Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier: yO9pQCIdSdco2iWV9pezRIT5nZMTaWxUXI6jL2rQ8pk=
Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 15BD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number: 15B5
Signing time: Sun 22 Jun 2025 01:13:20 +0000
Manifest this update: Sun 22 Jun 2025 01:13:20 +0000
Manifest next update: Sun 22 Jun 2025 07:13:20 +0000
Files and hashes: 1: 2XEBblbU0AtO7E6g_mThkL95ubE.roa (hash: DUInj+jg8J7IJSWSU2YD6iUFjAi3mK5xuxno0tl+ZGU=)
2: QVGtqSaVkscnVb64lhRi-cMEHSc.roa (hash: Ww6dLhQGxl5xTNIHfw+jluIsVDrzSDLMJsr6pk3RFXE=)
3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: +lrczv3DcwgH5KZRyxfFErZysQkg/e/qnuLnGp0H3p4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5565 (0x15bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: Jun 22 01:13:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:31:1c:ae:e0:75:8c:61:6d:f5:e0:a3:eb:d2:fe:03:2a:
a3:2e:5f:f7:9a:85:2a:d5:95:af:18:63:bb:cf:c5:39:a9:ee:
d6:d0:ae:a3:92:0e:11:27:e4:da:93:d8:0c:f0:5d:fc:08:f8:
4c:49:10:d3:00:8b:a3:2b:c8:ca:46:b8:4d:5d:dc:39:85:23:
fd:a9:29:dd:8d:fe:36:04:df:3d:5e:45:fd:7f:db:96:58:7d:
5f:d3:01:27:4c:4d:cf:2f:78:65:14:34:11:1a:b4:43:d8:bb:
02:8a:24:08:13:33:25:52:57:57:51:00:38:93:9b:8d:64:01:
04:04:a4:1b:ba:b7:70:ad:24:9b:77:ec:7b:2a:40:96:c4:78:
22:cf:ae:4c:59:be:d3:29:73:d0:a9:c1:a5:6d:9b:eb:23:55:
03:66:9c:d9:5c:82:cc:c6:6e:72:d4:d8:05:5a:ce:8a:34:49:
df:0f:fb:4b:e1:03:d9:0d:4f:29:b8:2c:dd:51:51:a7:da:f9:
b1:22:26:94:02:e7:8d:72:35:07:7b:5e:88:b2:4f:11:a9:3b:
ae:55:6e:f0:ae:2f:00:db:8e:87:91:6d:47:4e:fa:d5:f6:cc:
a8:c8:34:93:a3:e3:d7:f0:58:42:a3:bd:1c:c9:6a:9d:bb:62:
24:27:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:54 2025 by rpki-client