Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft
File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json)
Hash identifier: jUpiOFSFABm1vR1DwRHZ+bKaTLneZtwP8APpYQNtxvg=
Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 05FD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft
Manifest number: 05F4
Signing time: Sat 26 Apr 2025 13:07:52 +0000
Manifest this update: Sat 26 Apr 2025 13:07:52 +0000
Manifest next update: Sat 26 Apr 2025 19:07:52 +0000
Files and hashes: 1: 5OEuFKPxJaq1YidFs9FhBAB9P64.roa (hash: ai6iEpYFHCC4+YcYY1ILAHS+XendDmfNBlH2O+XrO30=)
2: 5iA-h01FgjAaC-DPAOpdAAX_FUQ.roa (hash: 6Xo71nk33XT6X/k3IVsNNARD6WK9MRPdCpAx2+YpPBY=)
3: 7GZTK5QwS8vnTmYs4X-8-_ZS4PM.roa (hash: Fypc5S3wysoSbXk7yh6NHgb67GpfLGm2tLs4epy1xF8=)
4: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: WDwfEjjNH2imsN/6QD1k47HrJcUZeAv4/OhsS4cyPcw=)
5: LH2PyxaebTwUWCqIBs1Kq9jLOjU.roa (hash: L04+TBCa3SIZMlFAdOVBBd3Gf27YDwcU8ancEUoAIfY=)
6: Y2ZKD-A30k3bDBgJvwCgTOSEfgE.roa (hash: 9hA3D9MXarvGgUQCQ8E1yH6YN9fGRixIrfBTcD/M2r0=)
7: dTMFnNYS9LqVMpJIioge2ooc5gE.roa (hash: pCXNC0r3wfXitDNymXsPE77AREO+Pz310OZK4OIzz2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Apr 26 13:07:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f:
d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16:
3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d:
a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46:
b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1:
3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee:
07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4:
b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c:
a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c:
0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14:
c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66:
25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9:
3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e:
2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0:
ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67:
d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2:
1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e3:e3:af:c6:0c:34:2b:5f:f1:5e:0e:cb:27:8e:74:c3:b4:
50:79:72:ab:c7:03:f5:e5:7b:f0:c8:3d:68:70:b4:9d:44:af:
2b:bc:15:2c:72:4a:a5:11:7b:10:07:53:bb:fc:45:00:a9:e7:
6a:34:50:c3:77:13:b3:d9:89:09:04:d9:12:2c:2c:a5:fe:e0:
e1:45:d9:80:dc:a2:a1:1b:0d:a1:53:65:de:1a:ba:ba:77:8f:
25:2d:ba:16:bd:a2:e6:40:b6:72:b7:2c:49:f7:39:16:71:4d:
23:0c:03:ac:6b:3e:c9:9f:ff:f2:b9:15:32:ec:a4:3b:40:92:
76:aa:48:f7:ec:bc:dd:73:38:57:68:7c:cd:c8:29:aa:89:0d:
29:ed:f4:91:bb:7a:5a:28:4e:61:1d:42:ac:8d:9f:c5:f8:da:
90:df:f0:4f:54:56:17:df:ec:32:25:ae:87:32:f4:a2:b9:5c:
6e:0f:0d:cb:9a:48:79:cc:65:3e:54:ad:7a:b3:fe:5b:11:b0:
6f:5c:fd:c4:cc:4f:57:b9:1b:36:2e:0e:e3:8e:2c:9a:7b:7c:
ab:0f:d9:e9:c1:a7:79:d8:f2:6b:7f:49:04:cb:ad:37:2d:cf:
7b:35:9a:c2:8b:71:75:f3:4d:12:13:c3:7a:c9:80:81:02:d2:
08:19:e6:46
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD
NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA0MjYx
MzA3NTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF
MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM
CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un
I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2
nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X
Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX
m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp
FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm
WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAErj46/GDDQrX/FeDssnjnTDtFB5cqvHA/Xle/DIPWhwtJ1Eryu8FSxySqUR
exAHU7v8RQCp52o0UMN3E7PZiQkE2RIsLKX+4OFF2YDcoqEbDaFTZd4aurp3jyUt
uha9ouZAtnK3LEn3ORZxTSMMA6xrPsmf//K5FTLspDtAknaqSPfsvN1zOFdofM3I
KaqJDSnt9JG7elooTmEdQqyNn8X42pDf8E9UVhff7DIlrocy9KK5XG4PDcuaSHnM
ZT5UrXqz/lsRsG9c/cTMT1e5GzYuDuOOLJp7fKsP2enBp3nY8mt/SQTLrTctz3s1
msKLcXXzTRITw3rJgIEC0ggZ5kY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:14 2025 by rpki-client