Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
File: g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft (raw, json)
Hash identifier: M4L/nlA6FqoOMRPJHXSYdKIXsPxrDt7hjtSHH1TfOeo=
Subject key identifier: 11:F2:56:5B:DB:DA:30:CC:F5:87:00:BB:C9:C0:74:E2:7D:E7:ED:EA
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 1DBB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
Manifest number: 1DA3
Signing time: Sat 26 Apr 2025 13:10:48 +0000
Manifest this update: Sat 26 Apr 2025 13:10:48 +0000
Manifest next update: Sat 26 Apr 2025 19:10:48 +0000
Files and hashes: 1: 0F3HvM3mTETH5C_3xndjg6tH0ss.roa (hash: acTAUgny5ISGHASfQA3K47UuQDIVXqTjiNro/yBUqHU=)
2: ICSITvbxtzpmmwvqipIQvWfa5zU.roa (hash: wy2LQSXW3nujhBpvbpTwf259qzYz22ZFmhLwVZFrrQY=)
3: PBVsMcA0-YxNjMAy_RJZs8F-Pn8.roa (hash: lTBQolTGMMhlcWji7mUZ/iICAULUNnlhhldnSHFcS3k=)
4: g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl (hash: QUaO7dedTYcoUwCzprn1JclWtX8NAh+hpT0juqxBxIg=)
5: tAnhg4BJ1r-Z0aPsvgfSfv05_uM.roa (hash: TKSbqNRQLaSRmFQzXCOJrUcJtIWlA3O/TfKP/kECfpw=)
6: wWhaaAlj9JcGe_kybyrhqCBJARY.roa (hash: 5Ql52JvZ+WWSkm9H+KXljVwbKX+AUegjoJOEWl6tCng=)
7: xaUhIc1VDGdMJcJEnBPPcaSjOzc.roa (hash: Hh1tScpvpn2ONVOehEGAfQaToVxJp0+zYElhh/XFkAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7611 (0x1dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Apr 26 13:10:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=11F2565BDBDA30CCF58700BBC9C074E27DE7EDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:5f:b6:f4:ec:e0:89:6a:34:69:97:fe:ac:
c5:92:08:5d:b1:07:ca:64:d6:a8:71:80:26:43:ec:
b7:60:46:64:98:97:55:f8:12:16:45:1c:f9:22:0f:
49:e3:e2:b9:eb:ef:26:8f:51:02:8d:f4:6d:1c:a8:
fe:f3:eb:da:8a:c5:41:85:df:0e:2f:f1:05:0b:b5:
27:9f:38:aa:0b:b9:0c:52:d1:af:67:8a:9e:7b:51:
94:cf:fe:2e:38:9f:0e:37:5a:23:67:0c:46:24:51:
11:8c:42:df:94:7e:91:78:cd:37:53:3f:5a:8d:3a:
2e:9e:35:35:e1:5e:2e:33:61:29:6a:12:d4:ab:2a:
3a:66:2d:83:d1:5f:c8:c7:17:61:e8:f7:16:0f:d2:
9c:a4:ab:f0:85:3c:bb:2e:48:6f:07:1f:c9:28:0a:
66:70:11:e8:01:17:8c:bb:39:6c:c2:ad:4b:90:27:
33:55:39:3c:44:8c:59:36:96:2e:6c:1c:19:55:b4:
56:2d:17:9d:d9:83:eb:89:6c:23:99:ee:2e:07:7d:
38:bd:72:86:13:db:00:66:a9:e1:19:d4:74:11:a0:
6f:24:dc:da:96:f2:3f:6c:0b:8e:5c:fd:2a:97:06:
31:13:50:7c:27:af:35:c6:93:9e:b9:74:ba:3a:2c:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:56:5B:DB:DA:30:CC:F5:87:00:BB:C9:C0:74:E2:7D:E7:ED:EA
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:49:4d:14:bb:65:83:29:b5:17:d1:8c:76:b5:bf:47:ed:00:
4e:be:7f:51:de:0e:50:6e:25:84:dd:a3:fd:0d:63:42:0c:d7:
7e:5f:1b:50:fa:2f:42:8c:d7:00:29:9d:08:68:a6:c8:f6:90:
94:a1:59:f4:5d:45:94:87:82:3d:5a:62:07:3c:b1:13:51:64:
9f:9e:2a:5e:bd:92:96:55:77:60:c5:fd:01:1f:85:3b:99:d6:
2a:fa:7a:46:20:42:4e:f4:b4:18:87:a0:c0:74:f7:10:9a:be:
f4:95:c0:b1:46:d8:17:db:ce:42:e8:21:f1:6f:e7:60:9e:de:
09:da:ca:02:57:e8:9d:72:4a:8a:95:6a:9d:9d:41:45:ab:07:
f9:e0:f8:ae:27:ad:85:c4:02:a2:9c:70:d3:f8:1d:04:0b:51:
9c:1b:04:d5:ef:e1:01:ba:7a:61:f6:e1:cc:56:31:cb:da:b5:
f0:ed:7f:bf:28:11:c2:2c:ad:0e:08:05:6b:2b:3a:13:19:b2:
56:1a:89:e5:e8:83:93:02:02:a6:68:66:24:60:ac:9e:2e:77:
f3:db:b7:d9:c9:79:76:c2:4f:c4:fa:97:2a:4f:7c:1d:28:66:
0b:ef:87:5f:73:5d:c2:65:18:4b:ae:20:3b:f0:3c:c1:38:53:
b2:60:9f:25
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF
NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA0MjYx
MzEwNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDExRjI1NjVCREJEQTMw
Q0NGNTg3MDBCQkM5QzA3NEUyN0RFN0VERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYZl+29OzgiWo0aZf+rMWSCF2xB8pk1qhxgCZD7LdgRmSYl1X4
EhZFHPkiD0nj4rnr7yaPUQKN9G0cqP7z69qKxUGF3w4v8QULtSefOKoLuQxS0a9n
ip57UZTP/i44nw43WiNnDEYkURGMQt+UfpF4zTdTP1qNOi6eNTXhXi4zYSlqEtSr
KjpmLYPRX8jHF2Ho9xYP0pykq/CFPLsuSG8HH8koCmZwEegBF4y7OWzCrUuQJzNV
OTxEjFk2li5sHBlVtFYtF53Zg+uJbCOZ7i4HfTi9coYT2wBmqeEZ1HQRoG8k3NqW
8j9sC45c/SqXBjETUHwnrzXGk565dLo6LHIvAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUEfJWW9vaMMz1hwC7ycB04n3n7eowHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow
7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx
L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL2ctZF9ON081T0ZDRFc2
b3c3b19CTFZYNGNGUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBUSU0Uu2WDKbUX0Yx2tb9H7QBOvn9R3g5QbiWE3aP9DWNCDNd+XxtQ+i9CjNcA
KZ0IaKbI9pCUoVn0XUWUh4I9WmIHPLETUWSfnipevZKWVXdgxf0BH4U7mdYq+npG
IEJO9LQYh6DAdPcQmr70lcCxRtgX285C6CHxb+dgnt4J2soCV+idckqKlWqdnUFF
qwf54PiuJ62FxAKinHDT+B0EC1GcGwTV7+EBunph9uHMVjHL2rXw7X+/KBHCLK0O
CAVrKzoTGbJWGonl6IOTAgKmaGYkYKyeLnfz27fZyXl2wk/E+pcqT3wdKGYL74df
c13CZRhLriA78DzBOFOyYJ8l
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:23 2025 by rpki-client