Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.mft
File: DemIf5Do0YZKVgk_qrfOoVJUYDk.mft (raw, json)
Hash identifier: m3lYeVbaCDbp7Z2v1ThBGDdSVC1vZ1545p7AHt2Nd0k=
Subject key identifier: E7:C9:04:2B:93:1F:0B:C5:7C:9D:B3:C7:80:82:DD:8B:C6:5E:92:04
Authority key identifier: 0D:E9:88:7F:90:E8:D1:86:4A:56:09:3F:AA:B7:CE:A1:52:54:60:39
Certificate issuer: /CN=0DE9887F90E8D1864A56093FAAB7CEA152546039
Certificate serial: 03C7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DemIf5Do0YZKVgk_qrfOoVJUYDk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.mft
Manifest number: 03C7
Signing time: Wed 05 Nov 2025 12:41:11 +0000
Manifest this update: Wed 05 Nov 2025 12:41:11 +0000
Manifest next update: Wed 05 Nov 2025 18:41:11 +0000
Files and hashes: 1: DemIf5Do0YZKVgk_qrfOoVJUYDk.crl (hash: 3C922XpyMIeHNFSyv4n9vGpjKCPRXnWeLQVKCwI/kKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DE9887F90E8D1864A56093FAAB7CEA152546039
Validity
Not Before: Nov 5 12:41:11 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=E7C9042B931F0BC57C9DB3C78082DD8BC65E9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:e0:ee:53:1c:45:d4:6e:d1:d7:e3:9c:8e:
f6:94:6d:e8:a8:25:0d:1c:a1:72:da:ae:19:18:82:
6b:d9:c8:b1:cb:48:94:e2:61:9c:c0:97:f1:78:a7:
b1:9e:bc:94:5f:ad:62:85:44:d1:dc:22:b0:b3:d4:
a6:fd:f0:5a:17:2c:16:00:5f:ec:83:c1:8b:5a:1b:
9f:e3:97:ef:02:ec:15:a7:c2:91:9d:ac:14:c9:25:
08:f2:ae:8e:b8:8f:e0:d8:e2:f0:af:a8:f9:bf:4c:
02:cf:dc:65:4a:f3:55:92:5a:81:f7:2b:14:3c:56:
84:b2:ee:8d:66:4c:46:f9:26:ab:e1:a6:c9:3c:b7:
b9:81:5b:04:34:98:32:77:b1:44:8f:1e:fb:eb:a5:
d7:aa:67:b5:cc:a6:d0:bd:42:1b:99:40:78:ca:a8:
ea:7f:36:93:30:b6:39:6a:7a:8d:86:a3:e3:37:0e:
bb:f3:d4:52:51:b8:83:fb:f0:10:df:67:31:1d:a2:
60:45:68:5c:d9:f3:ca:c5:a3:91:4d:bb:83:70:b1:
9e:aa:a7:0e:62:8f:d3:a6:9e:44:bc:4a:0c:77:eb:
73:1c:eb:8a:12:65:12:8d:30:ec:a5:6f:95:99:54:
be:15:90:7a:4b:27:b8:98:c5:e7:d6:13:23:42:6b:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:04:2B:93:1F:0B:C5:7C:9D:B3:C7:80:82:DD:8B:C6:5E:92:04
X509v3 Authority Key Identifier:
keyid:0D:E9:88:7F:90:E8:D1:86:4A:56:09:3F:AA:B7:CE:A1:52:54:60:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DemIf5Do0YZKVgk_qrfOoVJUYDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3367/DemIf5Do0YZKVgk_qrfOoVJUYDk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:9e:b5:f0:6e:9f:57:1e:34:28:13:de:67:12:f4:ae:c4:41:
63:5a:e5:68:b1:4a:0e:a8:be:11:97:30:bf:be:3e:a4:f5:79:
6c:d4:f9:7f:40:ee:88:3c:6f:f5:04:2b:93:4b:ee:97:40:15:
af:0b:da:d1:27:e8:9b:9a:62:69:8a:2b:6f:48:ba:60:87:dc:
cf:34:13:d8:32:7c:30:b7:6d:70:59:6a:1e:b1:59:86:f3:f6:
e3:75:ae:ce:48:a7:d9:9a:2b:23:39:77:d5:2e:f8:d2:17:fe:
b7:57:a1:21:2a:fd:4f:39:05:2f:c8:80:50:39:64:01:00:18:
16:f0:b4:c1:21:4c:0f:e5:22:c7:7c:ee:1b:23:d7:5e:fc:e9:
4f:5e:b2:47:12:73:3e:9b:ff:1e:4b:07:a6:c7:d8:a3:03:61:
52:cc:50:72:b8:f8:ac:3c:4b:96:62:b4:31:47:5f:14:b6:b7:
ac:14:f1:44:7f:ec:e2:3b:84:be:62:75:e9:d7:30:95:a4:4a:
7a:83:93:76:f4:e5:33:74:86:7d:aa:fe:8e:b1:16:0d:75:1f:
33:3c:a1:79:aa:38:55:88:73:ba:6b:a7:2c:8e:72:1c:71:c4:
f0:6a:79:13:c1:b0:e7:7a:41:ce:d7:b7:18:01:9f:e8:4a:b4:
b9:93:36:91
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERF
OTg4N0Y5MEU4RDE4NjRBNTYwOTNGQUFCN0NFQTE1MjU0NjAzOTAeFw0yNTExMDUx
MjQxMTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU3QzkwNDJCOTMxRjBC
QzU3QzlEQjNDNzgwODJERDhCQzY1RTkyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgQuDuUxxF1G7R1+OcjvaUbeioJQ0coXLarhkYgmvZyLHLSJTi
YZzAl/F4p7GevJRfrWKFRNHcIrCz1Kb98FoXLBYAX+yDwYtaG5/jl+8C7BWnwpGd
rBTJJQjyro64j+DY4vCvqPm/TALP3GVK81WSWoH3KxQ8VoSy7o1mTEb5Jqvhpsk8
t7mBWwQ0mDJ3sUSPHvvrpdeqZ7XMptC9QhuZQHjKqOp/NpMwtjlqeo2Go+M3Drvz
1FJRuIP78BDfZzEdomBFaFzZ88rFo5FNu4NwsZ6qpw5ij9OmnkS8Sgx363Mc64oS
ZRKNMOylb5WZVL4VkHpLJ7iYxefWEyNCaz4LAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU58kEK5MfC8V8nbPHgILdi8ZekgQwHwYDVR0jBBgwFoAUDemIf5Do0YZKVgk/
qrfOoVJUYDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2
Ny9EZW1JZjVEbzBZWktWZ2tfcXJmT29WSlVZRGsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RlbUlmNURvMFlaS1Zna19xcmZPb1ZKVVlEay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjcvRGVtSWY1RG8wWVpL
VmdrX3FyZk9vVkpVWURrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGietfBun1ceNCgT3mcS9K7EQWNa5WixSg6ovhGXML++PqT1eWzU+X9A7og8
b/UEK5NL7pdAFa8L2tEn6JuaYmmKK29IumCH3M80E9gyfDC3bXBZah6xWYbz9uN1
rs5Ip9maKyM5d9Uu+NIX/rdXoSEq/U85BS/IgFA5ZAEAGBbwtMEhTA/lIsd87hsj
11786U9eskcScz6b/x5LB6bH2KMDYVLMUHK4+Kw8S5ZitDFHXxS2t6wU8UR/7OI7
hL5idenXMJWkSnqDk3b05TN0hn2q/o6xFg11HzM8oXmqOFWIc7prpyyOchxxxPBq
eRPBsOd6Qc7XtxgBn+hKtLmTNpE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:52 2025 by rpki-client