Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
File: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft (raw, json)
Hash identifier: V61rmTr/Gv4poHp+cHd/h8Z1Y0Anspw+9CdfESS7I5E=
Subject key identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 1301
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
Manifest number: 12ED
Signing time: Sun 15 Jun 2025 07:19:30 +0000
Manifest this update: Sun 15 Jun 2025 07:19:30 +0000
Manifest next update: Sun 15 Jun 2025 13:19:30 +0000
Files and hashes: 1: 3ANA68llOiqAK9kzJqoDW4NPtfI.roa (hash: uiS2HxQNB0LmVZpVD+63G59hOl/pd6GststSwA1a7yI=)
2: FdrWyT1YrzA6KtI60aLydyXlpW4.roa (hash: AfdUtKvB7ygfZlLYVJPryTZpg0dREpJlAwQes5Y9L8w=)
3: Hid9TSxvy611Z8cDtqNMLtc4760.roa (hash: 5G/Adrd2lTvVPhN1xnfJeUTCdkxClmLK6htDh4mHOlI=)
4: NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa (hash: Y+tSg/LbrZHtVLaNMJYRvOXDF9n+5BI9LZsRPd5h1io=)
5: UPxeLp83esL6XFwzWB7AGfxYl-o.roa (hash: fS8fV6qCGL62t+Pg2mrdH3cOLpC1KHGgnynYm2XXBxc=)
6: Yd08QO7W-AxZurlCKIepKzXGzvM.roa (hash: 4nTlGE6xoILJr1VUFcY+6+u1iJj1s/aTdUG4JMjUHWw=)
7: _q0jKny6k09xunXEwO2Tsd1dMCY.roa (hash: +RjE4kwqaLBdcY93Kj6OprQHmCwvgIYCXZr6qCaeFvA=)
8: aL4HWAHr_bKNmQck76hMpkZ7qPo.roa (hash: FGSeA6OfcSbWxLLxBnr4u2gfPQofYtPYJMSWKRn7NoI=)
9: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl (hash: zh5pxrmXGKVWWKXS3fOe0ctZy+x/RCnG+pdfZHQ5M20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4865 (0x1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Jun 15 07:19:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=07E61D6C5758A96D685164DDA7175C941FDFCCBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:09:a7:61:3c:ed:69:9d:df:a6:dd:97:48:
0e:e6:cd:45:7a:e8:76:03:a2:14:0f:ba:3e:5e:fa:
e9:2f:a1:90:de:5b:79:ee:c5:1b:1b:fa:45:4b:5f:
6c:ba:98:35:17:89:f7:04:2f:b5:0c:8e:ec:cc:d0:
38:bd:de:2c:25:ff:1b:88:e8:70:d8:ba:7d:82:1d:
e9:64:cd:f1:c7:5a:bf:29:a4:8d:a7:ae:07:65:a8:
c3:39:16:09:f9:d5:ed:be:ad:7a:2c:c8:8a:2a:05:
b4:0c:ab:ca:64:42:73:72:29:45:b0:25:c7:4f:28:
a6:03:d5:c2:a5:ee:8b:80:19:87:dd:74:00:ee:17:
e1:55:74:51:3b:1d:3c:e8:55:1e:a8:da:ff:51:98:
be:0c:04:9f:50:81:91:65:97:cc:76:f2:e3:08:09:
4d:de:67:5d:ed:7b:86:ad:e7:68:29:41:88:58:01:
35:af:6e:2d:7e:8b:c5:33:ce:0d:2f:53:fe:61:66:
89:ce:eb:17:8f:54:67:0c:ad:9d:5d:f8:91:04:a8:
04:a4:2b:09:85:d6:21:ef:16:16:fe:4c:af:94:d0:
1e:98:8a:fe:bf:14:be:e2:0d:b8:f3:32:bb:3f:6e:
03:a2:c8:7a:32:e5:9e:85:fc:4e:8a:b9:41:6b:aa:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6d:56:0d:ab:b5:7c:e7:83:3b:11:61:74:90:c4:c8:81:a9:
85:91:4e:f5:5b:33:c9:a3:97:31:d3:97:86:ea:b0:99:9f:68:
c6:dd:a3:88:49:03:85:dd:4c:0d:dc:9e:5a:b7:f8:fe:49:07:
ab:7e:e0:0b:30:cb:36:01:28:1b:06:f7:a4:bf:db:1f:aa:3d:
24:bf:db:92:52:98:7a:0d:a6:df:79:68:10:3d:5f:9d:3f:a9:
98:36:b6:3a:62:4d:9c:89:51:53:b7:ad:bd:f8:99:55:ef:14:
38:93:b0:01:ae:04:7a:ef:76:fa:dc:2e:ac:25:3a:3c:9e:7f:
4c:cc:4e:c1:43:1b:78:32:19:53:1e:f0:ee:8c:11:60:92:1a:
8b:5b:11:c3:d7:db:37:e7:a4:f0:2f:53:13:c8:57:e2:10:1f:
f5:c6:62:03:9d:87:46:ae:9a:35:ef:c4:95:23:90:1f:1c:3d:
7d:2e:71:49:9c:62:8f:89:cb:b0:36:2b:72:76:db:f0:c3:d3:
f2:58:c6:d6:e9:8e:e9:e6:e8:54:8d:31:c4:3e:6d:c2:b0:70:
07:75:ea:0f:77:5f:73:c5:0c:2c:02:5d:b7:31:8e:87:89:4e:
fd:eb:5c:2f:f8:b9:6a:c0:27:eb:cd:89:0f:99:32:91:09:7d:
a1:5f:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:45 2025 by rpki-client