Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json)
Hash identifier: mZ72qEX/pa+qBKsgOAAyuALOwykT0AnNFMB/4eNFcEg=
Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4DE9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
Manifest number: 4D35
Signing time: Sat 21 Jun 2025 01:40:59 +0000
Manifest this update: Sat 21 Jun 2025 01:40:59 +0000
Manifest next update: Sat 21 Jun 2025 07:40:59 +0000
Files and hashes: 1: 6-j7tWwgCHXAtn7kDXObctV_AbQ.roa (hash: uiMHtKQFS0wX0O4bZaGARhmnsaywtAHQxXYoxy6HoOY=)
2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: VN8kLj8+Sb6pIy9SjRPQ1UT5Am0wBvs83ednGaoSmZQ=)
3: BFYDfHNXz3f3DQh7ldupGgODZ0o.roa (hash: 4J5B5ab0UvtREoxCvbEjhof9upQ4t4Q0Ovk6QH7ir5Y=)
4: I-uQGrh2Q6qg89jrFtkRmzENoe0.roa (hash: Depiq44HBl39EzMJPK1i1nQ9abG5TAtbWX5wWww6tCA=)
5: LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa (hash: efqng/VZ0qObM6O+6R64v60Zms/fZuugEkKrT05KSfU=)
6: fjW9kpn-jSDef962IrBiDPJFxcI.roa (hash: 8/JUM4FE6l44cxvaJlc7MWmB3UMokrNBqRDkPsNPTLM=)
7: krfPRDv5zvWiFPpV7weQFS6h0CE.roa (hash: WxYdudw0s2KRXFRCIr7gzkMY53glRPq6Szdw3Ohh65I=)
8: mmx-GbSs4J4VUGylqPz_FT6uUIs.roa (hash: 6m8OY4pMm2b/rjB1SdyO3trcbplZ5sBLGqMbwi/clbY=)
9: xybbBi6KI2WCBlZPUU_EJEFp33o.roa (hash: uKhpfiSFW/JaJzaa26g7fqIjZfggQQRITCSjYAE3m1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19945 (0x4de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Jun 21 01:40:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84:
da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea:
da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08:
02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8:
25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7:
59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61:
a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc:
fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a:
7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1:
67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72:
5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c:
a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33:
02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da:
93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e:
17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98:
98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a:
cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:23:8b:73:d4:7c:1d:ab:2d:cf:93:c3:bb:b1:47:5b:a3:cb:
81:02:fe:5e:15:1d:c9:e0:9d:22:2a:c3:cc:f2:55:ff:64:ef:
86:86:12:bc:73:b1:a8:92:05:0b:57:0a:b6:b5:94:b6:6a:0d:
fd:a6:a3:44:fd:6c:68:a4:76:8f:b8:dd:75:09:46:33:cf:50:
1f:25:91:af:57:c3:35:be:08:35:fd:b0:fa:51:15:3f:92:48:
8b:32:29:72:c9:48:ac:f0:25:6b:3a:11:26:cd:50:77:a7:59:
10:22:dc:91:88:98:a7:08:3d:69:0f:5a:a0:9d:f8:8f:d9:5a:
4d:e5:6b:11:b2:d4:cb:e0:5d:55:60:e5:19:58:f5:8a:e7:35:
29:6d:9a:b2:b7:c1:26:2c:c7:e2:4b:03:63:ac:ce:81:ba:da:
49:5d:ea:5b:7b:b8:57:3c:08:6f:15:b1:3f:28:52:d5:a3:cd:
1e:f0:00:5e:bc:e4:50:ff:cd:a0:f1:68:15:cf:b2:8d:95:3e:
79:91:c9:85:77:96:78:94:71:38:bd:5d:cf:30:d8:99:ac:df:
0d:e6:3b:b1:d7:4f:ed:61:1e:e6:79:ff:20:80:42:14:fb:37:
4d:2d:ad:1b:7d:16:b3:6d:fa:3e:7a:c1:95:37:3e:1a:a4:e3:
52:bf:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:14:47 2025 by rpki-client