Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
File: JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json)
Hash identifier: jubvmKSaHoBQu1Kx8f0jZiyOaTIapXH46wfuNyLpqfw=
Subject key identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1380
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
Manifest number: 134E
Signing time: Sat 26 Apr 2025 13:07:59 +0000
Manifest this update: Sat 26 Apr 2025 13:07:59 +0000
Manifest next update: Sat 26 Apr 2025 19:07:59 +0000
Files and hashes: 1: -NG0bLl1h40-PhgKVbR2N40_j5E.roa (hash: K32pl5J9WfPVVhdRC9NRZ1eJVVKzrY07QQL9YorGUPQ=)
2: 61sanvoSxDfAlBmaVfsP0F8Z0vs.roa (hash: a5hLR+ChBTsRX6HByDbNL9QyWVXZIek1MWm8L9eOcGQ=)
3: DBPlOf1turXB5ZRvWgRN1Sx0c88.roa (hash: 6IAmN/YbGVf7nR03oKPiX2f/sdAiJqR9OQYDYPVLij8=)
4: DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa (hash: jrKcbvvKtIHdsQ4RvaaTHYkPK4YTDnCkQq8CfnmnpEA=)
5: DfmvJHHqo2_36cNk-0I4X70DpOQ.roa (hash: FPB9AyWhDC+67lUPEG/Hj5EAwWrfFGzGVGAGbR0G50c=)
6: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: ruQW5ng6M5oFd+LePNMZeybc/rw5GgU2Xstn589Aen8=)
7: JVyE-PbWV85g5evZ8YyoJRwoLHE.roa (hash: NtjRhSVuhDt0HPDJMNO6NW+SPA4tThjKOBB4zdl4TMc=)
8: KH1fBgdHgQMes9MIjuirH1qec0U.roa (hash: UBlXnmdFuAyfJiihIokjYSAwJin04WrdXKEE2oteD9k=)
9: MHV-03xmBb-oEGS-czTJkM_Nsz8.roa (hash: ZWMKxOo9LR1ITCABW6PC7oNwUEnFCpU2qQJg7wqS7yY=)
10: MpEEAbjqgsDpxSU_JKGOFVxS6BE.roa (hash: PjFuotNFoqKAgH2j5liIMl7AEnz5USP5lS26VvHIprY=)
11: NoIL6StYpSIxo-AEZPif8fiXOS8.roa (hash: pggJrJCdR6zrjpYj2Fj3+DaEmWZOk5uXOFmwKqUCSjY=)
12: Pi2kstC4xjHF7ye_avw2-n0Q5ZM.roa (hash: RPH2UsGUnpgziAyxe7SpKD14JsdWDFCMpgcFAiLCJGU=)
13: SPbxRfVqJDl-tzQOS4aeBemE8vY.roa (hash: 2G7DJJIM4dg1k8H0479hK2x06IMbck5SPXGFhV21Sus=)
14: TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa (hash: TMi874/SBAig+zK+xBqHWaRYSavUYVZMUZDHF5gp/Nk=)
15: fvd69ZsPYeQZtzroqsavM-2UErE.roa (hash: qSesFb98caUbD4FGBELb4OZX9SygP4mja1bw9UcJR5w=)
16: ngCrogSoEerCy3JCDkH3qz2zjh4.roa (hash: 7gV3qPpp3e9GtLUZvSw/Up5TUwAArU2Zk1z9CC4Eo+o=)
17: oTHwFHxLw7sHeCYIOnGQz_Xujjg.roa (hash: tWfa0dWlidx5lWRqi3XK3PCx9XD6R3kUz3xJXkaqA94=)
18: oh8mEJhSGhXZJtrCu4uAaungz-M.roa (hash: 5RwJ5gm0Xz2235CXnUw/gg7WlUVMqbzDpiAKN6xIIps=)
19: opgAiE1en4VEXgjtUKsIkROLdAk.roa (hash: qtxJLz18bhqTHdp8C9PQBGM1kkbjPiKM1IN0/TVEOQw=)
20: qPn3Ah--hbIOG6dP3R-dCsfyeKE.roa (hash: GdPdzFWraV2LqcnHCTDDRINqOoj6MvDSmve9v20C1ek=)
21: tI94S2liWtgOiUzZTuhdRlTV3is.roa (hash: TeJKMyOhh/szTwGGXHEUIUrBALLZVyg5cmH6YuNr6l8=)
22: uq-MkZpoh2PJmcnyPDST0US-nnY.roa (hash: r5OgYAcvqhHk44bTaajkhUNAOC+lQ7VxL+5woOsocso=)
23: xcZ13sMBOCL9f3oVxJIqy0PBakg.roa (hash: rInPvaJnhm7w24z2yjKPV6t67OqR//YTuUZvSlHw0sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4992 (0x1380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Apr 26 13:07:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8:
55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74:
de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01:
7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd:
53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8:
72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a:
64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75:
22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f:
41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec:
ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72:
e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df:
98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7:
d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9:
2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff:
0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea:
71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56:
56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:a8:86:64:0e:aa:0d:5f:ab:f2:9d:d9:96:a9:cb:c3:4b:32:
c0:54:cc:82:20:f2:69:40:0a:20:a8:d3:69:19:c3:46:be:b6:
66:c8:6c:d4:25:c1:61:ef:a6:93:7f:f4:1e:b4:91:df:45:98:
13:9f:03:5e:5a:95:15:47:77:6c:cb:2a:12:a3:25:f5:ff:f2:
fe:0e:5c:3d:84:1e:bc:aa:ab:7f:df:aa:32:47:e6:72:c4:52:
ac:75:73:51:ac:b6:f6:4d:2b:ab:24:74:f7:7e:18:fe:3a:74:
fa:3d:60:9a:47:1e:ad:15:b7:4d:fb:be:aa:7f:6e:cf:4c:91:
13:88:e1:97:21:7d:46:60:81:e3:f7:77:69:52:f2:02:31:64:
fb:56:8b:76:ec:d0:2b:7d:57:48:43:f0:79:e9:ca:06:ae:72:
e0:0b:b9:82:e1:f9:b6:b1:8c:93:3e:ea:e5:d8:17:8b:9c:a6:
63:38:e8:86:73:a3:f3:29:95:1e:cd:6d:58:8a:9b:d9:12:ad:
41:08:60:2e:e5:3b:9e:ba:8a:45:db:65:7e:13:9d:bc:b2:5a:
fa:21:0b:f7:36:ae:07:60:3e:55:97:ab:21:0e:10:9c:07:d4:
b3:77:91:11:f9:58:2d:8a:db:7f:b0:57:48:c5:92:2d:8a:f5:
b6:cd:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:52 2025 by rpki-client