Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json)
Hash identifier: 7e4Z7RtmsCOc57zQHJw67828qb3pkh6sLmavG0mUgUE=
Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4CD2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
Manifest number: 4C1E
Signing time: Sat 26 Apr 2025 11:06:25 +0000
Manifest this update: Sat 26 Apr 2025 11:06:25 +0000
Manifest next update: Sat 26 Apr 2025 17:06:25 +0000
Files and hashes: 1: 6-j7tWwgCHXAtn7kDXObctV_AbQ.roa (hash: uiMHtKQFS0wX0O4bZaGARhmnsaywtAHQxXYoxy6HoOY=)
2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: m/jJn3qht/Fuqxj15JfIFZ+CrCWTyBzIXoi+bV+vthc=)
3: BFYDfHNXz3f3DQh7ldupGgODZ0o.roa (hash: 4J5B5ab0UvtREoxCvbEjhof9upQ4t4Q0Ovk6QH7ir5Y=)
4: I-uQGrh2Q6qg89jrFtkRmzENoe0.roa (hash: Depiq44HBl39EzMJPK1i1nQ9abG5TAtbWX5wWww6tCA=)
5: LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa (hash: efqng/VZ0qObM6O+6R64v60Zms/fZuugEkKrT05KSfU=)
6: fjW9kpn-jSDef962IrBiDPJFxcI.roa (hash: 8/JUM4FE6l44cxvaJlc7MWmB3UMokrNBqRDkPsNPTLM=)
7: krfPRDv5zvWiFPpV7weQFS6h0CE.roa (hash: WxYdudw0s2KRXFRCIr7gzkMY53glRPq6Szdw3Ohh65I=)
8: mmx-GbSs4J4VUGylqPz_FT6uUIs.roa (hash: 6m8OY4pMm2b/rjB1SdyO3trcbplZ5sBLGqMbwi/clbY=)
9: xybbBi6KI2WCBlZPUU_EJEFp33o.roa (hash: uKhpfiSFW/JaJzaa26g7fqIjZfggQQRITCSjYAE3m1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19666 (0x4cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Apr 26 11:06:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84:
da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea:
da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08:
02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8:
25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7:
59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61:
a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc:
fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a:
7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1:
67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72:
5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c:
a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33:
02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da:
93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e:
17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98:
98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a:
cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:be:39:d9:aa:e1:9b:35:7a:2a:c6:ee:bf:2e:1a:1b:c1:f5:
91:6c:34:5c:c3:81:16:c7:cd:a7:d7:b1:90:c9:1b:79:d9:52:
97:8a:72:96:bc:4e:c8:b3:d5:78:b7:5c:9d:c2:9b:1b:69:44:
3b:cc:e9:d9:4e:e9:75:ff:72:23:0f:28:c1:02:07:bf:36:2d:
ce:07:95:bb:7e:81:6f:18:8a:92:bd:02:96:ce:60:fa:a1:25:
56:03:ae:be:c6:01:7e:83:fc:3a:fa:0e:4c:53:06:a9:57:c0:
df:2a:f1:b6:2a:f6:05:e1:16:71:98:2f:c6:b0:c8:91:f5:0d:
57:c9:e3:9c:5a:90:d9:a3:6b:72:44:5d:cd:02:28:b9:84:66:
5e:fc:b3:d3:ee:cc:d3:96:41:70:53:b2:36:7f:09:b5:23:f1:
83:62:3a:b9:1e:a4:11:7c:20:16:b3:ae:b5:cf:61:4a:ef:61:
65:b2:66:16:0e:5e:31:0e:a3:2d:3f:9b:9a:5c:5c:7c:9a:cb:
d5:f5:e9:70:27:05:90:5e:9b:82:db:8e:06:2b:44:26:14:22:
40:89:37:cd:1d:7b:f3:e7:1e:2a:62:7e:01:ed:45:98:79:b5:
3f:56:1e:33:c5:a0:53:33:51:61:62:e3:9c:38:ad:99:7d:c3:
2b:1b:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:29 2025 by rpki-client