Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: L1OjUvX1BJAQVXPfjEXZyCzjRCNRdKIEdUkhYO2jD/0=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 46F6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 2A2C
Signing time: Mon 11 Aug 2025 08:31:15 +0000
Manifest this update: Mon 11 Aug 2025 08:31:15 +0000
Manifest next update: Mon 11 Aug 2025 14:31:15 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: l3LW15wAMw/zu36TXVR95/Mers+oyn1pObYf9LDVNko=)
2: 2HOU41wf-RNx3ns6fUrUfDuRc6U.roa (hash: b3lr36MN4jCPuHOJb0pCCMEylOVXJG558DXiQogiClM=)
3: 7RA1MPTfKy0Y3M6wyOZczACLLak.roa (hash: aq5frvjNHnryPHwDJ8UeQhHCx2EdNK22LpuC4tAKoCs=)
4: ZJzeHIRmeeOzlYL2B805nN2sn48.roa (hash: QYBJzNjVtPZHj5GcSSCKs41Nr383kxN+Jk9fTYilHQo=)
5: hClPUnKZuAxsWwfQLw22FkUyHeM.roa (hash: 3jlVgVH+FCbudtpl6tLV+UmB6U3EaSEXQMSz/+0UPtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18166 (0x46f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Aug 11 08:31:15 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:cf:0d:85:8f:d6:fe:c7:51:ef:18:15:86:cf:ed:48:cc:c7:
6b:9d:9b:ee:e8:6b:eb:da:a8:b8:c1:c4:74:c1:91:de:a6:04:
bc:4c:fe:aa:ce:4c:ee:1e:8a:6f:91:29:27:38:0d:98:ee:47:
43:3b:c4:b3:65:d7:67:c4:23:83:77:32:e9:03:77:0a:7b:4a:
f6:7f:c3:58:91:df:88:2e:4c:c2:9d:c5:84:25:97:2c:00:71:
93:93:21:39:e1:8c:f7:06:7b:0f:9e:13:04:13:94:ce:dd:5a:
f6:3e:17:09:32:66:42:89:e4:74:1e:c5:4c:2e:ef:73:1d:5d:
b3:ce:e1:0c:cb:2a:fc:37:85:85:30:19:90:b5:95:b6:7f:fb:
81:4d:d5:54:3f:58:16:0a:6f:5d:13:7f:7b:4c:a7:35:bd:98:
25:bc:63:64:96:2e:43:08:d4:f6:5c:db:f0:40:39:7b:25:7e:
2e:86:03:fa:91:19:05:85:fc:fe:2e:38:9f:fa:a5:b2:b7:9b:
bd:d4:30:78:b6:03:7c:ed:10:4f:4e:6d:62:51:1d:e8:d8:8b:
80:7d:9e:d3:25:25:2c:47:9d:92:67:b7:c4:bd:09:ca:d5:5c:
5c:9b:e2:dc:91:4d:9d:5c:7c:4a:e6:8b:51:aa:fc:14:76:e2:
80:18:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:36:29 2025 by rpki-client