Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
File: -ta0PAnQSQoN9_iR359jtSDPIQ8.mft (raw, json)
Hash identifier: Gg57bvaWr2SdbZNm5D8izD7UmUUmR7FkOyv/6LjNPn4=
Subject key identifier: 4B:CC:44:71:84:49:7A:8F:AE:B3:76:9A:D7:67:F2:E2:87:1D:2E:AC
Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Certificate serial: 0F83
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
Manifest number: 0F7B
Signing time: Sat 21 Jun 2025 23:41:34 +0000
Manifest this update: Sat 21 Jun 2025 23:41:34 +0000
Manifest next update: Sun 22 Jun 2025 05:41:34 +0000
Files and hashes: 1: -ta0PAnQSQoN9_iR359jtSDPIQ8.crl (hash: TMDLofLEl0FJItlixMxVWmNXrWTWHt2AucpJxjv1P/I=)
2: jZYYEWocgaa7kE62wHrtcbhmeqg.roa (hash: imxvfDsgpwHiKGk2ShLZNPp9PfRPBN6EzLl65EE3xwI=)
3: quj3JK30OXbnje-5SHznSVufOkU.roa (hash: QFco1R1nZco2MXFS8wJ24/UVjY0SEkcS4e5JbGrfWNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Validity
Not Before: Jun 21 23:41:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4BCC447184497A8FAEB3769AD767F2E2871D2EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:ee:2b:68:e0:56:e6:b1:31:28:fd:47:ec:
4f:11:cb:57:24:26:ab:d1:62:af:be:7f:2a:fc:e0:
a6:ca:09:fa:df:39:bf:1a:4d:ee:e7:d2:04:13:4c:
ac:e2:0e:1e:ad:f4:e7:66:10:72:a4:dc:dc:58:0b:
2b:30:18:84:09:a9:c2:92:f5:48:0c:e0:c7:e2:e8:
76:37:fe:e1:0b:b8:b7:cc:b4:a7:1c:f6:f0:00:a2:
4c:88:c2:0d:1c:77:ee:ed:5e:1b:ab:6c:63:b1:fc:
b8:42:c7:dc:5d:96:72:b1:a2:f2:ab:6d:8b:6e:f6:
28:87:66:1f:a9:05:09:e7:13:7d:9d:7e:49:b9:35:
62:13:98:cc:ad:e2:3f:3e:50:3a:6d:ad:48:06:a3:
4d:d0:25:33:71:7f:f4:45:31:2e:da:ea:70:d2:f2:
bb:86:d1:7d:04:a2:98:b1:ca:26:25:9b:b7:84:56:
af:f6:ae:d6:85:b8:1a:b5:78:24:84:58:57:60:b1:
ed:e2:3f:f0:d1:fa:4c:57:30:15:22:fa:37:8b:f8:
10:fd:c8:f7:0a:50:d3:19:f8:15:cd:0d:b4:c8:b6:
35:e0:c2:1d:71:28:31:3d:05:53:bd:9f:f7:f2:c8:
51:e0:c9:cb:a8:e3:82:d0:1e:9e:d2:83:a2:44:6e:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:44:71:84:49:7A:8F:AE:B3:76:9A:D7:67:F2:E2:87:1D:2E:AC
X509v3 Authority Key Identifier:
keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:63:9d:df:8e:0f:6e:4a:01:e9:31:3c:e5:aa:72:3d:cc:
cf:76:8c:61:25:04:08:06:cf:cf:14:c0:f6:5f:bb:e6:b9:05:
d0:b0:9a:4b:7d:5e:a5:fe:69:6e:fb:7d:a8:5b:f9:c0:a5:c0:
d0:72:54:e1:a7:82:ce:85:8d:14:3a:f5:49:9f:f9:84:49:e7:
4e:7d:d9:6b:0e:8e:2c:72:8b:5e:73:d0:b5:01:f4:d2:c4:84:
7f:9b:d8:bc:2f:29:c6:9c:ec:1f:82:be:95:f0:23:bf:d8:36:
14:b9:87:2b:53:75:84:f0:66:0b:e0:4d:2e:f7:86:87:5b:5c:
42:e9:2c:17:99:87:be:ea:ef:bb:97:f8:4f:c0:eb:1a:29:a5:
a3:26:66:a7:9d:35:21:71:b2:72:9f:ec:3f:9b:f7:b3:54:88:
68:8f:1b:5a:52:50:ca:d7:2c:36:60:33:30:65:d8:66:63:04:
6e:1f:12:74:39:8a:db:43:5a:19:a6:8e:86:b9:0c:2a:0a:fb:
7a:24:fe:6c:1b:f7:16:92:3d:70:5a:bb:be:27:ba:7c:d6:6c:
b1:3d:7d:be:97:6d:b1:ce:c8:96:2d:97:9b:d0:21:a2:2c:b4:
48:96:ae:56:3c:a3:42:62:61:e0:2a:32:78:17:df:45:ed:f0:
da:4e:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:05:07 2025 by rpki-client