Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
File: mlx0rj-M07Z5rFbEc_RQN4WRkms.mft (raw, json)
Hash identifier: ucEf0EOcVe0ll2nrNjR5U4PsDwo3S+dDMlQetEjCqfE=
Subject key identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 1E20
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
Manifest number: 1E10
Signing time: Wed 09 Apr 2025 03:06:02 +0000
Manifest this update: Wed 09 Apr 2025 03:06:02 +0000
Manifest next update: Wed 09 Apr 2025 09:06:02 +0000
Files and hashes: 1: BJ8T6xeZmMZPoJmpWakz5R26fNM.roa (hash: 4dzjcrkTArAsirZGrc5ZYf3u9Rn1+p/i9kWIil0/S6o=)
2: GffFEt798jGr2kcFeplLE9TiUpw.roa (hash: x/NW5R0sx7+4pKoOo1eHG33Vc6aGyXA8OuFJtzNxon8=)
3: GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa (hash: 8dxpRvljiGFK6kC5Y47WYo2ofFRXbFVeh34A5lPzXCs=)
4: KebNhNqHYlNdAxB9cgzJuTzHbFs.roa (hash: 5TjKvSC7WlvKE6HkDjGaROjX06WQePtjRheVhtqxHWo=)
5: TuRAimkG7nUfxwwnfG2ggisWEWQ.roa (hash: rJ770ZZ28gQ4Oy6pYNR7fhAhl+t7lmth+T2+S8AjKOM=)
6: mlx0rj-M07Z5rFbEc_RQN4WRkms.crl (hash: I+6xOwRKXly330HPYywpEywISbxJvl4xkOeR8HQL0fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7712 (0x1e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Apr 9 03:06:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DED08EF758D4AC1835950E046F31B9ED40123207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:b4:f4:af:6f:ac:59:2d:d1:16:e3:99:9d:
09:77:1c:8a:5e:2d:8f:8b:bb:83:34:11:10:f9:8e:
84:8f:27:66:e9:3c:be:6d:8f:8f:4c:3c:ad:d7:2c:
0c:37:06:ac:4e:22:a3:e5:7f:e0:90:60:42:32:60:
c2:25:cb:72:3e:b1:2d:30:c9:7d:98:0d:48:d5:44:
96:12:df:47:d9:8a:df:3b:ba:04:bd:b7:ba:c8:ce:
93:00:73:aa:4f:ca:13:74:a2:80:55:83:9e:d3:d1:
8b:50:fe:09:23:7a:ec:e6:d1:2f:9b:fe:36:e1:1e:
92:91:17:ee:56:0b:a6:70:07:68:74:62:a6:8f:29:
3c:24:4f:b0:c3:a2:ff:06:57:43:0d:77:1d:b0:fd:
1d:0b:63:19:1e:a6:cb:86:b4:77:0b:8b:80:b8:86:
a6:55:45:dd:80:a4:32:16:45:8f:78:a1:b0:17:ab:
78:dd:54:a5:60:0d:71:9b:d3:59:78:a2:92:6b:a5:
d4:f8:0c:a9:41:32:11:ec:94:c4:59:ba:8e:89:30:
bb:b1:ef:1e:f1:fc:27:6c:6c:79:e3:13:6e:4d:f4:
8c:61:7b:20:dd:52:81:39:08:4f:da:10:13:81:29:
c4:b2:f2:18:06:f2:99:9e:57:37:d1:c1:ae:7d:76:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c4:9f:b6:0b:f9:72:72:6b:ac:9b:e5:b5:e4:b3:56:80:dc:
65:40:f9:3d:e2:39:42:47:10:bc:5d:38:53:3a:1c:81:13:48:
11:c8:f8:95:98:d9:06:97:f0:4b:8c:03:1f:9b:bf:c1:4f:f7:
37:a4:86:e8:19:89:15:ab:4c:e3:50:f0:a5:2e:82:4c:a3:98:
8b:1c:1f:15:9f:83:83:d1:d8:95:98:75:ad:74:0f:9b:d8:5a:
29:0e:c2:b2:99:d0:ea:a1:33:10:81:fe:35:91:ad:03:0f:e0:
3b:7b:11:a9:ce:a8:0b:94:10:aa:ff:48:4d:1e:47:a2:16:6f:
00:d5:4d:57:55:d1:7f:a1:36:63:6d:5a:a4:a8:1d:6f:1f:4e:
68:82:2f:63:07:e3:14:52:69:b0:ff:7a:ec:6a:41:07:c1:0c:
54:a2:a4:c8:29:d6:8b:4c:e5:b8:5d:4e:b2:5d:02:14:55:c9:
0a:d1:58:68:12:cf:ea:e0:a7:39:1f:c6:f9:ab:f1:85:3f:e8:
98:79:22:04:4f:2b:7a:f1:7c:41:a7:5c:40:98:6f:d1:45:5b:
98:8f:47:8b:3c:22:d6:e6:e0:5d:c0:cd:65:67:71:06:bd:5c:
a3:0d:7a:ad:43:c0:67:54:86:9a:f8:ab:6d:79:6e:a2:c5:04:
54:a2:01:fe
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICHiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUE1
Qzc0QUUzRjhDRDNCNjc5QUM1NkM0NzNGNDUwMzc4NTkxOTI2QjAeFw0yNTA0MDkw
MzA2MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERFRDA4RUY3NThENEFD
MTgzNTk1MEUwNDZGMzFCOUVENDAxMjMyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHALT0r2+sWS3RFuOZnQl3HIpeLY+Lu4M0ERD5joSPJ2bpPL5t
j49MPK3XLAw3BqxOIqPlf+CQYEIyYMIly3I+sS0wyX2YDUjVRJYS30fZit87ugS9
t7rIzpMAc6pPyhN0ooBVg57T0YtQ/gkjeuzm0S+b/jbhHpKRF+5WC6ZwB2h0YqaP
KTwkT7DDov8GV0MNdx2w/R0LYxkepsuGtHcLi4C4hqZVRd2ApDIWRY94obAXq3jd
VKVgDXGb01l4opJrpdT4DKlBMhHslMRZuo6JMLux7x7x/CdsbHnjE25N9IxheyDd
UoE5CE/aEBOBKcSy8hgG8pmeVzfRwa59dp1LAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQU3tCO91jUrBg1lQ4EbzG57UASMgcwHwYDVR0jBBgwFoAUmlx0rj+M07Z5rFbE
c/RQN4WRkmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
bWx4MHJqLU0wN1o1ckZiRWNfUlFONFdSa21zLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9tbHgwcmotTTA3WjVyRmJFY19SUU40V1JrbXMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tbHgwcmotTTA3WjVyRmJF
Y19SUU40V1JrbXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
w8Sftgv5cnJrrJvlteSzVoDcZUD5PeI5QkcQvF04UzocgRNIEcj4lZjZBpfwS4wD
H5u/wU/3N6SG6BmJFatM41DwpS6CTKOYixwfFZ+Dg9HYlZh1rXQPm9haKQ7CspnQ
6qEzEIH+NZGtAw/gO3sRqc6oC5QQqv9ITR5HohZvANVNV1XRf6E2Y21apKgdbx9O
aIIvYwfjFFJpsP967GpBB8EMVKKkyCnWi0zluF1Osl0CFFXJCtFYaBLP6uCnOR/G
+avxhT/omHkiBE8revF8QadcQJhv0UVbmI9Hizwi1ubgXcDNZWdxBr1cow16rUPA
Z1SGmvirbXluosUEVKIB/g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:31:09 2025 by rpki-client