Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.mft
File: hXvp-Qpbc3ygDo4Etiwm4ULUo7o.mft (raw, json)
Hash identifier: oDkTK/jv+P06QA9ord7qSTAlqLcEFbdZjl90RVNcyfg=
Subject key identifier: C4:6F:80:50:39:38:F9:FD:CA:C0:D6:B6:E6:BB:A6:7B:52:F0:72:BD
Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Certificate serial: 159A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.mft
Manifest number: 1596
Signing time: Fri 20 Jun 2025 20:45:29 +0000
Manifest this update: Fri 20 Jun 2025 20:45:29 +0000
Manifest next update: Sat 21 Jun 2025 02:45:29 +0000
Files and hashes: 1: hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl (hash: vbnMo+rhK+xgvTBlt2Dnhb46eysX5uQ9cUqbiAfPb7c=)
2: ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa (hash: GcwT+hZSarbhRdiY1h8Jkwre/Kdlz10lVaxkFCeWxG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5530 (0x159a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Validity
Not Before: Jun 20 20:45:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C46F80503938F9FDCAC0D6B6E6BBA67B52F072BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:b4:32:08:97:81:1a:15:0c:42:72:4e:c4:
c9:3c:43:f5:3e:17:1d:e5:50:0d:73:2f:30:09:fe:
29:ff:b6:43:bf:6f:25:2f:7d:7a:ed:31:5d:60:f6:
4c:1d:7e:3b:f2:0f:68:82:cb:24:e7:dd:b9:30:9f:
cc:ac:ac:d4:13:bf:65:22:fe:a0:77:38:0c:4f:34:
60:94:a3:dd:5d:3c:9b:6c:00:85:fb:94:3e:c9:4f:
45:4a:a0:8a:64:d6:05:41:41:94:1f:a2:f7:bb:c3:
c1:16:2c:90:ab:78:d6:98:81:58:eb:0b:28:f9:52:
ac:9e:8c:36:d8:3e:8b:89:49:e5:67:7b:70:05:a2:
6b:75:ac:b3:c9:d1:6b:b3:e1:0c:af:70:83:64:1e:
bc:49:21:2f:fc:21:04:e8:6d:90:65:4e:4c:0d:3e:
f5:21:da:3c:42:84:3d:66:cd:f0:1e:9a:44:1c:0d:
e3:a1:7d:81:e7:c4:ff:fb:3f:e6:97:0f:a2:94:0f:
a0:97:a9:69:e1:9a:2b:2e:cb:40:10:57:bd:4b:99:
3b:0a:00:d5:73:15:1a:11:4d:90:e0:2d:a7:41:8d:
ef:0f:a4:24:b9:fb:2f:1a:7d:33:05:3d:c1:b9:89:
99:72:4b:17:b4:e3:5e:f9:43:f7:6d:a3:8e:df:c7:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:80:50:39:38:F9:FD:CA:C0:D6:B6:E6:BB:A6:7B:52:F0:72:BD
X509v3 Authority Key Identifier:
keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:a8:98:a9:69:29:97:06:2c:79:23:9a:10:46:9a:16:0b:
f9:a5:18:c2:ca:1b:39:d4:d8:93:ac:e8:88:9f:2c:6a:3f:91:
4c:f3:67:c3:df:87:71:c6:6f:c8:53:35:f7:6e:0a:dd:ae:8b:
81:61:93:47:95:85:dd:4e:04:ed:71:5a:93:9a:ff:46:79:90:
36:12:a9:63:03:43:60:53:ff:6a:e0:58:df:c6:2a:1e:55:91:
d3:7b:e3:7d:0d:29:37:61:9e:b6:2f:78:32:e2:00:72:9e:0f:
b1:5c:8a:f5:f1:d3:d9:c2:f6:9c:87:0b:19:3f:df:d6:eb:c8:
02:07:a2:8f:eb:38:09:d7:28:e4:57:bb:47:a6:33:a2:2e:26:
05:12:ae:cb:ab:af:17:96:df:1e:e5:a1:f4:9b:0b:24:78:47:
99:79:89:4b:9c:21:1c:6c:fe:e6:93:88:de:83:d4:64:e1:29:
d6:40:22:2d:ad:87:39:56:85:f5:f4:e3:96:ce:26:f5:d4:74:
18:4d:fe:cb:e9:a3:00:c8:1c:28:25:f9:64:51:8d:b6:08:be:
fb:7a:4e:43:e7:9f:9a:7f:9b:d1:6c:4b:fe:b5:a1:07:01:a3:
45:c7:b7:13:30:22:5c:5d:40:e6:81:e2:90:4f:62:6a:b6:45:
58:82:c8:93
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU3
QkU5RjkwQTVCNzM3Q0EwMEU4RTA0QjYyQzI2RTE0MkQ0QTNCQTAeFw0yNTA2MjAy
MDQ1MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM0NkY4MDUwMzkzOEY5
RkRDQUMwRDZCNkU2QkJBNjdCNTJGMDcyQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfZLQyCJeBGhUMQnJOxMk8Q/U+Fx3lUA1zLzAJ/in/tkO/byUv
fXrtMV1g9kwdfjvyD2iCyyTn3bkwn8ysrNQTv2Ui/qB3OAxPNGCUo91dPJtsAIX7
lD7JT0VKoIpk1gVBQZQfove7w8EWLJCreNaYgVjrCyj5UqyejDbYPouJSeVne3AF
omt1rLPJ0Wuz4QyvcINkHrxJIS/8IQTobZBlTkwNPvUh2jxChD1mzfAemkQcDeOh
fYHnxP/7P+aXD6KUD6CXqWnhmisuy0AQV71LmTsKANVzFRoRTZDgLadBje8PpCS5
+y8afTMFPcG5iZlySxe04175Q/dto47fx5irAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUxG+AUDk4+f3KwNa25rume1Lwcr0wHwYDVR0jBBgwFoAUhXvp+Qpbc3ygDo4E
tiwm4ULUo7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx
Ni9oWHZwLVFwYmMzeWdEbzRFdGl3bTRVTFVvN28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2hYdnAtUXBiYzN5Z0RvNEV0aXdtNFVMVW83by5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTYvaFh2cC1RcGJjM3ln
RG80RXRpd200VUxVbzdvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADjZqJipaSmXBix5I5oQRpoWC/mlGMLKGznU2JOs6IifLGo/kUzzZ8Pfh3HG
b8hTNfduCt2ui4Fhk0eVhd1OBO1xWpOa/0Z5kDYSqWMDQ2BT/2rgWN/GKh5VkdN7
430NKTdhnrYveDLiAHKeD7FcivXx09nC9pyHCxk/39bryAIHoo/rOAnXKORXu0em
M6IuJgUSrsurrxeW3x7lofSbCyR4R5l5iUucIRxs/uaTiN6D1GThKdZAIi2thzlW
hfX045bOJvXUdBhN/svpowDIHCgl+WRRjbYIvvt6TkPnn5p/m9FsS/61oQcBo0XH
txMwIlxdQOaB4pBPYmq2RViCyJM=
-----END CERTIFICATE-----
Generated at Sat Jun 21 00:31:16 2025 by rpki-client