Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft
File: 3MTV8l8-ospnw9i-tmvzCTPlkWo.mft (raw, json)
Hash identifier: n6sqGeidAfxcGUWKJIJVI4o12cNI8yVITh5ahs9I1k4=
Subject key identifier: 91:A5:20:C0:CA:F5:59:4B:54:50:3E:1A:F9:B3:37:B9:2A:50:B3:E0
Authority key identifier: DC:C4:D5:F2:5F:3E:A2:CA:67:C3:D8:BE:B6:6B:F3:09:33:E5:91:6A
Certificate issuer: /CN=DCC4D5F25F3EA2CA67C3D8BEB66BF30933E5916A
Certificate serial: 09D2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft
Manifest number: 09D0
Signing time: Sat 21 Jun 2025 01:43:22 +0000
Manifest this update: Sat 21 Jun 2025 01:43:22 +0000
Manifest next update: Sat 21 Jun 2025 07:43:22 +0000
Files and hashes: 1: 3MTV8l8-ospnw9i-tmvzCTPlkWo.crl (hash: 3NGNeNJvccsfwx64gOOlEuzFtETXqQUzc1lmVLO0Ff8=)
2: EsVvAWAvX2Eo3GOkfzMxAiINA8g.roa (hash: 6AGrknvwDG7ihjPS80E0x4CYslbjUEAL2UvIQfteyUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2514 (0x9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCC4D5F25F3EA2CA67C3D8BEB66BF30933E5916A
Validity
Not Before: Jun 21 01:43:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=91A520C0CAF5594B54503E1AF9B337B92A50B3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:16:81:d4:29:dd:a6:37:0c:c1:46:98:1d:
4e:df:ca:de:f1:b0:9c:67:99:92:a6:fa:14:6f:f4:
1d:2d:ea:8a:6a:fc:33:d8:77:6d:9b:0b:fa:eb:ba:
b9:a5:22:b9:fa:4f:17:49:4a:51:84:51:51:aa:7f:
45:a1:ef:b3:e3:61:42:07:04:21:c8:a4:42:d4:7b:
6a:68:d1:2d:de:92:5d:89:8c:40:8c:71:84:6d:28:
95:74:ca:09:99:6e:61:f1:c4:3a:86:ef:04:c1:67:
3f:e2:bb:59:c0:50:16:66:6d:22:87:42:78:8d:d6:
75:6a:0e:8d:b2:c5:aa:09:57:9f:58:99:66:63:6a:
82:07:5c:60:2a:ff:63:53:2f:db:d3:ba:4b:8c:69:
d3:44:49:05:c1:85:ec:3e:bc:4b:9a:42:96:87:ae:
72:fd:ca:53:e3:78:bf:9e:f1:d7:ac:3a:2c:c8:17:
a0:82:70:75:7e:99:79:00:7c:73:78:70:d1:6f:11:
63:fb:0f:f7:10:75:9c:e2:a0:b1:85:a7:3f:e4:a1:
9f:e5:74:86:ab:2c:24:89:0c:29:02:9d:11:06:27:
c8:37:84:77:54:86:34:06:41:5e:a2:59:26:ce:35:
5c:68:77:2e:30:0f:95:2a:e8:79:c0:95:c5:8d:09:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:20:C0:CA:F5:59:4B:54:50:3E:1A:F9:B3:37:B9:2A:50:B3:E0
X509v3 Authority Key Identifier:
keyid:DC:C4:D5:F2:5F:3E:A2:CA:67:C3:D8:BE:B6:6B:F3:09:33:E5:91:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:7b:29:52:b0:7a:4a:08:db:ac:40:b0:4a:bf:2d:24:a8:
ac:aa:fa:f4:6c:eb:36:be:47:07:cd:2f:74:db:4e:d7:e9:20:
97:0e:68:b8:4e:02:8e:5d:45:2f:e6:dc:27:bb:54:81:26:bd:
c0:f6:a7:25:a7:92:6e:b5:03:e6:ef:2e:c5:03:3e:0b:cc:21:
e1:35:73:c9:a4:89:e1:82:4a:57:75:7c:74:9c:44:e1:f5:bb:
36:46:f0:51:b7:47:9d:d3:7d:0c:2b:85:6f:27:20:ba:8b:5b:
57:a2:29:82:d7:22:2d:35:c2:9d:95:d0:de:32:e3:41:0e:dc:
46:32:4c:45:a6:8a:5d:30:aa:b3:60:db:bd:ca:a7:fc:2a:66:
25:00:6a:a7:cd:ee:d5:19:a0:94:78:d4:1f:9d:2d:55:56:d3:
11:dd:dd:cb:e8:ea:72:4f:82:97:61:d7:cb:a6:63:bd:ed:6e:
83:af:a4:b7:51:e9:0b:fc:5c:7b:e0:2e:2e:f0:1f:0b:50:b1:
bf:d1:ad:90:87:3d:d2:60:95:30:e9:d9:a8:cf:e4:25:b9:b7:
21:3b:88:ec:9b:b7:81:4a:32:16:16:94:f6:8e:73:aa:d0:1e:
da:c1:1a:3c:61:96:63:cf:44:26:80:a3:fc:d5:e1:5b:80:06:
2e:d6:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:39 2025 by rpki-client