Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft
File: LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft (raw, json)
Hash identifier: 0rAxMmF8r9EnAXHumORGvDY+0UPtH9zVqBYDuvPovMI=
Subject key identifier: 3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1DA7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft
Manifest number: 1D7A
Signing time: Wed 09 Apr 2025 05:37:05 +0000
Manifest this update: Wed 09 Apr 2025 05:37:05 +0000
Manifest next update: Wed 09 Apr 2025 11:37:05 +0000
Files and hashes: 1: LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl (hash: M/YpLcL/ede9muaZzzzwZfKGZ47KrZz/+oZHWmC3oQk=)
2: MOpfOKLakKUbD4Yvc6IMEETsYXU.roa (hash: zY3Mu8k0ptEbOfDum8sFDQMosox9jQVr7fMV8zYO27o=)
3: Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa (hash: +OZE90GJjEGLc0YSJ3MKSYZDq2hjWW252HrT6Aj+hKY=)
4: ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa (hash: gJGxh859+jE7wgqaAF8/RndQfrxprblkT1TjJF3sT54=)
5: iJVJvcnXuKNFI9GtmipWn6rh_nU.roa (hash: xqpd9HPnh8PjBNNRGO/tkvxC87Vb3FHNaEPqdhWxxt8=)
6: kFq6PeZfE0EEFhDuCy93d7VYH3A.roa (hash: EBhwZCv6thWeEBufuvdoCNNvOuTc2q/xd/SoCakoqmY=)
7: mLygT07bsPXyMhSB7dYVubjMrR0.roa (hash: LNtyMviZ7C3D1tBvV3qAzxQU+QGTsqC8HClJmei0gnU=)
8: oed8Tlosroh-HEjKFL7ljpvar38.roa (hash: E/YmAsJIXKibJl3R+dATO9pn0upR1NSoP0lW/JU0+tY=)
9: ppHf14MzECzhrMYjBEgv5bsQX-w.roa (hash: wSF2eIYSzbb9GWp1Z2yFVWOEMNlDEJ7hbzYQcpR1Tjc=)
10: v6deB1Mwqvdm_8Ivnuccd4SudKU.roa (hash: 6bTSALhEXWierWH616UMZsVUcs+OnE+TjZIRHBk8Xck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7591 (0x1da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Apr 9 05:37:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3BF1B4C4CC5F75AE31369FEA603F5AF1FE7C27BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:38:4d:20:c0:de:68:1a:99:f1:0a:ca:8e:
cc:17:f1:34:6d:3a:99:43:99:9d:96:9c:9a:47:63:
9d:b9:13:32:e9:79:b4:2d:0c:73:46:41:47:1a:5a:
b9:97:4f:8d:99:43:04:b3:ff:53:97:ba:74:ab:f3:
58:05:53:04:5f:18:40:99:1f:40:7b:eb:42:85:91:
c0:77:98:29:cf:6f:6e:63:4a:c8:fe:38:e8:32:c6:
90:49:a8:fa:34:db:24:8e:e4:a7:f2:bc:c4:52:69:
23:96:2a:82:08:88:46:75:1a:21:14:b0:9c:f7:b9:
85:75:0c:77:02:6b:16:d2:e3:5a:70:41:7b:ca:39:
3c:d6:10:71:e3:5e:ec:44:a3:1c:88:cd:6d:ec:bb:
94:f6:f8:ea:86:da:44:0a:ba:4e:f1:09:02:3e:b9:
74:14:1e:47:a4:72:db:f7:29:69:55:38:47:0b:94:
66:fd:c4:6a:79:67:89:2f:ee:76:78:d6:7a:5a:d3:
54:c6:36:a1:03:a8:f3:7f:d8:80:ec:05:75:c7:74:
15:b1:28:df:93:6f:6c:95:aa:5a:4c:e7:a7:49:53:
4e:e5:29:21:eb:e0:40:07:76:d3:8b:c8:63:80:f1:
17:50:da:9f:10:9d:80:31:0b:cb:85:fc:8b:b4:a9:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cd:2b:80:36:84:f5:e2:5d:f8:9e:c4:37:32:d3:93:58:d9:
f2:0e:76:94:91:75:95:ae:68:04:c2:be:38:01:32:78:34:ec:
a0:04:9f:e0:b8:ee:d8:93:4f:eb:6d:3c:4b:c0:c5:51:e6:2f:
8f:c7:86:0c:7d:7b:b9:c4:12:5e:d0:ad:7b:c5:b8:74:a1:20:
5f:ab:4a:71:cd:59:37:d8:3e:66:48:47:b8:86:74:85:8e:3f:
50:f6:98:35:f7:de:05:d9:03:42:24:c3:27:18:26:d1:36:8f:
22:ad:79:43:6e:18:d1:ab:97:81:fd:9a:a7:02:fa:b9:f7:c3:
56:07:10:a3:01:b2:b7:fa:9b:86:b3:c9:bd:0c:cb:39:3e:a3:
19:c7:1d:34:1b:2d:60:34:f7:8c:e3:06:66:e6:82:9d:ec:6e:
f4:a4:a6:9e:7b:f9:9e:f7:e1:cd:f8:4f:fe:82:5e:81:dd:52:
75:c9:40:2e:7e:48:f8:12:01:12:4c:cb:df:71:f6:8b:36:d8:
24:bf:77:69:66:25:da:8c:80:7d:d8:b4:15:45:f2:08:f6:94:
8f:16:a5:62:0f:48:ff:88:d0:e2:40:c0:32:5d:9a:79:78:59:
6f:70:4a:5c:4d:75:cd:ff:d3:8a:63:4d:6a:d3:7d:9a:69:57:
ce:9c:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:08 2025 by rpki-client