Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
File: mlx0rj-M07Z5rFbEc_RQN4WRkms.mft (raw, json)
Hash identifier: PwXW5i6MGUMgJj2C0rAmte9acVNcsgzjgv30qsxr1YQ=
Subject key identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 1DEA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
Manifest number: 1DDA
Signing time: Sat 29 Mar 2025 06:27:18 +0000
Manifest this update: Sat 29 Mar 2025 06:27:18 +0000
Manifest next update: Sat 29 Mar 2025 12:27:18 +0000
Files and hashes: 1: BJ8T6xeZmMZPoJmpWakz5R26fNM.roa (hash: 4dzjcrkTArAsirZGrc5ZYf3u9Rn1+p/i9kWIil0/S6o=)
2: GffFEt798jGr2kcFeplLE9TiUpw.roa (hash: x/NW5R0sx7+4pKoOo1eHG33Vc6aGyXA8OuFJtzNxon8=)
3: GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa (hash: 8dxpRvljiGFK6kC5Y47WYo2ofFRXbFVeh34A5lPzXCs=)
4: KebNhNqHYlNdAxB9cgzJuTzHbFs.roa (hash: 5TjKvSC7WlvKE6HkDjGaROjX06WQePtjRheVhtqxHWo=)
5: TuRAimkG7nUfxwwnfG2ggisWEWQ.roa (hash: rJ770ZZ28gQ4Oy6pYNR7fhAhl+t7lmth+T2+S8AjKOM=)
6: mlx0rj-M07Z5rFbEc_RQN4WRkms.crl (hash: /kl8FcvItGDMPcyKMQpt07qfrVGwDJR6DmKtWRJH+2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7658 (0x1dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Mar 29 06:27:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DED08EF758D4AC1835950E046F31B9ED40123207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:b4:f4:af:6f:ac:59:2d:d1:16:e3:99:9d:
09:77:1c:8a:5e:2d:8f:8b:bb:83:34:11:10:f9:8e:
84:8f:27:66:e9:3c:be:6d:8f:8f:4c:3c:ad:d7:2c:
0c:37:06:ac:4e:22:a3:e5:7f:e0:90:60:42:32:60:
c2:25:cb:72:3e:b1:2d:30:c9:7d:98:0d:48:d5:44:
96:12:df:47:d9:8a:df:3b:ba:04:bd:b7:ba:c8:ce:
93:00:73:aa:4f:ca:13:74:a2:80:55:83:9e:d3:d1:
8b:50:fe:09:23:7a:ec:e6:d1:2f:9b:fe:36:e1:1e:
92:91:17:ee:56:0b:a6:70:07:68:74:62:a6:8f:29:
3c:24:4f:b0:c3:a2:ff:06:57:43:0d:77:1d:b0:fd:
1d:0b:63:19:1e:a6:cb:86:b4:77:0b:8b:80:b8:86:
a6:55:45:dd:80:a4:32:16:45:8f:78:a1:b0:17:ab:
78:dd:54:a5:60:0d:71:9b:d3:59:78:a2:92:6b:a5:
d4:f8:0c:a9:41:32:11:ec:94:c4:59:ba:8e:89:30:
bb:b1:ef:1e:f1:fc:27:6c:6c:79:e3:13:6e:4d:f4:
8c:61:7b:20:dd:52:81:39:08:4f:da:10:13:81:29:
c4:b2:f2:18:06:f2:99:9e:57:37:d1:c1:ae:7d:76:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:75:84:03:04:62:87:1f:59:5b:79:81:a5:c6:78:c2:dd:
0d:76:27:0d:5c:b3:46:ea:a7:84:82:30:35:13:97:04:8d:be:
65:17:46:6b:b5:f2:f1:d7:3b:16:a9:78:85:f6:b0:24:ef:ce:
ae:9f:a5:31:10:df:c8:cb:4b:d8:24:bd:79:64:e8:46:7b:bd:
ce:99:b1:8d:ca:8a:e0:4a:e2:9b:54:a2:f6:db:5e:f8:e8:39:
da:35:16:84:37:d5:72:c1:fa:10:09:18:f7:cf:1d:92:a3:fe:
69:49:17:4f:a7:73:cf:db:7e:62:a0:53:02:9d:24:f9:5b:6e:
ad:fd:a2:96:83:7d:e1:a0:7f:58:70:59:9c:3f:32:f4:ee:a3:
7d:00:cf:f4:45:f6:96:91:77:7e:e5:c2:6a:4e:fb:de:3b:77:
4a:04:e8:9e:b0:09:71:4a:1f:6e:94:03:5b:7b:f1:a2:34:de:
03:26:e3:83:86:3f:fa:2a:52:7b:c9:fc:93:81:71:18:9e:7d:
e7:3e:03:56:f3:d2:7e:13:98:c6:f4:a4:86:8b:83:cd:5a:84:
e6:c9:6a:e6:a0:fd:2c:40:7a:c9:ce:e6:56:12:d2:34:ab:9d:
50:29:e4:2e:b7:a5:5a:cf:2c:42:0c:90:28:ba:98:ab:10:d3:
e9:9b:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:39:03 2025 by rpki-client