Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/PCDtT5rXgpNWMjM6hYTw4iScTPk.mft
File: PCDtT5rXgpNWMjM6hYTw4iScTPk.mft (raw, json)
Hash identifier: sEP2j2rCd0fSCx1pdlV6FH+vLAyU13qWAJheVsxpMKI=
Subject key identifier: 0A:B2:E5:D0:F1:87:3D:99:D7:4C:64:D4:A5:94:17:F9:5E:1E:79:64
Authority key identifier: 3C:20:ED:4F:9A:D7:82:93:56:32:33:3A:85:84:F0:E2:24:9C:4C:F9
Certificate issuer: /CN=3C20ED4F9AD782935632333A8584F0E2249C4CF9
Certificate serial: 23D6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PCDtT5rXgpNWMjM6hYTw4iScTPk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/PCDtT5rXgpNWMjM6hYTw4iScTPk.mft
Manifest number: 23D6
Signing time: Mon 11 Aug 2025 09:05:48 +0000
Manifest this update: Mon 11 Aug 2025 09:05:48 +0000
Manifest next update: Mon 11 Aug 2025 15:05:48 +0000
Files and hashes: 1: PCDtT5rXgpNWMjM6hYTw4iScTPk.crl (hash: 6NCqdikHt4gZvNHvciniZDpQ3/k4PHTpiYDQjPL9fU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9174 (0x23d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C20ED4F9AD782935632333A8584F0E2249C4CF9
Validity
Not Before: Aug 11 09:05:48 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=0AB2E5D0F1873D99D74C64D4A59417F95E1E7964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:0e:41:23:f6:b9:12:43:28:83:f9:fb:d9:
15:92:5e:45:87:6c:1a:8d:0c:38:32:55:80:27:4a:
2e:64:f7:d1:49:1b:3e:39:19:d5:d5:4c:56:11:4d:
18:c8:41:27:7c:3d:03:f8:0a:54:e5:b8:0e:7c:f1:
99:f0:30:99:d9:55:2a:96:3c:f0:38:de:59:90:47:
1e:2b:53:06:86:17:2f:e7:c4:2c:37:f2:e7:9b:a5:
00:af:df:ac:ba:10:78:dc:3b:f1:e4:54:a1:d9:20:
24:5f:1e:e0:4b:72:5a:1d:87:f2:69:80:8b:5f:2b:
2c:a9:5f:29:bb:e2:dd:af:f3:08:7f:4c:52:60:6d:
9f:11:0a:d3:e8:d6:6f:9d:15:da:49:f6:55:07:1b:
e2:38:c1:1e:20:eb:0b:31:a0:3a:91:96:ec:ef:ec:
d2:d9:5d:70:11:71:43:a0:25:cf:ee:d0:6b:bb:b8:
36:fe:20:15:07:8a:96:f2:60:a7:e6:ba:d6:b1:1a:
02:1e:71:2d:22:75:72:eb:65:be:0b:44:46:4d:9a:
3a:44:6e:c3:5a:86:83:0d:ac:a5:3f:e1:5d:b2:b5:
cf:33:77:b8:8e:52:82:c8:b6:6d:64:78:31:5c:c2:
23:7a:8a:3c:fe:c4:32:5b:3b:64:59:05:7f:1f:d7:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:E5:D0:F1:87:3D:99:D7:4C:64:D4:A5:94:17:F9:5E:1E:79:64
X509v3 Authority Key Identifier:
keyid:3C:20:ED:4F:9A:D7:82:93:56:32:33:3A:85:84:F0:E2:24:9C:4C:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/PCDtT5rXgpNWMjM6hYTw4iScTPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PCDtT5rXgpNWMjM6hYTw4iScTPk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/PCDtT5rXgpNWMjM6hYTw4iScTPk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7c:37:35:50:c7:4a:7d:92:50:af:4a:bd:0d:00:e5:0d:ef:
68:35:ee:c7:6b:8c:e2:39:27:fd:46:1f:a5:60:21:aa:dd:b8:
96:e2:7d:77:1e:52:8e:00:39:40:f3:24:74:a9:56:a3:8e:a4:
c9:67:4f:3a:40:7c:48:67:db:8d:f1:ca:d8:49:00:ea:b9:ae:
64:63:08:03:9f:96:e9:47:d6:8f:99:4d:37:11:0d:c4:23:71:
be:67:fa:e8:b4:9b:71:4c:98:6c:e7:d9:46:cd:e5:35:35:60:
4a:57:43:5d:81:73:6d:24:fa:d1:25:1c:1a:82:cd:b2:26:71:
5d:ab:8c:b5:e7:c5:51:2d:dc:4a:2e:21:48:dd:08:d0:39:30:
7e:e9:25:ca:e4:fe:e2:b7:61:6e:14:b3:7a:0d:12:c4:74:73:
26:06:f8:3d:4c:e4:01:8e:40:ab:61:f5:f5:fa:24:8a:46:df:
4f:57:d9:bb:de:a6:fb:87:05:22:9a:98:5f:02:1d:af:6e:f8:
e3:9b:51:0b:46:89:7e:ce:a5:61:02:13:6e:8e:0e:f1:dd:89:
a5:d5:11:30:09:ce:11:34:23:18:c5:a0:7c:6b:fe:56:e1:17:
eb:ec:28:72:81:17:1d:2c:56:c4:37:48:e5:c1:27:2d:4d:b9:
42:77:e4:54
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICI9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0My
MEVENEY5QUQ3ODI5MzU2MzIzMzNBODU4NEYwRTIyNDlDNENGOTAeFw0yNTA4MTEw
OTA1NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBBQjJFNUQwRjE4NzNE
OTlENzRDNjRENEE1OTQxN0Y5NUUxRTc5NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBZA5BI/a5EkMog/n72RWSXkWHbBqNDDgyVYAnSi5k99FJGz45
GdXVTFYRTRjIQSd8PQP4ClTluA588ZnwMJnZVSqWPPA43lmQRx4rUwaGFy/nxCw3
8uebpQCv36y6EHjcO/HkVKHZICRfHuBLclodh/JpgItfKyypXym74t2v8wh/TFJg
bZ8RCtPo1m+dFdpJ9lUHG+I4wR4g6wsxoDqRluzv7NLZXXARcUOgJc/u0Gu7uDb+
IBUHipbyYKfmutaxGgIecS0idXLrZb4LREZNmjpEbsNahoMNrKU/4V2ytc8zd7iO
UoLItm1keDFcwiN6ijz+xDJbO2RZBX8f189TAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUCrLl0PGHPZnXTGTUpZQX+V4eeWQwHwYDVR0jBBgwFoAUPCDtT5rXgpNWMjM6
hYTw4iScTPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMz
L1BDRHRUNXJYZ3BOV01qTTZoWVR3NGlTY1RQay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvUENEdFQ1clhncE5XTWpNNmhZVHc0aVNjVFBrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMzL1BDRHRUNXJYZ3BOV01q
TTZoWVR3NGlTY1RQay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDJfDc1UMdKfZJQr0q9DQDlDe9oNe7Ha4ziOSf9Rh+lYCGq3biW4n13HlKOADlA
8yR0qVajjqTJZ086QHxIZ9uN8crYSQDqua5kYwgDn5bpR9aPmU03EQ3EI3G+Z/ro
tJtxTJhs59lGzeU1NWBKV0NdgXNtJPrRJRwags2yJnFdq4y158VRLdxKLiFI3QjQ
OTB+6SXK5P7it2FuFLN6DRLEdHMmBvg9TOQBjkCrYfX1+iSKRt9PV9m73qb7hwUi
mphfAh2vbvjjm1ELRol+zqVhAhNujg7x3Yml1REwCc4RNCMYxaB8a/5W4Rfr7Chy
gRcdLFbEN0jlwSctTblCd+RU
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:51:38 2025 by rpki-client