Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft
File: jADfzi10-W1xE_7xW2z4zSGqJm4.mft (raw, json)
Hash identifier: iAdLED3feTFGQ96YpuT95B8ovNmUAbe3+xgtwiCCUDE=
Subject key identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D
Authority key identifier: 8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E
Certificate issuer: /CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E
Certificate serial: 20A5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft
Manifest number: 20A5
Signing time: Wed 05 Nov 2025 14:41:30 +0000
Manifest this update: Wed 05 Nov 2025 14:41:30 +0000
Manifest next update: Wed 05 Nov 2025 20:41:30 +0000
Files and hashes: 1: jADfzi10-W1xE_7xW2z4zSGqJm4.crl (hash: a8JGvek4bTfD0zhNsSTqVIgwpc83jD7vEHM9cj9C60U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8357 (0x20a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E
Validity
Not Before: Nov 5 14:41:30 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=2DBDCE5D957056DAF5725D4EF0B8D9FD9FA84F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:78:49:97:ff:78:07:ae:27:3d:db:c3:d3:
5f:d9:dc:5f:b7:bd:f8:d4:f2:0e:89:b1:8e:be:53:
c2:b0:5a:a3:5d:61:4e:b4:01:1b:2f:7d:5e:6e:7f:
b7:31:62:eb:a4:c6:5e:4d:47:60:9d:80:d4:e9:36:
24:32:5e:3d:4d:23:94:c2:c6:a0:47:9d:f5:5d:d9:
13:c0:e2:81:5b:56:1a:ff:92:4e:ec:fc:b8:4f:4e:
a7:52:de:f8:79:47:1c:29:c1:77:1b:0b:93:71:65:
41:7f:38:0e:af:e3:96:67:a4:cd:50:db:e5:5e:97:
90:22:5d:6a:23:69:8e:72:35:27:ff:8b:ed:ea:33:
71:cc:aa:96:e7:cc:18:43:05:8b:4c:ac:15:47:99:
ef:c2:46:61:88:a2:58:33:38:40:de:59:05:f8:f0:
fd:99:dd:08:a6:2c:ce:23:b5:f3:a3:45:f5:3c:60:
53:29:71:e5:5b:26:30:50:51:25:e2:5f:10:db:0a:
ca:cb:26:9a:59:26:c7:c3:c6:48:3b:1f:1f:cd:48:
6b:0e:c2:1b:6e:48:71:ba:3c:7e:c3:c3:bc:42:38:
cb:d3:2b:86:2d:75:7e:0f:5f:74:bf:5d:d6:00:61:
fb:3e:30:05:7d:86:71:a0:b4:ec:f4:de:60:da:d1:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D
X509v3 Authority Key Identifier:
keyid:8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:30:bd:65:ad:57:1f:ec:46:23:70:9a:a1:78:a2:8e:16:
97:6b:37:0b:a4:9d:a7:9b:6f:21:54:dc:cf:c4:db:7b:69:ce:
77:5c:4a:43:d3:be:1f:51:6f:5f:b7:24:99:95:c5:82:ae:e7:
b7:59:d7:50:ca:19:0a:c6:8b:3c:f1:08:63:c4:a8:a5:19:8e:
1c:d8:fb:41:e5:a0:93:54:1f:1a:57:67:69:da:42:d2:74:71:
88:1e:30:e5:85:1f:89:e7:8b:ac:0f:21:71:eb:60:6b:76:af:
8c:0f:f2:e7:1e:40:a6:83:09:56:eb:19:aa:37:e0:f2:86:a9:
ad:28:07:bd:2d:11:b3:cb:06:2e:41:f7:91:e5:b5:0b:7d:ca:
32:68:2f:c4:e0:e7:db:ae:c1:6f:1c:72:b8:ca:04:e3:34:0a:
fc:0c:2b:3f:32:be:49:63:c9:b4:46:bd:82:44:1c:ab:76:98:
cd:77:14:e4:55:ba:70:bd:b3:5c:f5:ad:00:2d:7c:83:b0:81:
8e:d3:71:fa:df:3b:5a:36:27:b9:f0:da:45:a7:30:6a:2d:de:
e1:71:0b:c5:77:3b:cd:8a:14:07:60:34:03:df:f0:5c:cf:42:
02:04:d4:1f:c0:b1:cc:81:56:fd:75:4c:5d:37:85:63:a8:cc:
cf:dc:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:52 2025 by rpki-client