Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json)
Hash identifier: bGxn4/XMcKS7kfCQJLBTcPOcEk/x7iksm8xmFJy6hG0=
Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7
Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
Certificate serial: 088D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
Manifest number: 088D
Signing time: Sat 21 Jun 2025 07:41:10 +0000
Manifest this update: Sat 21 Jun 2025 07:41:10 +0000
Manifest next update: Sat 21 Jun 2025 13:41:10 +0000
Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: i8p4HGoASN7B49itBziklkusJE5aknqd+7P+Pjd1LQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
Validity
Not Before: Jun 21 07:41:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f:
59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50:
5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd:
ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b:
03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42:
b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51:
f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da:
92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c:
b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db:
7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7:
89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f:
ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be:
c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc:
66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54:
7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f:
e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57:
39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
X509v3 Authority Key Identifier:
keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:70:ce:78:b4:3f:8b:88:21:1b:e2:6e:59:b8:a3:5b:7e:46:
22:24:8a:91:04:c9:e0:96:00:e6:6e:a6:4f:ba:72:4e:db:c1:
70:cf:04:5f:61:97:5a:47:9b:21:f3:2f:d6:36:42:61:02:2d:
05:8f:60:fc:cb:68:c9:6d:42:0a:62:51:78:89:59:e7:05:06:
bf:3d:6c:75:71:73:7f:91:e0:29:5a:fe:69:07:0a:8e:59:5f:
a9:f9:bf:d1:b0:18:0d:0d:a1:ca:00:04:c4:e4:d8:a7:28:97:
68:9c:aa:25:fa:95:fa:3e:4c:00:e2:9d:0e:14:fd:24:59:e5:
e5:dd:9c:b5:cf:0c:18:ab:c6:82:d7:ba:e3:93:42:61:4c:c2:
c6:fc:ac:05:aa:2d:94:d7:d4:66:02:d7:64:a4:93:37:28:a5:
55:58:3b:11:1a:c3:f5:d1:4c:fc:b0:21:57:90:ac:5f:fe:7b:
52:8b:4b:25:2d:ad:9a:e2:15:10:72:69:ae:9e:89:6d:55:2c:
e0:28:af:20:18:fb:2e:37:96:ab:6b:a0:e8:4f:8f:9b:51:e1:
ce:7c:dc:30:c5:c0:05:17:09:a6:e1:60:c4:b7:39:3d:78:67:
83:aa:79:8e:9d:4a:a1:cb:65:e3:1d:00:7f:43:6f:9b:42:cd:
e1:2f:59:7f
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJD
OTQyQzc2MjExM0Q3MzkzOTlDN0YzMEJDODFGMkQ2MjZBQTFCNzAeFw0yNTA2MjEw
NzQxMTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVDRDA4ODZBNTM0RjhC
RTA2MEI4OUEyRDMyQUI1QUIxMDE2OTJCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6Wqol/yqV90JwuZIoT1lPr4XR0+wblxEqM5uZUFpI4/9BcngO
jWoNCWrn3a2LCQiVtoACihH/8dpECwNOz6nsIQwzAkWd60emQrIzM67IjRZ6HrBY
et6YUfc3AGyRcPabdw0wIOkg2pIfmDlt+I//y/vNSlURbLmS3BjhjvB2l1GtvApp
23sgnz0cS1ThqfbbD3DY94ldtxTZddESIQ0aMDssX6vpHnofuFiDdJn47J6FvsPM
Ba4CQWq+tfhCcaXf3GbIECsk/AyBNpw3ROaTVH9rWW+HElM+f7E2xxRaf+KUZtqB
3OaQqe1rk9MjVzlT2atbOZTJl6hmw74xzphRAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU7NCIalNPi+BguJotMqtasQFpK/wwHwYDVR0jBBgwFoAU4slCx2IRPXOTmcfz
C8gfLWJqobcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
My80c2xDeDJJUlBYT1RtY2Z6QzhnZkxXSnFvYmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzRzbEN4MklSUFhPVG1jZnpDOGdmTFdKcW9iYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvNHNsQ3gySVJQWE9U
bWNmekM4Z2ZMV0pxb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAL1wzni0P4uIIRviblm4o1t+RiIkipEEyeCWAOZupk+6ck7bwXDPBF9hl1pH
myHzL9Y2QmECLQWPYPzLaMltQgpiUXiJWecFBr89bHVxc3+R4Cla/mkHCo5ZX6n5
v9GwGA0NocoABMTk2Kcol2icqiX6lfo+TADinQ4U/SRZ5eXdnLXPDBirxoLXuuOT
QmFMwsb8rAWqLZTX1GYC12SkkzcopVVYOxEaw/XRTPywIVeQrF/+e1KLSyUtrZri
FRByaa6eiW1VLOAoryAY+y43lqtroOhPj5tR4c583DDFwAUXCabhYMS3OT14Z4Oq
eY6dSqHLZeMdAH9Db5tCzeEvWX8=
-----END CERTIFICATE-----
Generated at Sat Jun 21 09:53:16 2025 by rpki-client