Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json)
Hash identifier: qSKOkqcGMq+JBHi3560h5Cz7187MLA3eO8gb81N/tIk=
Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2234
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
Manifest number: 21B8
Signing time: Mon 28 Apr 2025 19:40:10 +0000
Manifest this update: Mon 28 Apr 2025 19:40:10 +0000
Manifest next update: Tue 29 Apr 2025 01:40:10 +0000
Files and hashes: 1: -9NqEbVLtxcMQGDhsFUsirUgR90.roa (hash: YAPD8DouMRjl8InJgmqoPXZ+pjhCQ4vLb0TAZBDeTVA=)
2: -OwUbQLzqS9CtZr_wtRPxfVPmaw.roa (hash: nU8McGO3g2yTqZQuoumVj83hRYLsBYNlvrV6uYQKZvY=)
3: 0tIdMYbPh52gcnbONKM9sxEByR4.roa (hash: 5KLm0nAa5fOcsr0fbhaiO/JacSV520TVs9rJMJnaPNk=)
4: 4r97Xtcderk2rYaAfCVbfPoW-to.roa (hash: GeqdqfE7ko6jT4bYJmB3zZUkfFl2QdouEXCxGMC+aoA=)
5: 7gi6WSx9-W3Q_-0BTXzk72FY--s.roa (hash: hOgIBhnJyd+67kfMJ+asIvXRzv98Q3BxXFjjyBGTNkc=)
6: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (hash: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4=)
7: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (hash: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc=)
8: DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa (hash: JKM3JbUzp8Tp8W8FeRJcZ36tbe3l8DuRQx0dg+sgrBI=)
9: F-PLBkUJrhrV-KBJeTXlAo3uFIQ.roa (hash: G0OcVUn1H6U6vze7iL2fHDtXQLPXmGQGcExdKogT03k=)
10: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (hash: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4=)
11: HReb-ywFRD2sicgKUd2w0b7x10E.roa (hash: y65mKFijZQhce38APb8340kQcqbx8J1XoRf25Cv+AsE=)
12: Jti-bdW-scu_L4qJSVV8bFC34Hg.roa (hash: von2PiMAe0B935XVhzke3hrz/cpQJvoVxPOBvVAOqbQ=)
13: Kg-iXs-ZgDNd-P3bwxgPfjGf6H4.roa (hash: gT/dloENLe+1DgzIP0bxSsTmtxSc8ITXoF0nYrR0/LM=)
14: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (hash: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg=)
15: Mb88DUngG1AeeJ_spzyhH1MtIe8.roa (hash: rPbaYvCyBWVV6nFsWT4yFzdUpbPZoHNmTE5IeHtHFsA=)
16: OIcAhWMzK_7prvQFEasxweToIj0.roa (hash: xBqcWZW2JugLmKQfZ49aES8JiB/8xJHGQsV4BM/CTao=)
17: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: abOYkZ7czCC7vWYQrxc9hGY4pR1b40NAzlziIrHKfPI=)
18: WMANHMiWx1g3CI3Gqpc2-P8j_7k.roa (hash: qNeI26rm2x8bpU/OqzZTNDcppRMsi9Yh3o3Np4XxV+s=)
19: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (hash: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg=)
20: gjOyscTAwPENBh0n5Aa3QndEX60.roa (hash: HfhectSQmQlUhPpiM7eLV3JM7FPBo3tgWE1WoKdnnqs=)
21: hDX4u7pdx7Zf5kqxUv0PItrx1f4.roa (hash: grzzaZRI5mpPViDtJPvajB5QsdXQjicqtx/xXdx9O+4=)
22: n5ZNxatvv4XCouElRwkMzO6ANTQ.roa (hash: 2V2xIDmOEpYGle2/9Z9l+ERcP87JlV8yB1t7el2xCxY=)
23: tBEau9qaHWyukHWT05JHQ8xv6yU.roa (hash: yhpnPts3yhegRpvu3PBV7bzk7TlZ6bt6sB2BKxLt30s=)
24: tgoxuWcvzb42md0unwEcPBA-z-E.roa (hash: 8U1tCdX/+rNtC4iXplL0V8fy1x9AMLWS0KUZb06OkVk=)
25: tihOEV-WyZh2J6zruajXK8SgAPU.roa (hash: AUMG4eEdxdoP6cesREJuZwDefP4CdbQDPkHCN/F8erw=)
26: tou57tkArzeegu37p7K21QZeqNI.roa (hash: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw=)
27: uzejoKzTeKDkpAiT_kC3H2af84w.roa (hash: pxi1SN6x6SJe2L7OxxGf3guFu+VTbediU/lKPs/cm4c=)
28: ywYi0okn_GT3W2d2eD_7GQ0HewM.roa (hash: dhJ6G/hO2IpTJvPzX9YY2GzSuWjpi6GsiEi7zCLlzSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8756 (0x2234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Apr 28 19:40:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18:
a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53:
ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a:
95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49:
3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6:
6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9:
34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7:
8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71:
05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42:
14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f:
30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f:
e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2:
91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc:
8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb:
4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1:
33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f:
84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:a2:52:e3:d3:87:34:8c:fe:d5:1d:c6:32:c4:68:7d:54:
61:87:2b:8d:35:8d:33:f1:14:7f:32:8d:bc:21:11:d9:3d:78:
fa:7c:7a:a4:b6:9a:b8:64:0d:2c:26:2a:52:70:e8:35:ba:e7:
b8:34:0e:77:5a:85:1d:50:14:56:ba:d6:63:a9:0c:4c:4f:08:
ab:54:e1:bc:dd:21:0b:0c:59:7e:7b:67:59:74:4a:f6:62:06:
ed:c2:54:18:54:5e:c6:86:67:5e:4f:8f:43:6d:00:f0:52:db:
79:14:2e:cd:1e:7f:51:8a:ae:c4:a1:30:e7:ad:87:f7:7d:1b:
c9:5d:43:8c:b9:00:67:23:b8:58:19:e9:d8:84:7c:69:4a:7d:
52:10:2b:74:4f:27:2d:bf:f6:96:65:dd:17:19:6f:27:62:c8:
66:68:a8:66:9a:9d:0d:e8:56:dd:89:5c:a7:91:df:08:df:93:
d8:26:3d:46:ad:cd:65:2b:06:ab:f5:91:cc:ec:1c:04:1a:89:
a4:8b:38:42:db:5b:48:58:ca:24:dc:1b:43:31:cd:01:2e:bf:
f0:a6:8c:09:ea:86:c4:e7:29:3b:6d:ec:79:71:75:ee:01:09:
35:8f:1a:48:85:3d:65:57:f8:52:43:75:f8:9e:e8:7a:4c:1a:
28:0d:24:e3
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICIjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA0Mjgx
OTQwMTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF
MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od
VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2
3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd
QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx
Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7
HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG
VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADTyolLj04c0jP7VHcYyxGh9VGGHK401jTPxFH8yjbwhEdk9ePp8eqS2mrhk
DSwmKlJw6DW657g0DndahR1QFFa61mOpDExPCKtU4bzdIQsMWX57Z1l0SvZiBu3C
VBhUXsaGZ15Pj0NtAPBS23kULs0ef1GKrsShMOeth/d9G8ldQ4y5AGcjuFgZ6diE
fGlKfVIQK3RPJy2/9pZl3RcZbydiyGZoqGaanQ3oVt2JXKeR3wjfk9gmPUatzWUr
Bqv1kczsHAQaiaSLOELbW0hYyiTcG0MxzQEuv/CmjAnqhsTnKTtt7Hlxde4BCTWP
GkiFPWVX+FJDdfie6HpMGigNJOM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net