Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
File: -apYG28sznwRZ_8uDAIJY5n_aHQ.mft (raw, json)
Hash identifier: TBwgS523dlIu8/B531q/IRWnAKsKGJjdTF7bRiPzaVY=
Subject key identifier: F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
Authority key identifier: F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
Certificate issuer: /CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Certificate serial: 073B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
Manifest number: 073B
Signing time: Sun 15 Jun 2025 07:19:33 +0000
Manifest this update: Sun 15 Jun 2025 07:19:33 +0000
Manifest next update: Sun 15 Jun 2025 13:19:33 +0000
Files and hashes: 1: -apYG28sznwRZ_8uDAIJY5n_aHQ.crl (hash: 00f4Rwk0Ops4njY6tj43GcpLlJwyB/Ke2GFAgtzv7Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Validity
Not Before: Jun 15 07:19:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F6BE244A9EA105ACF95769A4EE1FE02A7635E532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ac:c3:8a:ec:46:74:e6:0f:fd:0b:2c:51:
0e:25:65:06:03:2f:b6:88:d0:2d:b7:b4:5c:11:2a:
c1:9c:81:61:5f:b8:c5:76:cf:d0:66:9d:49:1b:75:
39:e5:76:e3:07:4c:bb:98:71:9b:c1:b1:19:7d:b2:
47:f7:aa:25:c9:95:fc:15:8c:75:f3:d9:7f:02:26:
54:04:8b:25:4c:01:0d:9c:cf:34:6e:c8:9a:a5:3f:
a7:b9:27:63:76:cd:0c:f7:2d:e0:4d:43:fa:30:55:
c3:ca:59:eb:d9:1d:be:74:84:b4:c9:c5:55:62:40:
c4:ef:aa:3b:3a:c2:42:a2:59:e8:81:e8:ed:df:87:
4c:ae:a7:a9:23:d6:4d:8b:7a:e8:ff:91:15:c4:73:
84:02:79:2d:28:57:ec:8a:9e:ee:52:08:23:0b:9f:
26:2c:73:44:db:61:e4:db:5a:5d:80:b9:53:ca:c4:
29:a5:cf:c1:3a:73:c1:89:ea:49:38:d2:3f:f8:3f:
1e:99:df:a4:09:fd:5c:e4:0c:83:e9:48:2d:c4:72:
1d:65:92:82:40:12:e9:4e:d8:f0:db:85:a5:85:0e:
e6:7c:cb:26:76:69:44:4f:16:44:5e:8e:49:3e:7e:
74:eb:16:87:d6:8b:b9:d7:2b:6f:51:85:0b:66:d3:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
X509v3 Authority Key Identifier:
keyid:F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:a4:fa:e2:2e:a5:8f:3d:45:ca:6e:04:7c:eb:ff:ea:97:e2:
fd:d9:a3:7b:07:89:d4:5f:69:25:c7:68:31:df:a6:58:af:90:
97:70:2d:81:2c:a1:51:db:f5:2a:59:d7:1a:ff:cf:df:c8:46:
c5:39:ef:ff:55:50:b2:69:02:47:6f:d8:de:cc:59:33:4a:d3:
d3:26:8d:d1:b0:c1:a9:45:ae:a1:b0:10:47:5f:ec:09:25:18:
0f:5d:1c:ea:55:44:f3:a2:b9:5c:5d:3c:62:93:fd:39:c4:2d:
39:21:b4:78:30:9e:88:68:ce:a2:97:9e:77:8b:0d:d7:28:aa:
da:b2:c0:40:e9:8e:01:a6:40:1f:6a:7f:49:63:f3:de:cb:76:
a3:ff:58:22:a4:d7:4f:e7:47:a7:2c:35:3e:f2:6c:28:f9:cf:
d2:8e:09:30:5b:15:5a:bf:79:21:44:b1:dc:84:c0:26:7b:9a:
8e:70:2b:9c:9e:80:32:92:39:be:5b:f8:e4:33:40:2f:33:aa:
cc:77:d8:cd:b0:14:67:aa:19:b0:bc:d4:6e:9f:82:de:07:e1:
62:2a:1e:fc:75:8d:e2:0f:f3:dd:0e:ae:ec:c4:1d:b2:34:4d:
3a:23:3e:27:8c:76:5f:d8:ee:63:f9:ee:5d:fd:fa:ca:34:72:
e5:74:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:48 2025 by rpki-client