Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
File: SjSV_QtTU5dWd0kGZfAxxGksrbo.mft (raw, json)
Hash identifier: SAZSgH7jsR4c2JjCaJAt+yxuEqa8ZTX3W7af5u1Lflw=
Subject key identifier: 9F:C2:54:20:A8:9C:59:81:9A:D4:75:01:D7:7C:01:C1:2C:D0:40:F4
Authority key identifier: 4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA
Certificate issuer: /CN=4A3495FD0B5353975677490665F031C4692CADBA
Certificate serial: 0F38
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
Manifest number: 0F36
Signing time: Fri 20 Jun 2025 23:12:16 +0000
Manifest this update: Fri 20 Jun 2025 23:12:16 +0000
Manifest next update: Sat 21 Jun 2025 05:12:16 +0000
Files and hashes: 1: HZbV5_idzW8zluywrYrShHPXxVA.roa (hash: XBZyRHAGnQ5oHbIqpKoDY4o0I/2IuuNdAcinHawxczU=)
2: MoP4veIQty3_inOzFxCFTk7JLeE.roa (hash: M+GdKVy49/tnFnNNA0712vGEzZpVPyOBAdGyfVeaaP0=)
3: SjSV_QtTU5dWd0kGZfAxxGksrbo.crl (hash: LyisBgzpoxXk1KguTuTkFznqXjHkzwn3DmRelVOI3OM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3896 (0xf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A3495FD0B5353975677490665F031C4692CADBA
Validity
Not Before: Jun 20 23:12:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9FC25420A89C59819AD47501D77C01C12CD040F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:6c:52:d3:24:cb:9f:a2:c2:0c:18:35:7b:
51:03:96:e8:c2:87:0e:e0:a2:46:b1:77:cf:da:5f:
51:f6:3a:29:28:b9:ca:5e:98:c2:e1:6c:24:f2:98:
a8:3b:fd:af:77:f1:70:eb:e2:78:db:7c:86:9e:b2:
37:ba:d5:13:e9:8e:1c:d3:dc:fc:28:e8:9a:79:56:
64:f0:7b:01:e2:32:9d:77:f7:3e:00:be:f0:29:93:
d0:a0:f0:8d:1c:16:58:3b:9e:62:9e:33:67:d6:a2:
83:71:60:5d:69:56:70:a4:be:19:e9:23:bb:f1:88:
50:53:70:06:69:9a:24:e2:0f:95:46:1d:fc:f4:98:
3e:e4:77:22:50:25:65:25:f4:32:3e:d6:45:0d:d7:
53:42:df:75:90:de:c2:33:7a:f3:b7:ef:c1:5b:eb:
80:00:a4:66:b0:f9:07:8d:06:d9:d2:07:d9:43:05:
cd:70:ab:1d:4d:4a:6d:f1:8f:cf:b5:2a:a3:1c:cc:
a7:4d:de:bb:91:b9:94:5d:54:0a:50:2f:17:ff:ab:
61:e2:b9:d0:be:ec:8b:d9:5f:51:a4:ad:d5:f6:08:
81:03:89:b1:05:03:11:d6:ed:31:54:ff:36:cf:93:
06:d1:16:5f:1a:9f:44:d8:db:ac:0a:62:ea:80:a1:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:54:20:A8:9C:59:81:9A:D4:75:01:D7:7C:01:C1:2C:D0:40:F4
X509v3 Authority Key Identifier:
keyid:4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:4a:31:d0:8d:68:2d:1d:e1:d2:e8:2d:23:3f:32:41:d8:21:
d2:e0:aa:38:36:49:ef:24:31:0e:22:b5:cd:4c:32:5c:bc:1b:
33:18:c3:ff:f0:2f:e8:f8:6a:85:99:5b:75:7f:4e:24:e3:e9:
76:a6:c3:30:f9:88:3e:c8:d4:e5:89:26:0a:bd:1c:65:89:0b:
e7:5d:72:0a:30:95:6d:2c:92:2f:db:1f:a0:cd:87:06:ec:37:
25:55:5e:c0:de:2f:9e:0f:00:f8:e8:39:e1:03:58:24:b8:b1:
1c:91:b5:de:b9:fc:22:60:b1:86:68:5c:94:2f:d7:a3:e8:c3:
71:b2:8d:65:19:75:80:b0:c6:47:77:e0:47:d2:57:0e:d5:33:
69:f3:6a:a0:3d:b6:c0:16:a3:f3:ce:04:e6:4d:88:b7:04:50:
9a:60:7f:e1:d0:5b:35:0c:12:a4:b7:c7:87:f2:ab:f5:8e:fe:
6e:64:de:37:4a:c7:41:fb:1b:45:a8:70:c0:e2:96:b9:05:f7:
65:fd:a0:58:13:95:4e:1a:60:0c:6c:05:72:09:ee:80:ed:38:
a8:75:4f:41:1c:46:9b:ad:0a:8b:0f:28:94:93:0b:d7:ca:ee:
bf:8a:de:cd:f3:13:d1:5e:63:8d:ec:08:44:6e:bc:98:d5:8e:
d1:49:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:18 2025 by rpki-client