Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier: N9doGVrJPry4t5/iyT4TDZSszV7K1AlOp31hAeF9NK0=
Subject key identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial: 14CF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number: 14CF
Signing time: Fri 31 Jan 2025 15:25:14 +0000
Manifest this update: Fri 31 Jan 2025 15:25:14 +0000
Manifest next update: Fri 31 Jan 2025 21:25:14 +0000
Files and hashes: 1: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: gMBTPOzFQV/kBWwvfGCIb0MHwc382Dfe7aNuVz9EzZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5327 (0x14cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Validity
Not Before: Jan 31 15:25:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
X509v3 Authority Key Identifier:
keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:3c:c1:68:4a:28:53:54:ba:ce:b6:7c:2b:8f:e3:14:e5:c0:
ad:98:19:7a:d7:fa:fe:67:fb:61:3b:28:38:03:2e:80:ea:2a:
56:40:a1:4e:fa:e3:8e:3e:01:3e:73:4c:15:46:69:9a:df:c4:
05:96:e1:76:83:3c:b3:a8:68:30:36:e7:91:22:73:68:b9:5a:
86:60:b4:08:33:18:bc:26:c0:dd:39:dc:c5:a9:61:49:f4:48:
63:d8:6c:d4:49:49:91:d5:ce:87:84:67:34:fc:25:c4:aa:62:
7d:77:0b:e4:5e:5f:f9:8f:63:8c:0a:8a:1a:9c:35:d2:af:bb:
df:62:d9:6b:9c:bf:32:8e:16:09:bd:60:8f:7a:b5:22:e5:df:
2f:4e:33:6b:6d:b1:ad:4e:17:4f:92:ef:93:fe:6c:7d:d5:43:
04:6c:3a:f8:31:6e:ef:65:b3:c3:14:ee:fd:6c:64:21:79:95:
63:2d:d6:73:31:46:0b:10:15:a2:21:b6:0e:7d:1c:04:38:c4:
3e:a5:73:9e:a2:95:7f:d6:08:1c:7a:cd:3c:22:25:1d:f3:fa:
9b:f2:49:b0:7f:7e:0d:d6:20:8c:a5:97:82:54:f2:11:8c:e2:
94:37:86:ac:10:f7:fc:38:b2:26:d9:df:16:4d:81:d8:61:69:
86:ea:00:f6
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy
NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNTAxMzEx
NTI1MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZDRjU0MzlBOTFDQjVD
OEIxMkEwQjFEMjBBQkQwODVENjhFMzhDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy7FyQGO/IYiIDMQKIkrpprDsIQGae4BbDbPtMwUJL53IOPCSK
8Aarh86OaP8vtvVppUfx2O4gUmGnrUvOtvlH31oj2n7kwLBs01H7DvR+ZQlysJmR
fOWDJS8AoTUt/oaraXzc/O6z7FjXr0nbwUKyb7QbR9o0TxQ3Ttf2Zmvi1rW69aLc
4x3begaBUOF0p5+2Gsq5Nkk6TeTUSB9eSVjMFEyzz78zuntNOwz7zEuE2nmctXWo
rUGWSFYIxh3yYyo/ARRRCsAK/OIcxwGL/VfG1PHdy6wagOt9UBOpKX+QAOzVjru8
i8/TW4mkwF/X2Ume2eKc2g8FPVjDes0FMW4rAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU/PVDmpHLXIsSoLHSCr0IXWjjjOIwHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5
WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw
OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvRENVNmNaNktSUHdZ
NFFXNVdxSTBpMTNPMVpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAQ8wWhKKFNUus62fCuP4xTlwK2YGXrX+v5n+2E7KDgDLoDqKlZAoU76444+
AT5zTBVGaZrfxAWW4XaDPLOoaDA255Eic2i5WoZgtAgzGLwmwN053MWpYUn0SGPY
bNRJSZHVzoeEZzT8JcSqYn13C+ReX/mPY4wKihqcNdKvu99i2WucvzKOFgm9YI96
tSLl3y9OM2ttsa1OF0+S75P+bH3VQwRsOvgxbu9ls8MU7v1sZCF5lWMt1nMxRgsQ
FaIhtg59HAQ4xD6lc56ilX/WCBx6zTwiJR3z+pvySbB/fg3WIIyll4JU8hGM4pQ3
hqwQ9/w4sibZ3xZNgdhhaYbqAPY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:09:15 2025 by rpki-client