Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft
File: Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft (raw, json)
Hash identifier: pF0YvuQaOZoDxit6YIXR8rRhchugbcm405WJLLkdCEQ=
Subject key identifier: FE:35:9E:A0:1E:07:AC:81:A1:FE:55:71:69:D6:C7:CC:95:DB:89:DA
Authority key identifier: 4A:BD:40:77:86:47:33:21:29:CF:2A:1E:FD:FF:2B:1F:A9:5F:56:96
Certificate issuer: /CN=4ABD40778647332129CF2A1EFDFF2B1FA95F5696
Certificate serial: 0A8B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft
Manifest number: 0A8B
Signing time: Wed 05 Nov 2025 15:11:54 +0000
Manifest this update: Wed 05 Nov 2025 15:11:54 +0000
Manifest next update: Wed 05 Nov 2025 21:11:54 +0000
Files and hashes: 1: Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.crl (hash: L4R9yX37qAcsRFl7HWDj2OZ5lVG+OiOmQa179paltDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2699 (0xa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ABD40778647332129CF2A1EFDFF2B1FA95F5696
Validity
Not Before: Nov 5 15:11:54 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=FE359EA01E07AC81A1FE557169D6C7CC95DB89DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:46:62:3f:88:41:64:4f:85:de:02:fd:32:77:
af:a1:c7:3b:36:f8:8f:75:80:d3:5d:cd:cd:05:81:
c3:86:f4:2b:43:0d:82:c3:ed:ae:9e:86:92:85:be:
3b:13:d7:12:5f:45:0c:9f:39:c1:29:c9:2a:78:0c:
0e:a5:be:0f:d8:19:ba:7c:8a:6b:ca:50:f8:8d:25:
37:d6:02:e2:7a:c8:94:23:e4:43:7b:ae:13:04:2e:
83:4d:07:67:fe:ae:e1:f3:87:91:a4:54:61:89:e4:
f3:bc:bb:2b:fd:95:48:3c:0d:9d:4b:60:2d:c4:b8:
f4:71:74:f2:ea:4b:ff:0d:24:dd:4b:d5:47:bf:ef:
38:80:36:57:cd:80:ff:46:97:a3:1a:e9:c4:d6:aa:
cc:d9:ab:c1:6e:0e:bc:32:30:9b:4f:74:7b:5c:39:
03:a1:01:fd:b1:c5:5d:41:5e:dc:af:77:5f:a6:4f:
77:b1:3e:ee:a7:6b:2f:01:40:eb:f8:f5:93:bd:3c:
f0:3b:85:cb:78:09:56:74:41:4f:cd:be:da:6a:e0:
9a:27:af:20:6a:2d:d1:91:8f:50:ef:e9:a2:a2:dd:
92:52:06:a3:2d:1c:29:f4:58:33:8f:19:e8:20:d2:
8d:85:fa:83:d9:ad:16:2c:c2:58:95:72:c0:ef:53:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:9E:A0:1E:07:AC:81:A1:FE:55:71:69:D6:C7:CC:95:DB:89:DA
X509v3 Authority Key Identifier:
keyid:4A:BD:40:77:86:47:33:21:29:CF:2A:1E:FD:FF:2B:1F:A9:5F:56:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4c:81:00:ad:2c:d6:19:e0:98:70:91:9a:75:7b:3f:55:fb:
0c:95:3b:9a:80:66:b8:b3:1d:37:e0:b8:2c:1c:e5:a5:e1:5b:
29:50:0b:7f:76:95:7c:09:cc:4c:03:57:28:27:c6:ba:81:cc:
81:60:73:0b:eb:9b:ed:06:f2:7f:c5:af:ef:db:fc:33:25:4d:
1c:49:4d:e5:65:d6:f8:49:fa:f6:7e:22:61:98:2a:2b:15:67:
25:d9:02:0c:5e:93:2c:e9:83:b4:44:76:6c:69:1f:e5:e9:93:
ae:e0:df:af:66:c6:6d:74:bf:57:be:2a:b8:8b:04:8c:ee:a9:
7a:0e:aa:df:06:b9:05:02:06:ff:97:90:b9:9b:de:99:f2:c5:
34:c0:b8:c2:c2:bf:36:77:d5:14:39:1b:17:6b:56:46:c1:25:
63:fb:85:49:1d:d5:a4:8d:b3:88:de:61:34:4d:9d:39:88:6b:
73:cd:13:a1:19:da:00:05:ed:14:49:30:44:d8:82:24:29:2c:
1d:2a:99:19:b8:bc:28:f4:2e:53:66:54:17:92:d3:97:f8:c1:
27:57:44:c7:9d:6f:1a:41:ab:15:5c:8c:9a:aa:e8:f0:70:95:
6f:3d:89:55:9d:82:ab:56:35:81:e1:03:3a:d7:e6:80:46:5d:
40:a8:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:53:52 2025 by rpki-client