Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft
File: iIhNTUp18X8I3UTLqVkv5w9TnZc.mft (raw, json)
Hash identifier: QDguIF3mMVb9kNi4Fy5N3KHH13ppKtbGo6EAxGuZyVM=
Subject key identifier: 74:F5:E0:C1:04:8A:58:81:D5:98:C5:7D:13:66:6F:F3:E9:76:96:FC
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1E01
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft
Manifest number: 1DCB
Signing time: Mon 28 Apr 2025 19:36:25 +0000
Manifest this update: Mon 28 Apr 2025 19:36:25 +0000
Manifest next update: Tue 29 Apr 2025 01:36:25 +0000
Files and hashes: 1: Fu_b4tel5NGHEPxYvtqzDhhAbqQ.roa (hash: skkkRa+f+zbYNJtBW9cXYGXDstm5mWfrryxHxT22Fv4=)
2: JvgxkMD8uDPSN5J2IBVUSXcq1CQ.roa (hash: LGZkzecS/oOZB/jgNue3M7MGauHxK1CsafE7hzqN+lM=)
3: UZHfKjNy_777Q9bAPY-TRRLF7JM.roa (hash: gTXt1ZXlzhAqrXd8fGYX/D/fL64eBW9l+ESGdbQgWzk=)
4: UwF3RRWBWBJzOKMpEgCPwJHusDQ.roa (hash: 2j9APxsIAALLNwJhqrNuF15QX7EES49mUdK4GoYHWms=)
5: cREs8hmh_CmOnkUd4fU9j_ntn0w.roa (hash: CP7BSCAsooYTWgzemNYrDx/XFHt9xqP+ChJ75EbH+cE=)
6: eOnWlmCuBcB2z-k-1EvXoZmhDzo.roa (hash: PvsnJd+w8p2xQdrIuCBq16T7Z7QhAuuf+Nw8Pr9uF6A=)
7: eYu8i8WLsCDl0cpHYV0xiV9KgPk.roa (hash: Hgl/czQiJR245QlSg4cy6iaWEpWFiq9ORvftoROwGWQ=)
8: eZah-AngLzb8qFPY5nps7k990bY.roa (hash: ZrAWhkudRJM4vRG6Jn9b9j7Vh7eTCG04BPZTFrJzppk=)
9: ftFMs_-GIzFOKfuDr7xm-R24Kr8.roa (hash: gUV9DW32VKoXS9w9FeSdsgysPfhlzoba3d+Ijnrdcuo=)
10: iIhNTUp18X8I3UTLqVkv5w9TnZc.crl (hash: UVgFfQB5CX9dv4qw/U1fVwhIW51jc4zt8RkfskGuXwM=)
11: kDW1cRo86YzzeBsDbuuqb0TPbSY.roa (hash: zH0Bb/tnJndPjBUYLdvYRyQIrO9oLPTeV3JZ/lVlA58=)
12: oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa (hash: Hy+566HgUdo7tAmvKq5D06v1xyoGXDvCRugVB0yhFmw=)
13: w3pt5ET1tvSm7d0RqvtpQaSbUSg.roa (hash: TdLS3FpjQ1UPLqz5X5rwpVpfmm+7VwjlrlPBgwGcC0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7681 (0x1e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Apr 28 19:36:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=74F5E0C1048A5881D598C57D13666FF3E97696FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:32:99:d6:89:fc:17:87:10:91:62:9d:93:
13:df:f3:4a:1a:d6:2a:11:5d:bc:89:f6:f1:76:45:
46:6f:ea:e7:36:37:dd:df:2f:d2:80:4b:b4:4a:e9:
08:55:03:97:db:d6:db:2b:11:8d:dd:f3:de:ef:44:
4e:7a:b7:b9:ad:30:ee:04:fa:44:5a:ae:43:f7:28:
fa:7d:14:8f:de:e7:50:bc:24:31:fc:53:4a:21:00:
ab:ed:61:8a:aa:12:9e:39:18:17:0e:a7:27:8a:a7:
3a:1a:87:d9:32:bf:02:11:06:fb:95:03:88:3c:04:
22:9e:58:89:e0:84:6c:56:9e:26:a2:28:0d:fd:64:
21:d1:5f:a4:d8:17:82:af:90:96:fd:64:09:13:7d:
04:5b:f3:72:f8:c8:b8:13:33:21:7c:7d:74:85:82:
47:21:79:a0:dc:d4:7a:5d:66:a8:51:b7:cf:fd:2a:
b4:59:17:9b:59:bf:88:ce:64:5b:44:5b:57:36:71:
f9:cd:89:d9:2b:e3:1a:00:80:47:fb:ae:cf:e2:94:
1c:e3:35:45:45:ac:c1:ff:61:8c:b5:fd:ae:ca:bd:
be:01:1c:1e:1f:30:76:2b:41:35:42:a6:52:7b:b8:
fb:54:64:72:ee:3f:c2:a8:e4:bc:dc:33:73:d5:c3:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:E0:C1:04:8A:58:81:D5:98:C5:7D:13:66:6F:F3:E9:76:96:FC
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:11:69:a0:9b:f9:ab:cb:e1:00:10:ce:90:21:50:f1:ce:
7c:47:e9:3e:97:83:cd:2e:c7:fa:86:20:14:ad:4f:f2:84:19:
c6:15:24:2a:f5:86:3f:a6:57:2f:b7:51:b4:67:45:94:5a:37:
0a:dd:6a:46:67:f3:46:ba:c3:11:78:95:80:72:f4:3a:01:69:
d3:02:04:e0:cb:9a:6f:d1:75:46:c2:c4:ef:b0:46:12:65:f1:
2c:fe:da:3d:25:cf:66:3a:e3:98:b7:e4:1a:eb:3e:05:12:b8:
28:64:6e:94:ef:eb:da:4d:f1:08:c3:2e:1e:70:cd:7c:17:2c:
3f:89:32:99:8a:d9:90:ef:91:5f:60:94:7c:aa:68:db:8b:47:
ab:e5:e0:34:f0:77:41:82:c3:f9:99:e8:f1:cc:6e:39:1f:5d:
2b:37:00:5b:9c:6d:b0:71:15:84:8d:37:bc:ae:92:dd:be:39:
e7:7c:4e:58:fe:59:fd:c4:0b:6c:d9:a0:df:e7:c0:d5:16:9c:
c9:82:9f:bc:30:3a:dd:ab:52:1e:35:dd:d0:a3:28:60:48:bf:
d8:01:e0:1d:0a:d1:1c:80:4e:0a:f5:4f:94:00:54:9d:4a:6a:
db:da:59:ea:2a:9e:10:8c:a2:9b:5c:91:a4:0d:b5:cf:74:b2:
e3:59:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net