Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft
File: COaEfe781aS_jvY6VWfs2gflVik.mft (raw, json)
Hash identifier: N4Wl6/LvBt98PiJ0qMzf44mnRWA0ms7p3H2WCVinMSw=
Subject key identifier: F2:97:CA:F4:89:E2:A5:25:7F:9B:47:5E:5C:3B:8A:7E:C6:66:EE:CE
Authority key identifier: 08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29
Certificate issuer: /CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629
Certificate serial: 20B0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft
Manifest number: 20B0
Signing time: Wed 05 Nov 2025 15:15:11 +0000
Manifest this update: Wed 05 Nov 2025 15:15:11 +0000
Manifest next update: Wed 05 Nov 2025 21:15:11 +0000
Files and hashes: 1: COaEfe781aS_jvY6VWfs2gflVik.crl (hash: zmVRDvQSEauMqQBvYK2dNvdJJOY9t3DXCwKmrmf9m8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8368 (0x20b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629
Validity
Not Before: Nov 5 15:15:11 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=F297CAF489E2A5257F9B475E5C3B8A7EC666EECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:da:00:96:3c:bd:65:31:9d:3a:11:dd:03:ac:
a6:b4:e5:b2:2e:3d:a0:96:51:07:d6:51:88:3e:97:
b5:64:c6:ff:e7:d1:0a:d2:10:e4:d6:4f:20:be:b5:
24:c2:a0:68:4e:48:78:2e:7b:ab:75:f2:3a:9c:06:
2a:5e:ae:c5:53:25:12:b6:ef:79:af:0c:53:00:de:
2a:52:70:55:9e:e3:cc:a5:b6:80:7f:cd:b5:f2:e9:
b4:c5:12:fc:b7:87:45:8d:ff:f6:67:a9:93:da:f8:
d5:9b:e4:45:8b:bf:64:9e:90:27:5d:ca:29:bc:41:
0d:d7:99:c2:74:02:87:dd:3b:1b:71:f7:bf:26:45:
28:0a:8a:ec:84:d6:16:be:e6:08:64:27:b4:f8:87:
86:a1:e0:0e:f6:e9:00:8f:bd:2e:18:07:99:34:9e:
9c:2c:30:ad:75:a2:d7:f7:7a:09:9a:d3:8a:76:65:
e0:24:44:85:f4:46:82:bf:69:9e:03:bb:13:ce:d1:
20:02:2f:49:73:74:0d:7b:6b:38:6e:45:d5:5b:56:
cc:63:c8:b8:57:45:79:72:60:98:52:b0:bd:bf:d3:
29:c7:57:7d:74:35:2d:bc:8b:ba:f3:bc:59:4c:a9:
8a:3d:58:31:5b:90:1a:bd:2c:0e:6a:97:31:3f:8a:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:CA:F4:89:E2:A5:25:7F:9B:47:5E:5C:3B:8A:7E:C6:66:EE:CE
X509v3 Authority Key Identifier:
keyid:08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:79:a6:e6:65:ec:f9:c7:e1:50:a8:05:68:43:95:0d:50:
be:75:4d:75:4b:4b:29:14:60:39:cd:de:f1:d7:4c:29:d9:04:
4b:78:75:c6:a7:cd:0a:6a:76:db:0f:67:4c:57:f7:4e:73:72:
32:3e:34:9f:dd:a9:4b:79:6b:95:61:c7:7b:73:7f:c0:1a:6d:
0d:39:dc:7b:69:ef:ce:66:6f:ce:eb:79:5f:90:9c:f8:a1:c4:
ba:65:20:c1:07:3b:df:85:4a:64:20:d3:e7:b6:9c:71:f0:fe:
a2:d1:da:a9:27:ce:7a:27:4a:43:80:a4:22:a3:33:a1:da:5e:
54:c4:33:18:80:98:ee:3b:6d:d7:24:bd:bf:4a:0b:6a:f4:66:
2d:00:50:98:b5:a9:5d:36:cc:ca:40:67:14:e0:6b:f9:2c:8b:
ab:ac:33:f0:6e:c4:c1:db:83:0e:3d:6f:45:c5:fb:b4:a5:a5:
96:e8:c9:b7:30:84:f0:fd:7f:a1:61:2c:f9:c6:26:f5:84:69:
15:e1:3f:b0:fd:a4:9c:39:b1:8d:47:6e:39:ae:4f:ce:e1:d3:
51:35:7d:db:78:f1:9d:a7:6a:b9:38:8e:6b:09:11:32:fa:f8:
c3:1a:b6:f2:99:65:19:d5:13:d3:d9:38:21:da:52:e8:33:84:
09:0a:e1:35
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICILAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDhF
Njg0N0RFRUZDRDVBNEJGOEVGNjNBNTU2N0VDREEwN0U1NTYyOTAeFw0yNTExMDUx
NTE1MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYyOTdDQUY0ODlFMkE1
MjU3RjlCNDc1RTVDM0I4QTdFQzY2NkVFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx2gCWPL1lMZ06Ed0DrKa05bIuPaCWUQfWUYg+l7Vkxv/n0QrS
EOTWTyC+tSTCoGhOSHgue6t18jqcBipersVTJRK273mvDFMA3ipScFWe48yltoB/
zbXy6bTFEvy3h0WN//ZnqZPa+NWb5EWLv2SekCddyim8QQ3XmcJ0AofdOxtx978m
RSgKiuyE1ha+5ghkJ7T4h4ah4A726QCPvS4YB5k0npwsMK11otf3egma04p2ZeAk
RIX0RoK/aZ4DuxPO0SACL0lzdA17azhuRdVbVsxjyLhXRXlyYJhSsL2/0ynHV310
NS28i7rzvFlMqYo9WDFbkBq9LA5qlzE/ijF9AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU8pfK9InipSV/m0deXDuKfsZm7s4wHwYDVR0jBBgwFoAUCOaEfe781aS/jvY6
VWfs2gflVikwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
OC9DT2FFZmU3ODFhU19qdlk2VldmczJnZmxWaWsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0NPYUVmZTc4MWFTX2p2WTZWV2ZzMmdmbFZpay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjgvQ09hRWZlNzgxYVNf
anZZNlZXZnMyZ2ZsVmlrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHVWeabmZez5x+FQqAVoQ5UNUL51TXVLSykUYDnN3vHXTCnZBEt4dcanzQpq
dtsPZ0xX905zcjI+NJ/dqUt5a5Vhx3tzf8AabQ053Htp785mb87reV+QnPihxLpl
IMEHO9+FSmQg0+e2nHHw/qLR2qknznonSkOApCKjM6HaXlTEMxiAmO47bdckvb9K
C2r0Zi0AUJi1qV02zMpAZxTga/ksi6usM/BuxMHbgw49b0XF+7SlpZboybcwhPD9
f6FhLPnGJvWEaRXhP7D9pJw5sY1HbjmuT87h01E1fdt48Z2nark4jmsJETL6+MMa
tvKZZRnVE9PZOCHaUugzhAkK4TU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:17 2025 by rpki-client