Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft
File: m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft (raw, json)
Hash identifier: 892f7kaAne97rQu1hXzsmPN1ANnS9L3QRBjDVBWuTok=
Subject key identifier: 42:CA:EE:A6:60:60:CA:33:38:7B:50:1B:B1:26:DC:FB:B8:C4:4E:4E
Authority key identifier: 9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
Certificate issuer: /CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Certificate serial: 1C16
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft
Manifest number: 1C0F
Signing time: Wed 05 Nov 2025 15:14:45 +0000
Manifest this update: Wed 05 Nov 2025 15:14:45 +0000
Manifest next update: Wed 05 Nov 2025 21:14:45 +0000
Files and hashes: 1: U8G90-YYRgh6k3HDnDRzn22nZOU.roa (hash: 1ypHTYDNhHGShZNbyXb5EDdy2PfInXRHSiQUuVslDdQ=)
2: gcv3IRtBMP0g_QP2HXkJ4IuRlKU.roa (hash: W4N2kLS/TBnU7hLEU2XcWlrf1fkrk2tPC5ARdXrekA0=)
3: m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl (hash: KFoBieDnVfLgL8PshDUwFq5toYBlNnVGuRN3WDIZTQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7190 (0x1c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Validity
Not Before: Nov 5 15:14:45 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=42CAEEA66060CA33387B501BB126DCFBB8C44E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:e9:fb:c8:37:26:30:8e:a9:73:91:eb:0d:
d3:a8:4b:94:58:77:f2:a5:18:d1:24:94:c9:4f:84:
16:5f:19:49:15:da:ef:5e:46:93:09:48:dc:21:2c:
d6:38:6e:8c:9f:77:57:5a:af:4b:1a:53:6b:a1:32:
77:5c:75:26:c5:51:ab:17:75:bb:8c:26:74:b9:60:
a0:77:e6:e7:14:62:f8:98:12:6f:35:59:62:2b:d5:
56:2d:e1:58:51:dc:35:6b:0f:ed:38:ac:0f:ee:24:
37:8e:94:8a:4d:81:d5:49:03:f1:af:58:e6:ac:dd:
33:3d:a6:ab:5d:64:4f:6c:78:8f:0e:7c:91:09:6d:
a5:b9:9f:23:ee:d3:d9:86:81:84:20:f7:2a:94:9a:
a0:25:0f:f5:5c:1c:8d:b3:2c:e2:9a:65:e5:8e:ef:
85:ec:ee:e0:2a:ce:77:5c:30:7a:0a:6b:66:38:c7:
58:60:8e:49:9a:c9:90:12:99:73:35:b4:ac:e4:85:
ab:30:0d:a7:fa:ef:97:8c:64:c1:cc:93:a0:dc:0d:
e6:18:f4:6d:f3:e3:2b:78:3c:4e:ba:97:98:c5:1b:
bf:46:10:5f:f0:ef:cd:13:be:9c:a8:39:68:90:65:
51:b5:2f:20:8e:20:42:06:5d:58:4b:33:2b:a1:fb:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:EE:A6:60:60:CA:33:38:7B:50:1B:B1:26:DC:FB:B8:C4:4E:4E
X509v3 Authority Key Identifier:
keyid:9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:41:10:c9:93:5c:8d:fb:41:ed:93:67:92:06:70:62:63:45:
34:27:38:28:26:d7:17:3b:f4:d8:4e:aa:8a:13:a7:7f:6b:53:
ad:b3:dd:57:ac:4e:57:2c:a8:74:d3:95:87:b7:c0:c5:32:9d:
3d:89:c7:69:1e:3b:81:04:77:b2:e4:a3:98:29:2e:56:da:cb:
90:98:a0:da:af:c9:59:a1:b3:79:50:1f:18:30:24:8b:c6:51:
c0:46:f7:54:f7:64:65:2a:51:85:41:cd:79:eb:a4:07:87:9a:
19:23:00:35:28:65:78:0e:a6:b8:df:90:e6:f2:b2:43:b0:f6:
8e:b2:cb:9c:8a:a2:f8:80:3d:f2:b8:c3:38:68:8e:ce:34:ca:
8e:57:21:a9:db:e2:f6:86:d5:62:d7:95:eb:dd:98:e9:60:b4:
c2:b0:09:a1:9f:df:9c:b6:bb:ff:72:5b:88:cf:96:47:d9:20:
11:31:0e:00:cc:0a:5a:60:0b:b9:92:d2:f9:89:ec:69:27:d2:
04:07:e4:d1:46:f9:02:7b:52:c8:ed:90:ba:e9:55:b1:43:3e:
84:12:30:34:b1:4c:45:ac:08:b3:12:cc:83:a9:77:c2:5d:31:
fe:d7:96:80:d6:a3:0a:00:3f:21:c7:bc:0b:8b:1e:ce:ae:f3:
13:b8:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:04:11 2025 by rpki-client