Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
File: MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft (raw, json)
Hash identifier: CwubgUHoomjO3X4g4/6Jjwd9Yb/yUcXZzmtvSKTYaPM=
Subject key identifier: 16:5C:5F:A5:B6:0A:9D:DE:85:EC:B2:2F:CC:29:4E:91:34:DB:B5:07
Authority key identifier: 30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8
Certificate issuer: /CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8
Certificate serial: 2D6D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
Manifest number: 2D6C
Signing time: Fri 20 Jun 2025 23:14:24 +0000
Manifest this update: Fri 20 Jun 2025 23:14:23 +0000
Manifest next update: Sat 21 Jun 2025 05:14:23 +0000
Files and hashes: 1: MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl (hash: m8+Whx8scvSspT5TCFHfA12a7jlDkjDVmwM1qQlDrcY=)
2: y9DLCNSIuLkBZIkz41fZp7cJGZU.roa (hash: Cp0py42ioGyYnkGJjzIyPolL5ICxx82QyuevAMu3xEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11629 (0x2d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8
Validity
Not Before: Jun 20 23:14:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=165C5FA5B60A9DDE85ECB22FCC294E9134DBB507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:79:7b:7f:4b:1b:50:b6:07:ec:fc:3b:11:
9e:fb:d5:b2:f5:00:0c:bc:a4:dc:0b:e4:af:92:db:
96:63:56:3c:b4:5f:14:a5:c7:a5:8e:75:c0:88:7b:
c2:d2:a6:7a:02:a7:4d:c8:65:10:df:68:4c:63:4f:
0b:1b:5d:0f:f1:a9:44:c8:68:53:29:be:e2:7e:19:
3e:80:17:6e:da:aa:80:8f:ea:07:67:4a:28:b1:c3:
ca:93:95:7a:80:a0:b3:a7:d9:20:80:f0:25:93:f1:
82:6a:9e:c4:32:1c:75:45:ec:8f:a0:da:1d:80:41:
95:ae:15:b4:de:69:bc:cf:00:64:ea:21:72:ed:a4:
3b:a8:99:59:28:f1:0b:ed:76:90:13:39:54:5e:da:
ea:ea:e4:72:48:a4:ce:43:d7:3b:db:df:6a:5a:63:
93:d6:37:16:ec:2f:2a:e4:78:2d:94:be:23:ea:cf:
1e:61:e1:16:4b:f4:b8:f0:03:fd:a1:f6:35:9b:9b:
c0:22:c9:b5:5b:6a:bc:45:0b:dd:9d:ce:9a:ac:5b:
5e:28:db:22:99:ba:f4:1d:bf:59:eb:ad:12:0a:f6:
49:00:cf:33:35:6a:d8:e4:82:65:67:16:47:9b:c6:
88:2f:82:c3:b8:3c:ae:6a:ab:9f:c9:99:a0:53:64:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:5F:A5:B6:0A:9D:DE:85:EC:B2:2F:CC:29:4E:91:34:DB:B5:07
X509v3 Authority Key Identifier:
keyid:30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:21:83:0e:54:ba:62:eb:b9:c4:2d:f0:ed:9f:8e:a8:6d:73:
55:59:c0:a6:98:a4:6d:4d:76:3c:5b:d0:48:69:8c:af:6b:f7:
dc:dc:74:5d:35:14:c1:95:60:4c:4d:f4:be:94:a4:27:b2:c6:
ac:34:f2:a7:e7:10:f7:d3:22:03:b0:0a:9f:8c:73:21:54:9b:
03:75:15:9f:96:87:70:37:41:2c:93:24:c2:a5:8f:f7:e3:3e:
f8:0b:9b:d4:b0:9b:b9:b4:0f:61:b4:b1:0e:b1:6a:10:3d:df:
40:74:15:dc:19:18:ee:31:47:b8:c6:ed:09:64:70:bb:91:53:
43:66:f3:fa:a5:f3:07:cd:b8:3a:11:88:d2:e3:32:6f:ff:c8:
ba:78:75:8b:d7:45:83:d5:6d:4b:8f:4a:64:29:05:65:d6:b4:
5c:8e:74:5b:d0:07:79:35:5a:15:cb:ff:5f:af:65:27:85:35:
b6:96:56:a2:ac:7d:8a:34:3a:2f:62:ed:56:45:49:a9:19:23:
35:e2:e9:a2:3b:a3:c3:6b:1d:00:a4:94:f0:65:39:01:83:4f:
de:2b:fa:57:c9:ec:8f:e3:34:c7:79:e2:99:b4:a9:f7:e8:63:
fb:3c:54:4d:0b:c0:89:17:35:1b:6c:77:80:6f:0c:0a:dc:5f:
41:c2:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:46 2025 by rpki-client