Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json)
Hash identifier: Ez9XqFe6CdK7D5b1UOfzQHpuCGO+f/T1KAUC4EJ5Lhw=
Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Certificate serial: 06D3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
Manifest number: 06D3
Signing time: Sun 15 Jun 2025 07:23:06 +0000
Manifest this update: Sun 15 Jun 2025 07:23:06 +0000
Manifest next update: Sun 15 Jun 2025 13:23:06 +0000
Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: 35bCO+UpAMV9YtFh1VNmdiNkQZw+iPr/L+q/9ZJXUgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Validity
Not Before: Jun 15 07:23:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24:
aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e:
ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae:
75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a:
08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44:
f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a:
13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1:
9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f:
3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b:
d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99:
26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28:
e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49:
5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a:
a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a:
87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28:
6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0:
d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
X509v3 Authority Key Identifier:
keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:cf:77:00:86:28:7d:13:11:41:2d:e7:eb:30:bf:0e:c6:5b:
38:a2:89:5a:81:b4:72:03:63:cb:54:60:ae:61:12:8c:b1:9b:
15:d6:8b:0d:24:5c:cc:bf:c7:22:66:5f:88:e2:aa:d9:82:64:
bb:64:dd:95:6f:8e:74:27:b2:bf:41:a2:09:04:e5:e4:0b:e4:
f0:09:2b:e9:9d:33:a3:0b:b7:ca:de:64:d6:5c:21:9c:8c:a4:
7c:0e:3e:30:ed:bd:cd:83:b9:d4:5e:22:82:05:14:7e:21:97:
6d:ec:60:88:9c:4f:2d:ef:49:67:13:13:78:ec:a8:a3:4e:72:
eb:7f:0d:c8:b8:c6:48:43:24:3f:cb:62:af:c0:aa:1a:22:fb:
7e:91:aa:5a:5a:38:42:0f:89:94:65:6e:66:77:3e:5c:97:a9:
fa:1f:cb:3f:ea:66:a5:86:e2:8c:dc:49:5e:23:9d:cf:54:34:
33:a4:77:7c:29:71:be:d8:80:6a:32:29:7c:4e:50:ad:26:c6:
be:31:a3:72:58:a1:77:c0:b2:87:20:59:67:da:f2:a6:66:c8:
a0:50:28:e9:87:d3:4b:83:d7:63:cf:0b:cb:1b:91:3a:46:6f:
12:93:df:49:07:d1:38:2f:c1:82:3e:d8:28:d1:b5:d3:64:ec:
62:5a:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:25:17 2025 by rpki-client