Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft
File: LiZtw-rYDrJdSYWKZNwe8cihuUI.mft (raw, json)
Hash identifier: y87ciBHXiYbWjUBv5eUE8cR17Bj+f3gL1LltHJgbmjQ=
Subject key identifier: 3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 25C9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft
Manifest number: 0AB9
Signing time: Sat 23 Aug 2025 16:03:13 +0000
Manifest this update: Sat 23 Aug 2025 16:03:13 +0000
Manifest next update: Sat 23 Aug 2025 22:03:13 +0000
Files and hashes: 1: -GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa (hash: XMRU4RMulafL9ykW2oShRAn56DaYEZ2ldVuJ0Q69omY=)
2: LiZtw-rYDrJdSYWKZNwe8cihuUI.crl (hash: Ouhes3tmbzsYu3VbuwWlPxh6qi4DZu1GCGxBB7ryijQ=)
3: N068Movxhd0HY-G9IlBTH0wcH-o.roa (hash: 52PacQFpyIpw+nFdeX2RQwEMG/bZk45cRChsSeSXizk=)
4: OjvJeSo6lsEg9uLCdozMhBG1wpM.roa (hash: o11AaYnXnEfRHY+f+c5bRhxX0vq/1+fUyNDi4psENWI=)
5: ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa (hash: FvWAWdHlZfe8cZsITf2/A06d9VsOp6LGA7o/YZd8tAI=)
6: kHETLM6cygeGpKKoqih1EPU7gmI.roa (hash: +LQA3OraGUIU6wW3F0A+ePFfIqnRqwHWcGXQxQ6FNG4=)
7: nHfB2GHYBmc8bX5DxbEirv_IKF0.roa (hash: 6zuNH+NuLOtHpcZwmZyV/YBPSvVE39rWVdrUOXiD83g=)
8: yVCeVSdYcGSgIEZ7ns34fALeY6w.roa (hash: 37YcQVfz5Xs12JKZlzGMhU0SATgmn3/Zn9Jnck5yiyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9673 (0x25c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Aug 23 16:03:13 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3DAB334DEF9EC09F697BE2E8AA96126637E5FE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:1a:85:4f:41:aa:4f:1d:ad:88:bd:9e:28:
1f:ee:13:f9:de:f9:37:ac:78:ea:a9:b3:6d:4b:31:
54:0f:be:48:75:53:a3:bb:f9:eb:19:27:3a:cd:ad:
bd:a9:d6:82:d8:76:ca:7c:31:80:53:db:5c:e5:b1:
f6:b9:9b:5a:3d:24:8f:1c:9a:f4:2d:16:d4:8a:6f:
66:0a:db:b7:ec:fd:e8:9c:5f:5f:78:0c:ca:42:91:
f4:9f:96:45:b8:19:f0:b7:90:92:8a:39:fc:85:bd:
15:1f:8a:72:49:91:41:25:30:2c:7a:c1:44:a5:98:
bb:93:62:25:87:cf:11:46:0e:ec:f6:29:fd:8c:01:
40:d9:3b:5a:a4:53:d1:57:72:bd:85:81:3e:63:88:
9d:a0:cf:31:3e:50:6d:94:81:6e:96:bb:ba:09:e9:
32:3b:87:3e:2b:03:b4:36:c8:14:1a:45:4d:11:2c:
18:53:66:c7:b7:6b:7f:12:68:3e:e7:f6:e8:09:c6:
c8:da:61:14:e1:8a:8a:37:bd:73:91:1e:83:1d:47:
77:e4:3c:59:07:32:ad:4c:47:e3:5a:ab:27:81:a8:
f9:02:67:a1:4a:5b:cf:a9:de:68:a4:31:94:d8:be:
e9:da:1f:83:f7:d2:26:6a:5f:cc:99:ba:40:62:01:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:8e:57:9e:be:8a:3c:3e:0a:e9:9d:8f:22:04:4d:d0:79:
40:71:a0:ce:20:80:49:8d:ba:00:dc:bc:c0:89:dc:e3:01:c5:
f0:e3:8b:10:48:ed:17:da:1d:52:a1:91:8e:e6:c4:20:17:f7:
23:72:5d:a3:c2:69:25:d3:d7:7a:38:66:59:92:e4:4f:7d:db:
a3:9f:63:7a:1c:2e:13:70:5e:54:79:8d:4a:0e:eb:8f:c8:54:
7e:d5:5e:d8:74:5b:d3:f6:7f:f9:71:6e:aa:3b:6d:47:37:36:
95:33:c3:d2:e4:e5:45:86:b3:11:ed:f3:82:80:84:ff:a7:e7:
71:62:e4:70:24:2e:93:ba:4c:f9:8f:e0:0f:bb:f4:5c:40:db:
7b:90:b2:8a:2c:b6:a6:5e:55:d8:6f:2d:93:7f:ae:c6:db:08:
86:93:ba:09:e2:cf:68:db:29:3a:30:08:e9:de:0b:1e:07:a6:
16:db:9d:4f:f7:9a:ea:2c:70:f1:a5:4b:99:6b:77:b2:7b:c5:
11:98:07:70:8f:92:5a:6a:25:d3:75:5a:86:6a:c6:e3:88:c3:
33:8f:c9:93:af:ba:56:b2:98:71:8e:41:bb:e7:53:dd:8f:25:
d0:d5:ca:99:d4:c9:ae:53:2f:ed:d3:92:19:82:9f:86:63:ad:
88:04:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:58 2025 by rpki-client