Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft
File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json)
Hash identifier: Cjvo8TLmPXU4dwn7t4ENLNBc8p0uwWmvtjO22W9GmOs=
Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1
Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96
Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996
Certificate serial: 107B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft
Manifest number: 107B
Signing time: Wed 05 Nov 2025 14:41:47 +0000
Manifest this update: Wed 05 Nov 2025 14:41:47 +0000
Manifest next update: Wed 05 Nov 2025 20:41:47 +0000
Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: lBUcojRq3k3zgCK3b2aSMoI5fwyceRhJWIurTytjnUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4219 (0x107b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996
Validity
Not Before: Nov 5 14:41:47 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03:
b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2:
ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a:
c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64:
f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44:
de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4:
5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3:
df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba:
db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29:
b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7:
87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e:
85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52:
b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4:
19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c:
c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc:
0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e:
6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1
X509v3 Authority Key Identifier:
keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:be:22:36:93:fe:1a:a0:57:f6:07:b3:1f:92:52:93:d7:
c4:af:52:1c:7c:1d:8e:48:7f:c1:fc:54:a6:e0:9f:f5:97:08:
0b:cb:36:d8:93:27:22:f7:3c:bb:56:6c:5f:22:97:0b:28:33:
38:c4:d0:b3:83:6a:f0:a6:7a:f8:5f:cd:92:33:65:5a:09:c3:
45:d7:d0:e7:86:94:50:54:95:b9:4d:18:c5:36:35:dc:2f:ef:
e8:b6:aa:4b:4c:2d:c9:56:3e:a2:23:2b:a0:7d:38:06:5b:7a:
5d:23:6e:b2:e4:2b:3b:82:5f:d1:47:16:43:70:94:68:c7:81:
64:0c:c7:ae:fb:e5:96:7a:f9:79:9d:f1:37:05:83:16:4a:8d:
49:54:62:9f:ba:1e:3c:dc:c4:5e:11:89:fb:72:ed:4a:87:1f:
f5:df:85:2d:2c:7c:cf:10:72:72:ee:75:75:96:84:2f:c7:d5:
1d:a4:d6:d6:d9:1c:33:0a:ae:1a:00:32:5f:72:98:4f:6e:ee:
13:6c:76:e2:fe:ec:65:13:f3:3d:4f:40:f6:48:8c:bd:0f:fb:
8c:2e:77:e5:4f:33:cd:04:74:18:71:19:f3:d5:84:ff:88:31:
cc:67:9e:5b:cb:35:45:9a:00:a1:9e:f6:89:c1:c4:fc:30:83:
d5:81:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:04:05 2025 by rpki-client