.crl (hash: YV1tSupbmDVlBo28179Tg5pK+Y1xkYFurgCpHlu+IW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB
Validity
Not Before: Oct 19 23:04:29 2025 GMT
Not After : Aug 27 05:36:57 2026 GMT
Subject: CN=81423BA77AB7087249D68E2498CC5E6A24720AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:40:c5:41:bc:f5:4e:9b:62:5d:a9:4a:2d:
3f:e6:d7:ce:78:ff:60:eb:5a:fc:45:18:10:55:5e:
31:48:05:87:80:17:55:a9:d6:e3:b2:13:d4:23:9e:
f0:f4:51:84:ae:af:07:95:68:71:29:21:c8:1f:ac:
40:95:69:f7:c8:cd:b5:9f:bd:cf:9d:60:1b:03:8e:
6e:12:c1:53:bd:31:df:c5:b5:e0:67:df:39:04:60:
25:5f:3c:a5:5b:d9:61:9b:01:1f:4c:7e:ee:a7:00:
e3:07:dd:69:a7:83:82:e5:99:f9:57:24:6d:1d:a9:
5b:0f:ee:45:21:3f:b4:b1:d9:d5:72:c3:6e:59:19:
b9:d0:b7:46:65:b9:04:eb:e6:9d:d7:c8:10:1e:66:
a2:ad:3f:07:5b:2f:a8:74:79:1a:9a:7b:fd:1e:7f:
f2:a4:33:61:4a:4f:ad:8b:30:d4:b5:fe:a2:77:b0:
de:f2:85:76:d2:1d:33:e1:08:f4:b5:9d:53:5e:3a:
ae:67:ec:cb:a2:d3:39:ad:47:b5:1c:c4:90:a5:ea:
55:4e:24:55:e5:1a:e2:e2:0f:e3:77:2c:3f:4d:e6:
50:99:a8:4b:bb:fd:81:0d:12:db:31:1e:5c:20:69:
ba:16:09:96:4a:0a:3c:f3:f1:c2:8b:2f:fc:7e:b9:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:42:3B:A7:7A:B7:08:72:49:D6:8E:24:98:CC:5E:6A:24:72:0A:E3
X509v3 Authority Key Identifier:
keyid:A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:6e:5a:7f:16:68:a0:04:f1:5a:da:23:a3:e8:37:c8:a9:b5:
6b:bc:83:db:20:34:25:93:e1:61:c2:78:64:ac:69:51:41:b5:
cd:74:b5:a4:50:44:90:4b:bf:8c:36:53:83:2d:ba:50:cc:25:
bb:e7:bb:88:6a:22:5b:d2:b5:81:d5:67:49:3a:dc:bb:5a:68:
94:06:ba:a2:55:a7:00:7c:ed:c8:c8:dd:63:38:18:bf:30:e4:
9b:cf:4e:ae:c0:f7:5e:cb:d6:45:ac:59:39:83:93:74:54:56:
52:63:ca:3f:b7:b8:84:08:10:c7:44:c0:e6:f5:85:86:1b:ad:
46:c8:88:69:f8:13:7f:1c:55:55:33:bc:9c:2f:a0:8a:ff:ad:
4b:22:57:63:8c:73:d0:67:f9:35:87:45:cc:7a:5b:30:70:8a:
8f:64:a3:70:39:5d:cb:ea:d4:d8:20:d0:e8:06:f8:dd:61:1e:
0b:72:c2:4d:3c:97:bb:bd:ac:4c:cb:94:62:31:df:e1:01:04:
d9:d9:6c:f3:7c:93:ed:0f:f3:4b:bb:24:70:5b:4e:2d:f8:d2:
2f:82:fd:97:44:1b:0f:1e:2d:00:b3:7f:34:f7:5b:32:43:41:
cb:29:e6:a8:98:44:bd:5b:b0:61:da:45:3c:f3:7f:32:2c:f7:
90:cf:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:52 2025 by rpki-client