Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json)
Hash identifier: wPsdhxcVwTCY78oM6fY+NV6e+5yjSNYm+Aide6sn2Ss=
Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2229
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
Manifest number: 21AD
Signing time: Sat 26 Apr 2025 13:09:46 +0000
Manifest this update: Sat 26 Apr 2025 13:09:46 +0000
Manifest next update: Sat 26 Apr 2025 19:09:46 +0000
Files and hashes: 1: -9NqEbVLtxcMQGDhsFUsirUgR90.roa (hash: YAPD8DouMRjl8InJgmqoPXZ+pjhCQ4vLb0TAZBDeTVA=)
2: -OwUbQLzqS9CtZr_wtRPxfVPmaw.roa (hash: nU8McGO3g2yTqZQuoumVj83hRYLsBYNlvrV6uYQKZvY=)
3: 0tIdMYbPh52gcnbONKM9sxEByR4.roa (hash: 5KLm0nAa5fOcsr0fbhaiO/JacSV520TVs9rJMJnaPNk=)
4: 4r97Xtcderk2rYaAfCVbfPoW-to.roa (hash: GeqdqfE7ko6jT4bYJmB3zZUkfFl2QdouEXCxGMC+aoA=)
5: 7gi6WSx9-W3Q_-0BTXzk72FY--s.roa (hash: hOgIBhnJyd+67kfMJ+asIvXRzv98Q3BxXFjjyBGTNkc=)
6: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (hash: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4=)
7: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (hash: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc=)
8: DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa (hash: JKM3JbUzp8Tp8W8FeRJcZ36tbe3l8DuRQx0dg+sgrBI=)
9: F-PLBkUJrhrV-KBJeTXlAo3uFIQ.roa (hash: G0OcVUn1H6U6vze7iL2fHDtXQLPXmGQGcExdKogT03k=)
10: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (hash: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4=)
11: HReb-ywFRD2sicgKUd2w0b7x10E.roa (hash: y65mKFijZQhce38APb8340kQcqbx8J1XoRf25Cv+AsE=)
12: Jti-bdW-scu_L4qJSVV8bFC34Hg.roa (hash: von2PiMAe0B935XVhzke3hrz/cpQJvoVxPOBvVAOqbQ=)
13: Kg-iXs-ZgDNd-P3bwxgPfjGf6H4.roa (hash: gT/dloENLe+1DgzIP0bxSsTmtxSc8ITXoF0nYrR0/LM=)
14: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (hash: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg=)
15: Mb88DUngG1AeeJ_spzyhH1MtIe8.roa (hash: rPbaYvCyBWVV6nFsWT4yFzdUpbPZoHNmTE5IeHtHFsA=)
16: OIcAhWMzK_7prvQFEasxweToIj0.roa (hash: xBqcWZW2JugLmKQfZ49aES8JiB/8xJHGQsV4BM/CTao=)
17: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: 75r18BZn+OmXjjPCTgOHm1w1wnMdrU3c+4/uzVe6lBw=)
18: WMANHMiWx1g3CI3Gqpc2-P8j_7k.roa (hash: qNeI26rm2x8bpU/OqzZTNDcppRMsi9Yh3o3Np4XxV+s=)
19: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (hash: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg=)
20: gjOyscTAwPENBh0n5Aa3QndEX60.roa (hash: HfhectSQmQlUhPpiM7eLV3JM7FPBo3tgWE1WoKdnnqs=)
21: hDX4u7pdx7Zf5kqxUv0PItrx1f4.roa (hash: grzzaZRI5mpPViDtJPvajB5QsdXQjicqtx/xXdx9O+4=)
22: n5ZNxatvv4XCouElRwkMzO6ANTQ.roa (hash: 2V2xIDmOEpYGle2/9Z9l+ERcP87JlV8yB1t7el2xCxY=)
23: tBEau9qaHWyukHWT05JHQ8xv6yU.roa (hash: yhpnPts3yhegRpvu3PBV7bzk7TlZ6bt6sB2BKxLt30s=)
24: tgoxuWcvzb42md0unwEcPBA-z-E.roa (hash: 8U1tCdX/+rNtC4iXplL0V8fy1x9AMLWS0KUZb06OkVk=)
25: tihOEV-WyZh2J6zruajXK8SgAPU.roa (hash: AUMG4eEdxdoP6cesREJuZwDefP4CdbQDPkHCN/F8erw=)
26: tou57tkArzeegu37p7K21QZeqNI.roa (hash: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw=)
27: uzejoKzTeKDkpAiT_kC3H2af84w.roa (hash: pxi1SN6x6SJe2L7OxxGf3guFu+VTbediU/lKPs/cm4c=)
28: ywYi0okn_GT3W2d2eD_7GQ0HewM.roa (hash: dhJ6G/hO2IpTJvPzX9YY2GzSuWjpi6GsiEi7zCLlzSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8745 (0x2229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Apr 26 13:09:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18:
a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53:
ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a:
95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49:
3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6:
6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9:
34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7:
8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71:
05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42:
14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f:
30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f:
e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2:
91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc:
8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb:
4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1:
33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f:
84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4e:e2:d3:6b:01:26:09:88:25:5c:c2:e2:62:88:0b:5c:3c:
96:be:8c:bc:bc:19:21:a5:9b:b8:8a:c6:38:22:e7:6f:be:bf:
b7:e1:bf:52:00:bb:f1:36:70:b6:d8:6e:1d:dd:92:a2:59:6d:
af:4b:fa:ea:4b:78:2a:a9:50:7e:62:64:bc:c8:97:40:79:e0:
bb:7e:5a:1f:50:ca:36:c7:28:35:76:5d:78:0e:b4:d1:98:2d:
c0:a5:66:25:e2:83:ef:d6:ec:08:4d:20:4a:d5:e8:e7:bc:85:
14:21:85:fd:1c:28:e9:83:77:f7:81:5d:ab:d0:6f:cf:6f:7c:
d1:ed:65:5d:76:81:b8:b3:46:28:7b:7c:94:bc:32:bc:95:44:
4d:13:78:03:dc:68:57:9d:40:27:6c:aa:b3:5e:6e:e8:24:0c:
40:76:5e:9a:69:18:d5:34:4a:e2:e1:29:23:fc:67:b7:5e:f6:
e0:53:d9:56:a0:05:cf:d9:5e:ea:3f:b0:75:64:7f:23:f7:d0:
12:e1:08:b7:79:1c:0e:45:4d:67:de:5c:9b:13:7f:3c:e6:2f:
81:a9:87:f8:f9:aa:5a:51:1a:ba:45:5e:75:47:9c:35:52:e6:
6e:bc:44:45:97:ed:c5:f9:42:13:97:bd:8a:7a:ae:76:c5:e3:
ef:a2:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:55 2025 by rpki-client