Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
File: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft (raw, json)
Hash identifier: k9/fbyUjkfRQ/1rf11J45ZHIKNarEmqoZ99WQbsMdKM=
Subject key identifier: 32:60:A4:7F:05:31:7A:0E:5D:CA:C6:FD:9B:82:46:AE:0C:C9:8E:B6
Authority key identifier: CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
Certificate issuer: /CN=CC8CF726F2323299108744D6930BEF18D677445D
Certificate serial: 1795
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
Manifest number: 178C
Signing time: Wed 09 Apr 2025 03:06:08 +0000
Manifest this update: Wed 09 Apr 2025 03:06:08 +0000
Manifest next update: Wed 09 Apr 2025 09:06:08 +0000
Files and hashes: 1: 1H_dEmlcHR9WrgXuUkgyw7TC6PI.roa (hash: PYMpJ9QJ790iCzSPPg6odQyh509VNCs3J8a0L4Xr8Vs=)
2: KzxPrZsNmlG9fHcuHEAELhTildI.roa (hash: lKTisdtJ9wopA8c02OL0FrfptSw09OytCXCrsSw4ZJ4=)
3: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl (hash: 15AuMdU2/ZdAHIImP+6zo0kiq/VgwELukH/c2kCB/EI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6037 (0x1795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC8CF726F2323299108744D6930BEF18D677445D
Validity
Not Before: Apr 9 03:06:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3260A47F05317A0E5DCAC6FD9B8246AE0CC98EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:16:1d:f1:24:d5:4f:31:8e:f6:7f:b2:0a:
0f:6a:55:ce:e2:ef:43:77:69:91:f8:8b:ba:64:ee:
6d:13:b0:e7:93:c7:74:0d:f4:f1:71:1a:3d:e5:a5:
ed:c7:68:4f:ae:56:da:ea:2d:7e:d0:4d:9f:df:9d:
66:c6:1e:3c:ac:6f:db:d7:37:c1:f0:fa:bc:a4:c8:
06:81:2c:b6:57:52:91:23:64:28:9c:16:2a:bc:24:
76:c5:f4:0e:2c:6c:a3:86:16:d4:92:d0:a3:97:aa:
94:c8:0b:63:bd:3d:16:90:4d:95:47:3a:d2:c2:1e:
b7:08:6e:fc:cc:6a:3f:d0:1b:29:06:6d:ea:c3:86:
11:ae:18:33:d8:2c:e8:85:80:c1:9c:06:84:86:f7:
a4:0a:6c:33:34:8a:31:f2:00:9c:36:83:1a:93:0d:
fb:96:60:d0:6a:de:ce:17:77:91:ac:84:67:67:98:
7b:e3:dd:41:37:fb:f8:13:b0:5a:4e:aa:3c:e1:a5:
85:66:5b:71:c6:c9:7f:05:ee:54:da:97:e2:58:e8:
50:eb:c4:8c:be:28:dd:c3:5a:a3:91:5d:24:99:45:
41:ef:0a:92:84:30:bc:7c:7b:67:0e:e6:06:ba:16:
53:2e:31:76:cb:54:43:69:8e:2d:e4:b1:31:02:16:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:A4:7F:05:31:7A:0E:5D:CA:C6:FD:9B:82:46:AE:0C:C9:8E:B6
X509v3 Authority Key Identifier:
keyid:CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:04:cc:c8:75:ac:14:22:f5:f3:22:c8:ca:19:6e:0b:da:89:
08:37:21:c9:e9:59:53:f5:5f:fc:ed:40:3a:32:5a:86:03:c3:
ff:02:76:3f:7c:1c:84:75:88:97:ad:3e:f0:25:64:f9:6f:3d:
02:31:d1:11:28:37:0f:09:45:60:db:aa:78:7d:5b:93:42:cb:
4f:a5:5a:f7:0f:a6:09:72:46:d4:7f:5e:2c:29:d2:54:ed:4c:
5b:0f:df:67:76:bb:04:c8:1b:e5:b8:97:3e:1b:09:2c:6d:37:
e8:42:f8:68:c0:ff:33:38:2e:a6:54:54:b6:e7:3d:b3:b5:15:
35:1c:76:58:3a:8e:aa:45:dc:56:d7:fe:72:c0:ea:1b:c1:9d:
6d:f5:3b:f7:96:04:42:5c:33:02:56:17:13:4f:a0:39:32:9f:
ce:2a:83:24:1e:ea:e8:f7:d8:b3:27:16:b7:ec:0e:be:ea:88:
a8:8d:fd:34:04:e1:24:ec:1b:0b:9a:81:9f:d2:04:2d:6e:0d:
5f:87:a9:2e:c8:ed:dc:6a:79:45:fc:90:9d:ee:85:87:82:7f:
20:a0:98:ea:90:1f:6e:63:f9:dd:90:a8:0d:61:2a:83:52:0e:
71:4c:09:e2:f5:71:72:3c:87:7f:0d:25:49:19:b2:e1:e6:b5:
12:ae:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:31 2025 by rpki-client