Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json)
Hash identifier: w1vLCMSpMUHgaKxprRwg+FqgOgkwELsIeE+KCHFRfkU=
Subject key identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1DC8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
Manifest number: 1DA8
Signing time: Mon 28 Apr 2025 19:40:31 +0000
Manifest this update: Mon 28 Apr 2025 19:40:31 +0000
Manifest next update: Tue 29 Apr 2025 01:40:31 +0000
Files and hashes: 1: 5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa (hash: 1G9TvIGpOI19k+vNY2vWqyAcGnf/NgnyIFlBuchbsrU=)
2: ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa (hash: /xveDAj10Cqwa30t8+mVrd6NxA4uKtlsdoO1YjXjPOM=)
3: GRQWmU7kj2MtZz8P0rhABLNxJmo.roa (hash: xODLseQ5OuG7zJVn2IeWVbKpN/ynDTW7X462XK2DiW0=)
4: ME9y6iE9_arWH9Fs4BYwAi0vlDo.roa (hash: ccNS9q/DL6E/wtDUgZtIMTYW86d7GQqpLSA3TKwdwhY=)
5: UYYH8nf7t3pHRtHfYdrj9_du1LI.roa (hash: TaRSS1gmX2lvWtqnWK7fdhRVGpVjUSEIVC9l9749sHc=)
6: b_xJrKXfr9iR-P1PshZUFr11DEI.roa (hash: KEtj9jXlsW8crqkjMlm5YVVy0ObCZcEDc+GqHIOmI/M=)
7: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: Qox9U30277deRDabBiBJAC4IdMnxBe+e6A7OtUjHTiE=)
8: tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa (hash: SXZrx4Q4IxBEYib/DtnwGYISea4XlmC7x5pSx7JcMyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7624 (0x1dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Apr 28 19:40:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e:
31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed:
f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d:
82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6:
b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87:
86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89:
a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b:
d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a:
c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4:
fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca:
56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9:
34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c:
eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2:
2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd:
ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f:
ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a:
cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b7:6c:50:ca:25:b0:14:01:f2:26:3c:54:64:72:f2:c3:13:
e1:23:9a:a7:2c:9e:98:7a:b2:47:a7:e5:26:f9:4c:75:be:b1:
5e:10:a4:2d:e8:a4:b9:24:b8:d3:0f:20:89:12:1a:40:bc:72:
3a:b9:e0:81:b2:6a:1f:cb:33:f6:2c:61:8a:dd:67:d9:3e:f6:
6d:bc:08:41:d4:95:8c:6a:d0:0c:b0:f4:ae:8f:56:3b:bf:83:
f0:29:bf:b6:c8:ab:be:7f:0f:49:6f:7d:83:3b:00:eb:2b:81:
e8:c7:c4:0d:7c:ec:05:73:16:35:39:69:88:8d:92:38:61:91:
ef:63:36:98:25:96:37:47:67:94:9c:a0:23:47:9a:cb:e8:4a:
4f:76:e7:ea:2d:3d:77:98:60:bf:67:0d:e2:04:1d:28:05:e8:
67:f0:93:0a:3e:3d:17:35:63:3c:83:6a:f6:d2:52:3e:08:20:
0f:d5:8f:bd:f6:af:d1:b4:79:4a:37:56:6e:8c:54:50:5e:d6:
b4:53:14:bb:36:e8:85:0c:5d:79:09:3e:2c:26:eb:4b:cf:e7:
8c:8c:56:6f:13:2a:1c:b1:fe:c7:01:85:29:91:f5:c9:f2:41:
c6:a2:a0:2d:1b:de:22:c5:d1:b5:c3:84:2e:9d:6d:00:c9:34:
36:b4:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:40 2025 by rpki-client on console.sobornost.net