Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft (raw, json)
Hash identifier: gM5r+LuBYP4aq84N41Q0ETBNmmla6/psbUUxlzPcM4U=
Subject key identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1D5C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
Manifest number: 1D48
Signing time: Wed 09 Apr 2025 06:08:00 +0000
Manifest this update: Wed 09 Apr 2025 06:08:00 +0000
Manifest next update: Wed 09 Apr 2025 12:08:00 +0000
Files and hashes: 1: 4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa (hash: WUXgzF8/7vTpS4uvfiiFvOe2HOADwHJYR8UuxjhNVm0=)
2: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl (hash: Vn7waoGuLYiBIJrXBEnx9UULe1tkTbb3/6NQ4xFyYOE=)
3: NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa (hash: rNnKVfauMNkQjQMCBnzbua+dEEBtDwfUeKuVVJYIlHk=)
4: snw-NI25N0Ia9kFy4kqbaf1-Dz8.roa (hash: MZ8UlnboUaU3f+1a6FsBRFwSkOPQ7Y4u/AxUpRNGThk=)
5: tcNYjLabfsgNtY7A28BVLcZRkQA.roa (hash: VUZerhSHKXntthuMx1ErUjEcpUO2cjj7+J4Ad/TWPuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7516 (0x1d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Apr 9 06:08:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1794218645C7CCC4535A9526D8E2540877324BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:34:6d:ce:47:f1:95:a2:61:f6:f5:f5:c1:
65:10:2c:cd:2c:2c:92:49:21:25:4f:88:4d:68:34:
ae:ae:de:64:4b:2a:6b:c1:d5:6e:a6:80:0e:4e:01:
66:ff:de:82:b5:99:11:9f:2b:e7:38:e7:29:0d:d3:
3f:6b:a7:71:c3:1f:8a:c3:41:9d:a8:d3:14:15:70:
0e:02:fb:99:5e:8d:01:50:4f:76:11:b6:0e:1d:ff:
dd:05:89:97:b2:57:89:c1:ef:0f:e0:ef:b1:25:19:
c4:5f:79:ac:45:ed:6f:c6:f2:a5:2a:45:ce:bb:5f:
a0:b0:9b:9f:ce:39:58:c0:c5:49:2e:7b:07:f9:39:
d2:06:b1:75:6e:a4:f4:b3:a2:e4:69:e7:1c:92:29:
fd:8d:8e:56:d2:da:f9:b5:6d:8f:36:f2:2a:8b:da:
fd:c0:eb:c9:b8:14:c4:b4:df:d9:a1:1b:c8:e2:4f:
52:aa:90:6f:af:aa:aa:87:4f:01:e8:5c:29:98:3a:
24:82:10:3b:82:c0:b9:89:c6:67:93:51:1a:2c:00:
4b:55:2e:44:d3:38:a2:8a:72:95:e0:0c:3f:e0:ef:
da:d3:4a:65:a6:7e:c8:68:9b:82:ea:86:f5:3c:ed:
97:f2:db:e4:07:de:22:11:f8:72:5b:62:14:f4:60:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d3:41:fa:e8:7d:d2:0b:76:3e:1d:d4:2b:30:3e:c7:d2:b8:
00:f4:a8:0e:70:75:48:b6:b4:14:1b:c4:8b:66:cc:ce:16:cf:
93:e8:be:c9:b5:36:77:7a:2f:57:67:b7:f6:dc:46:5d:45:1b:
63:2e:1c:d5:a5:02:15:a8:98:af:be:34:8b:85:ed:b7:23:d7:
d7:35:7c:fd:28:47:8b:3b:5d:0f:9b:19:22:bf:27:34:af:d4:
83:2f:fb:34:fa:18:34:06:57:d8:fe:48:9e:e3:f2:69:2f:f9:
7d:9f:35:b9:2e:1c:89:a8:8a:6f:a6:22:62:44:50:7a:d0:e2:
ff:06:7b:c0:4d:fc:2c:1e:05:62:f6:c6:4f:30:76:bd:b4:5b:
b9:57:2d:64:67:49:c7:04:59:0e:f3:01:52:7a:f0:3c:c7:95:
21:c1:fa:e9:2e:b9:4d:06:2c:68:3d:b1:59:6c:a6:cd:4b:b1:
9a:59:6b:c3:a1:b6:15:2a:bc:48:02:b2:51:03:95:dd:b5:55:
ef:93:56:05:92:34:50:5e:69:17:21:b8:0b:12:b6:8b:78:ac:
4e:6d:90:bc:87:1e:21:64:4b:04:60:c1:7a:e9:18:73:8a:32:
0c:be:15:e7:5c:c9:f0:e5:98:32:3b:dc:1a:6b:16:1a:46:c2:
78:bf:a1:c0
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE
NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNTA0MDkw
NjA4MDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3OTQyMTg2NDVDN0ND
QzQ1MzVBOTUyNkQ4RTI1NDA4NzczMjRCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvrDRtzkfxlaJh9vX1wWUQLM0sLJJJISVPiE1oNK6u3mRLKmvB
1W6mgA5OAWb/3oK1mRGfK+c45ykN0z9rp3HDH4rDQZ2o0xQVcA4C+5lejQFQT3YR
tg4d/90FiZeyV4nB7w/g77ElGcRfeaxF7W/G8qUqRc67X6Cwm5/OOVjAxUkuewf5
OdIGsXVupPSzouRp5xySKf2NjlbS2vm1bY828iqL2v3A68m4FMS039mhG8jiT1Kq
kG+vqqqHTwHoXCmYOiSCEDuCwLmJxmeTURosAEtVLkTTOKKKcpXgDD/g79rTSmWm
fshom4LqhvU87Zfy2+QH3iIR+HJbYhT0YCEZAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUF5QhhkXHzMRTWpUm2OJUCHcyS9EwHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y
WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky
Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyLzl0V3ZJWldiZjV3Ykl3
MXlXSmp4RWFxai1hNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBl00H66H3SC3Y+HdQrMD7H0rgA9KgOcHVItrQUG8SLZszOFs+T6L7JtTZ3ei9X
Z7f23EZdRRtjLhzVpQIVqJivvjSLhe23I9fXNXz9KEeLO10Pmxkivyc0r9SDL/s0
+hg0BlfY/kie4/JpL/l9nzW5LhyJqIpvpiJiRFB60OL/BnvATfwsHgVi9sZPMHa9
tFu5Vy1kZ0nHBFkO8wFSevA8x5UhwfrpLrlNBixoPbFZbKbNS7GaWWvDobYVKrxI
ArJRA5XdtVXvk1YFkjRQXmkXIbgLEraLeKxObZC8hx4hZEsEYMF66RhzijIMvhXn
XMnw5ZgyO9waaxYaRsJ4v6HA
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:25:11 2025 by rpki-client