Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft
File: nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft (raw, json)
Hash identifier: rpM5qjHlKrIIMIZbWyH7cERXciqWXcQCk4nZET9RH5w=
Subject key identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16
Authority key identifier: 9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4
Certificate issuer: /CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4
Certificate serial: 9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft
Manifest number: 9A
Signing time: Fri 20 Jun 2025 10:41:00 +0000
Manifest this update: Fri 20 Jun 2025 10:41:00 +0000
Manifest next update: Fri 20 Jun 2025 16:41:00 +0000
Files and hashes: 1: nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl (hash: M8D2EynY6heu/YcWqmt/WbV7kLH25GMD8m6GQBdfZt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4
Validity
Not Before: Jun 20 10:41:00 2025 GMT
Not After : May 21 00:12:30 2026 GMT
Subject: CN=C6279EA9F47099A4B320B69DB6EBFCDCFBAEA616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:b6:23:03:35:f1:e9:a2:c2:c0:d2:60:9e:
33:93:a0:b3:93:60:ed:5a:02:d8:97:10:15:23:02:
06:bc:53:bd:f8:8d:ed:29:95:fe:4d:d7:c2:d4:58:
a0:7d:d0:ea:31:55:83:bf:8f:1b:f3:89:42:ef:db:
71:b7:5f:ac:c9:38:33:9a:4c:24:e8:9e:15:d0:32:
d9:4b:3c:c1:17:73:89:dc:0f:35:9e:b7:b9:8a:a4:
96:34:8a:08:8e:b1:27:e2:8a:c0:df:ee:ec:3b:7e:
25:6a:02:9b:4c:5f:47:60:b7:24:92:02:e6:50:48:
46:cf:cd:51:d6:d1:94:c6:78:50:b1:22:b4:f2:ab:
0e:d2:84:2a:8a:12:05:bd:c0:1a:d0:44:35:2a:67:
f5:db:9a:f7:b3:f1:fc:33:b0:77:fa:bf:cc:37:28:
ab:8e:33:69:10:b9:9a:99:16:e6:67:89:1a:2b:52:
01:59:f8:6f:4d:b3:93:74:89:d5:66:59:d8:2b:b4:
d5:1d:5f:b5:23:b1:2c:07:80:53:d0:22:4b:56:25:
02:da:71:d6:e5:84:1c:78:a2:7e:84:37:fc:c6:9d:
a1:72:e9:b4:3a:d3:3f:4e:27:fa:97:9e:73:a2:fc:
e8:9b:21:7f:df:41:e9:04:a1:a6:ec:f3:3a:ec:8b:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16
X509v3 Authority Key Identifier:
keyid:9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:30:22:f1:53:9f:7c:5a:11:43:fa:ce:79:0b:74:42:c5:09:
cc:e3:c3:40:bc:db:95:8c:ca:5c:7c:bf:5b:8b:6a:b9:df:46:
08:dd:44:30:71:c4:11:a9:c4:25:8f:69:79:9e:9a:87:42:b7:
b9:93:de:d9:c1:9d:4b:0d:d0:7d:05:8e:a1:51:92:00:6d:e2:
09:43:5a:75:21:9b:12:26:8c:c0:b6:b2:2f:4c:46:b8:b6:b7:
61:70:90:b9:ec:24:b3:76:e3:5c:4d:de:79:92:41:12:76:79:
2b:bf:b9:e6:cb:b6:83:58:bc:b2:6d:30:da:56:01:1e:da:ff:
06:69:12:89:7b:ab:21:46:9c:17:69:71:a2:a6:c9:2b:2e:94:
7b:33:8b:2d:b7:09:97:cc:fb:ca:76:69:1d:56:4a:0c:68:db:
cc:d2:88:ad:22:c2:ff:40:3f:1c:7b:27:c2:71:a6:e9:ef:05:
36:b5:bb:29:38:49:02:c4:94:9e:ae:42:11:42:3c:64:17:4d:
08:15:25:8e:7e:0d:b9:8a:3d:06:3b:55:22:27:3b:22:bb:89:
d5:60:60:e3:a4:de:04:a4:be:be:4f:ff:8b:d5:b2:a9:8f:f9:
91:63:9d:29:4e:37:15:c2:d4:0d:46:99:b0:ba:44:ac:49:a0:
a5:d8:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:04:38 2025 by rpki-client