
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json)
Hash identifier: TfmNxDCFoVZ0W7Q4mRvC23GLykzeMX1+9pLuFGhXd/c=
Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 15D2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
Manifest number: 15C9
Signing time: Sun 22 Jun 2025 01:12:46 +0000
Manifest this update: Sun 22 Jun 2025 01:12:46 +0000
Manifest next update: Sun 22 Jun 2025 07:12:46 +0000
Files and hashes: 1: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (hash: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k=)
2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: ntcrTSWa6yrgWzZwr8w3WFZfhFCiMaJpoimBtXaweWs=)
3: dhzeY3_OxcHAtiIl3zszftT0K6M.roa (hash: Bh1vZMx8G1lOICwP2E+cHe0uEMRdbBxn1G0CwSCXWF0=)
4: hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa (hash: 2Vn8f0lm4bXJ6phvRt7XoC++jp3dCf7kzB9LVXj1jVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5586 (0x15d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Jun 22 01:12:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95:
9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c:
12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a:
fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72:
dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db:
6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5:
76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78:
ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92:
f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e:
e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79:
96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26:
db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87:
5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3:
1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b:
df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48:
1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df:
45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:4b:7a:30:6f:cd:90:a4:6c:6f:b2:7e:19:f3:79:6f:a4:
73:c5:ea:75:de:6d:c5:6c:e4:6b:ef:51:7c:c7:a2:63:0e:49:
64:dd:63:7e:9c:58:f0:50:91:c8:f9:17:d9:6c:77:9e:26:a0:
1e:8c:58:d8:5d:a5:df:a3:15:45:f3:b2:cd:5a:40:79:d8:5d:
26:52:c4:2e:46:00:7e:9b:15:2c:5e:1b:57:b4:46:b8:84:2d:
aa:cf:5b:02:a0:dd:60:93:50:01:5a:4e:2e:0d:3f:f1:3f:08:
26:ac:17:8c:5e:21:10:c0:4b:64:73:55:93:df:52:ac:91:d1:
68:b3:5a:7a:b9:2c:c9:59:13:46:5c:08:81:78:85:cf:fb:1a:
09:c8:3b:50:29:97:89:1e:8f:7b:e0:a9:ab:72:60:17:55:76:
a9:af:45:5e:ce:52:30:01:42:64:36:d5:cd:b0:27:15:99:fd:
18:f8:a9:f5:1d:5a:b9:bb:99:3c:b6:90:c0:21:17:95:c2:2d:
e8:e4:89:9d:da:e9:7c:ed:60:92:ed:29:ae:39:7e:24:ee:4e:
3d:57:66:fb:fd:47:cb:3a:cd:69:49:92:25:e9:f1:84:e8:8c:
bf:3c:60:e5:1c:b7:1d:e8:32:56:b0:5e:e5:52:1a:2e:a7:bf:
6f:a3:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:11:00 2025 by rpki-client