Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
File: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft (raw, json)
Hash identifier: urx5T+khTOx/jTzJRCI3n6OAnRX6Z3Sm21VrhXHhftg=
Subject key identifier: 32:60:A4:7F:05:31:7A:0E:5D:CA:C6:FD:9B:82:46:AE:0C:C9:8E:B6
Authority key identifier: CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
Certificate issuer: /CN=CC8CF726F2323299108744D6930BEF18D677445D
Certificate serial: 1760
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
Manifest number: 1757
Signing time: Sat 29 Mar 2025 09:27:55 +0000
Manifest this update: Sat 29 Mar 2025 09:27:55 +0000
Manifest next update: Sat 29 Mar 2025 15:27:55 +0000
Files and hashes: 1: 1H_dEmlcHR9WrgXuUkgyw7TC6PI.roa (hash: PYMpJ9QJ790iCzSPPg6odQyh509VNCs3J8a0L4Xr8Vs=)
2: KzxPrZsNmlG9fHcuHEAELhTildI.roa (hash: lKTisdtJ9wopA8c02OL0FrfptSw09OytCXCrsSw4ZJ4=)
3: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl (hash: 5Wf1k6IlHxHUrXoIijhV6yPmolfW/1ho9nKUgNRjn3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5984 (0x1760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC8CF726F2323299108744D6930BEF18D677445D
Validity
Not Before: Mar 29 09:27:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3260A47F05317A0E5DCAC6FD9B8246AE0CC98EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:16:1d:f1:24:d5:4f:31:8e:f6:7f:b2:0a:
0f:6a:55:ce:e2:ef:43:77:69:91:f8:8b:ba:64:ee:
6d:13:b0:e7:93:c7:74:0d:f4:f1:71:1a:3d:e5:a5:
ed:c7:68:4f:ae:56:da:ea:2d:7e:d0:4d:9f:df:9d:
66:c6:1e:3c:ac:6f:db:d7:37:c1:f0:fa:bc:a4:c8:
06:81:2c:b6:57:52:91:23:64:28:9c:16:2a:bc:24:
76:c5:f4:0e:2c:6c:a3:86:16:d4:92:d0:a3:97:aa:
94:c8:0b:63:bd:3d:16:90:4d:95:47:3a:d2:c2:1e:
b7:08:6e:fc:cc:6a:3f:d0:1b:29:06:6d:ea:c3:86:
11:ae:18:33:d8:2c:e8:85:80:c1:9c:06:84:86:f7:
a4:0a:6c:33:34:8a:31:f2:00:9c:36:83:1a:93:0d:
fb:96:60:d0:6a:de:ce:17:77:91:ac:84:67:67:98:
7b:e3:dd:41:37:fb:f8:13:b0:5a:4e:aa:3c:e1:a5:
85:66:5b:71:c6:c9:7f:05:ee:54:da:97:e2:58:e8:
50:eb:c4:8c:be:28:dd:c3:5a:a3:91:5d:24:99:45:
41:ef:0a:92:84:30:bc:7c:7b:67:0e:e6:06:ba:16:
53:2e:31:76:cb:54:43:69:8e:2d:e4:b1:31:02:16:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:A4:7F:05:31:7A:0E:5D:CA:C6:FD:9B:82:46:AE:0C:C9:8E:B6
X509v3 Authority Key Identifier:
keyid:CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4e:89:5b:22:0f:80:5f:25:e9:c5:8e:15:7c:db:29:18:d9:
cd:f4:84:5b:b8:01:c2:6f:1f:d0:43:bb:c8:b1:39:54:b6:a5:
26:b1:db:7e:60:3b:9f:30:e6:bb:52:a9:e1:12:d6:55:f0:a5:
3e:7d:92:6a:df:b3:2b:71:90:f3:4e:8d:82:8c:3a:45:d8:2e:
e8:0b:b3:e8:6c:c9:94:5a:0c:82:d1:84:7f:f7:d2:1b:49:8c:
62:ad:e2:21:4f:a1:b9:09:01:c8:f1:31:5e:11:a7:54:aa:89:
b0:b5:22:17:f2:21:81:2f:c3:d5:7b:1a:1c:be:95:c6:3a:c5:
a3:e9:33:02:01:06:71:3a:fe:66:52:cd:f9:db:ac:6f:6a:f3:
cc:c3:3c:55:37:9f:4b:c5:75:31:9d:2d:1c:a4:2c:82:e6:c5:
5e:8d:ba:82:dc:65:0d:8d:90:26:45:b1:de:7f:4f:b6:27:da:
5f:11:5f:a4:47:dc:b0:fc:b1:d4:a5:33:a4:25:0c:fb:82:ae:
e7:20:8a:bc:92:74:57:8a:fd:8a:0d:cf:57:2f:6a:df:f5:95:
67:55:14:ed:31:d6:85:be:9e:bc:4f:4c:de:2b:fc:2b:3f:a4:
20:3a:b6:ff:1a:15:26:fd:46:fe:b2:70:d6:d4:90:c5:80:1c:
b5:6b:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:45:30 2025 by rpki-client