Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json)
Hash identifier: 7r8XWzWexC1Y0ay8ZmrU880bFoC9N6snR4kpp/ana40=
Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Certificate serial: 1D9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
Manifest number: 1D9A
Signing time: Mon 28 Apr 2025 19:38:08 +0000
Manifest this update: Mon 28 Apr 2025 19:38:08 +0000
Manifest next update: Tue 29 Apr 2025 01:38:08 +0000
Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: C/OsTbwOFpjktaAqCB336av6ejYQ4BiBRod1Fm+xjfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7578 (0x1d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Validity
Not Before: Apr 28 19:38:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76:
24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83:
b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df:
09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9:
66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84:
e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1:
72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9:
ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97:
7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e:
70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f:
88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b:
8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3:
8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb:
cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93:
c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6:
c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5:
5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
X509v3 Authority Key Identifier:
keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b1:d7:d3:d0:a0:d6:c8:89:a8:cb:a0:1e:ed:9a:a7:e4:9d:
25:73:38:d9:99:21:49:ab:c0:80:c9:09:6d:f5:77:08:fb:44:
2e:53:75:6e:95:41:51:b6:ef:1e:6c:ce:94:b9:ff:f5:85:9e:
6b:06:06:c7:b9:c1:5c:09:d3:7c:b9:5b:67:d9:d6:67:ae:fc:
09:17:21:20:4c:91:62:73:92:f4:3b:ac:f9:d3:6c:20:f6:7b:
83:52:89:0f:4e:b9:87:04:0f:1d:49:36:8e:ad:70:77:9e:2a:
92:89:bd:73:50:a8:82:25:55:90:6d:62:f5:80:9e:16:3c:fb:
66:5d:5f:c3:4a:e0:38:a9:09:d3:41:d3:07:bc:74:1d:51:0b:
ca:f3:82:63:d1:58:56:42:84:85:4b:0b:44:5b:ed:06:8f:73:
97:9d:d4:68:c0:8c:79:f8:9a:47:dd:48:73:b5:40:e3:fe:41:
df:99:02:8c:06:14:b2:c8:7c:cc:99:18:dd:65:d8:f9:93:a0:
d4:b4:97:ec:7c:a9:79:ca:54:b3:b1:6f:f0:dd:1b:bd:6e:7b:
49:63:a3:2d:95:9c:c9:72:8a:57:0f:59:16:5d:01:37:38:70:
6f:c4:21:c8:0a:03:6e:13:79:71:be:43:30:fe:37:d7:09:f5:
84:6a:1c:71
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5
QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNTA0Mjgx
OTM4MDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw
RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj
HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS
efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4
fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k
SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f
hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT
5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy
MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW
UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMCx19PQoNbIiajLoB7tmqfknSVzONmZIUmrwIDJCW31dwj7RC5TdW6VQVG2
7x5szpS5//WFnmsGBse5wVwJ03y5W2fZ1meu/AkXISBMkWJzkvQ7rPnTbCD2e4NS
iQ9OuYcEDx1JNo6tcHeeKpKJvXNQqIIlVZBtYvWAnhY8+2ZdX8NK4DipCdNB0we8
dB1RC8rzgmPRWFZChIVLC0Rb7QaPc5ed1GjAjHn4mkfdSHO1QOP+Qd+ZAowGFLLI
fMyZGN1l2PmToNS0l+x8qXnKVLOxb/DdG71ue0ljoy2VnMlyilcPWRZdATc4cG/E
IcgKA24TeXG+QzD+N9cJ9YRqHHE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net