Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft
File: DPxgVxKdypoWDypZIndlqeZ0lLs.mft (raw, json)
Hash identifier: f+utlKBymm6/5zJKQykBuCV3vVDt4+JfwzRtbyv1dyI=
Subject key identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96
Authority key identifier: 0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB
Certificate issuer: /CN=0CFC6057129DCA9A160F2A59227765A9E67494BB
Certificate serial: 0590
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft
Manifest number: 0590
Signing time: Mon 28 Apr 2025 19:38:48 +0000
Manifest this update: Mon 28 Apr 2025 19:38:48 +0000
Manifest next update: Tue 29 Apr 2025 01:38:48 +0000
Files and hashes: 1: DPxgVxKdypoWDypZIndlqeZ0lLs.crl (hash: pzarfdgpJVzsvwdhTLllASQqBlopLIPt6s8/REGYuhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CFC6057129DCA9A160F2A59227765A9E67494BB
Validity
Not Before: Apr 28 19:38:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0A119F57ACC03770F86C2A86F0217E60FDC14A96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:1e:6b:8d:42:0c:34:04:f0:b7:a9:65:fc:
8d:7b:cf:4a:42:07:b3:5e:79:c5:a2:e5:77:99:f0:
18:22:f5:e0:40:8e:0e:d0:4b:21:f5:5d:d4:be:8d:
35:69:f2:59:18:69:fb:16:2f:11:47:30:4b:12:8f:
6c:15:4c:8a:dd:9c:38:96:d2:f0:b9:5c:73:2f:63:
e0:90:89:d0:72:bf:15:60:ea:9d:59:7e:b9:04:d8:
c2:99:f1:ba:c1:1c:c4:b9:64:b6:d1:c5:8c:df:ad:
88:2c:3e:e2:b6:07:94:5d:f6:fa:30:21:82:60:4c:
f0:5d:4e:8b:7f:99:77:77:d7:2a:fb:1b:5f:7d:a9:
27:ab:9b:67:b8:c5:ce:cc:f2:84:5f:9d:cc:63:7a:
b4:20:b0:d2:03:2c:de:1b:b9:2e:1e:08:4e:ec:2e:
77:dd:2e:74:33:21:78:39:ef:54:1b:89:9b:e0:2e:
1a:eb:63:0d:b0:e2:c1:8b:4e:10:a8:70:a3:d6:cd:
02:5a:8b:f0:af:4d:ef:e9:1f:4f:f2:a0:34:23:6d:
60:d5:1d:fd:8e:a5:c0:e2:45:9f:df:58:dc:68:96:
c4:b7:ed:cb:b4:7f:61:b7:ad:e4:3b:ee:9e:f5:08:
fb:44:26:8f:28:8d:9d:d4:4b:0b:14:d1:24:cf:fc:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96
X509v3 Authority Key Identifier:
keyid:0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:e8:52:25:4a:4f:48:25:2c:d0:e4:67:14:2f:54:77:e4:
2e:09:14:15:e0:6a:72:10:0e:49:f5:ae:3b:4e:a5:92:58:8f:
8f:26:0e:4d:aa:7c:aa:3a:b7:77:83:69:9f:9d:4c:18:5a:42:
96:08:5c:d0:0f:6f:0a:e6:5f:e7:d0:6b:78:4d:9a:1f:e5:30:
bc:1a:8a:ba:36:3d:9c:bd:6d:7d:79:b5:8a:ce:9f:32:29:67:
e5:e6:d6:ce:71:a0:e2:79:35:03:f9:b0:d3:6c:7a:f8:e3:51:
4f:22:30:65:e8:91:48:fc:48:f2:e0:69:3c:e6:33:32:d0:6f:
97:ef:34:4b:87:c7:4e:e7:7a:1c:41:6e:b1:1f:a8:d7:39:6d:
cc:e9:80:6a:71:32:1f:f9:72:03:22:16:51:4b:61:bc:4a:e4:
f3:37:59:d7:d3:94:eb:d2:5b:40:49:0d:20:1c:20:e0:05:b7:
71:7f:74:c7:b7:be:ef:de:d9:b2:40:6f:2e:68:31:f0:de:c0:
2f:ef:b9:cd:6f:e4:80:e0:54:05:d1:6b:1c:e2:82:67:11:53:
d0:a1:6c:a8:5f:6a:8a:58:cd:39:a7:9b:a9:a8:60:75:a2:a1:
cd:cc:79:16:35:0a:77:8c:7a:2f:83:a2:1f:25:8a:2f:46:fe:
67:31:be:ec
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENG
QzYwNTcxMjlEQ0E5QTE2MEYyQTU5MjI3NzY1QTlFNjc0OTRCQjAeFw0yNTA0Mjgx
OTM4NDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBBMTE5RjU3QUNDMDM3
NzBGODZDMkE4NkYwMjE3RTYwRkRDMTRBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8IB5rjUIMNATwt6ll/I17z0pCB7NeecWi5XeZ8Bgi9eBAjg7Q
SyH1XdS+jTVp8lkYafsWLxFHMEsSj2wVTIrdnDiW0vC5XHMvY+CQidByvxVg6p1Z
frkE2MKZ8brBHMS5ZLbRxYzfrYgsPuK2B5Rd9vowIYJgTPBdTot/mXd31yr7G199
qSerm2e4xc7M8oRfncxjerQgsNIDLN4buS4eCE7sLnfdLnQzIXg571QbiZvgLhrr
Yw2w4sGLThCocKPWzQJai/CvTe/pH0/yoDQjbWDVHf2OpcDiRZ/fWNxolsS37cu0
f2G3reQ77p71CPtEJo8ojZ3USwsU0STP/LTnAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUChGfV6zAN3D4bCqG8CF+YP3BSpYwHwYDVR0jBBgwFoAUDPxgVxKdypoWDypZ
IndlqeZ0lLswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
NS9EUHhnVnhLZHlwb1dEeXBaSW5kbHFlWjBsTHMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RQeGdWeEtkeXBvV0R5cFpJbmRscWVaMGxMcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDUvRFB4Z1Z4S2R5cG9X
RHlwWkluZGxxZVowbExzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGVL6FIlSk9IJSzQ5GcUL1R35C4JFBXganIQDkn1rjtOpZJYj48mDk2qfKo6
t3eDaZ+dTBhaQpYIXNAPbwrmX+fQa3hNmh/lMLwairo2PZy9bX15tYrOnzIpZ+Xm
1s5xoOJ5NQP5sNNsevjjUU8iMGXokUj8SPLgaTzmMzLQb5fvNEuHx07nehxBbrEf
qNc5bczpgGpxMh/5cgMiFlFLYbxK5PM3WdfTlOvSW0BJDSAcIOAFt3F/dMe3vu/e
2bJAby5oMfDewC/vuc1v5IDgVAXRaxzigmcRU9ChbKhfaopYzTmnm6moYHWioc3M
eRY1CneMei+Doh8lii9G/mcxvuw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net