Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.mft (raw, json)
Hash identifier: rGXUYRnDy01xVKhP9jEeRtdRVZkORD8HIPbmam/QpHs=
Subject key identifier: 71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 1CE1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
Manifest number: 1CD0
Signing time: Sun 15 Jun 2025 07:20:59 +0000
Manifest this update: Sun 15 Jun 2025 07:20:59 +0000
Manifest next update: Sun 15 Jun 2025 13:20:59 +0000
Files and hashes: 1: -ADB0ul8beQrLrQh61kNdQ6Xl0I.roa (hash: 4dx4i0BTuk/HpHw9BS/JDWyxYxY/rjkaxOaRkWmyHWM=)
2: 7oh6zHzktfZsz0lG8Cv6y94ot2o.crl (hash: yLCFG13o7PVdjqCYMvF/NPgMeoqtox+KMosCxH4nPLk=)
3: Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa (hash: Rt65UKUI1MIChaQ4kid1nM0Cmb+I+LuUZ5rVsZCJ5zk=)
4: gAfbD59axt_g53rR7MDELLID5sU.roa (hash: 9EVLJuL3qbmLwsstxAa2k3aFuCqTvyAP0AtOReuM1OM=)
5: pCD7g6xZIOYEt3L4B5Kw69Iijwg.roa (hash: GqobMFyHZb/uTGS5by9T74r2Dh3iM+3w+uYHclash2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7393 (0x1ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Jun 15 07:20:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=71D1BCAA71CD2BAB928DBD579EF3C179074B57CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:0d:60:c4:3e:68:d6:46:f0:7e:0a:c7:54:
8b:25:88:5d:a6:57:09:eb:d8:6b:89:e3:d3:e3:ac:
4d:69:db:62:e5:06:8c:e4:91:ba:71:fa:f7:d5:95:
58:08:be:d8:1e:a5:1d:d0:96:57:91:8c:61:7b:ec:
ff:10:49:62:12:f0:6c:d4:5b:ed:58:6e:c9:9b:86:
88:6d:18:26:6b:9e:47:bf:c4:6b:5c:04:f1:ab:9d:
c5:6a:cd:a8:ad:19:b4:b1:f1:8e:ce:6c:fa:eb:c6:
f4:97:49:72:03:bf:5f:b3:15:71:ff:55:fd:1a:5d:
57:d9:e9:3b:c8:79:26:dc:c7:98:96:83:c0:ed:0a:
a3:a7:70:18:bf:13:3d:b8:d7:f4:7d:e1:bf:34:37:
53:dc:b8:a6:0d:42:19:7e:42:da:ac:95:e6:1d:69:
27:49:14:88:e3:bd:92:36:aa:e2:6c:3a:4c:92:32:
4c:72:8e:c0:53:97:b4:26:a2:12:33:89:4e:7a:a1:
81:f9:91:0a:42:a3:4c:bd:af:c6:2c:f5:4f:03:51:
d3:cb:05:69:0b:29:d7:da:6f:97:7e:33:60:77:74:
0f:de:0b:42:d0:28:0e:17:5d:ac:72:6c:2d:4f:0f:
ad:79:16:c8:83:fc:d5:df:1c:3b:22:0e:cd:59:3c:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:06:40:04:27:ef:d2:1d:46:bf:a9:af:54:b7:00:1f:2a:
1c:a1:b4:22:d8:8e:90:6e:d9:2f:f0:b6:98:e0:10:6b:45:35:
d3:03:1f:69:8a:fa:b3:48:73:e1:43:47:fa:e0:70:0f:9b:5c:
99:04:58:13:77:96:96:b8:5f:06:22:17:81:7d:5b:fb:e4:16:
37:a9:9d:7b:75:86:07:11:5c:d2:c3:b6:0a:80:3b:7a:e2:99:
c9:64:81:18:e0:4c:db:d8:c4:7c:c6:85:a5:0b:42:db:f7:b0:
27:0f:47:fd:69:86:99:12:55:05:c4:f2:ab:f8:3d:d7:1b:0b:
2b:3d:58:a9:fb:1c:33:f9:32:3c:b5:cf:d8:37:0c:c6:53:db:
87:79:df:bb:29:54:5c:8a:a6:a6:c7:1a:06:4a:7c:8e:be:ac:
87:65:b5:18:52:cd:4f:63:88:cc:7a:36:53:7d:16:ee:60:02:
90:36:02:f6:86:a7:01:ae:cf:ea:4e:dd:0b:a5:ef:f0:04:93:
1d:46:a9:0b:2d:01:f4:5f:8a:ea:d9:8f:25:36:a9:77:a5:d6:
72:b8:f8:3d:6c:f1:73:51:33:24:55:f5:ec:9c:a3:ab:1c:cb:
81:07:b3:53:e1:20:2a:cb:a6:17:ad:48:81:b5:fc:bd:e5:3e:
61:e4:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:53:51 2025 by rpki-client