Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft
File: IdyHWWXCumHR2su0je4UBVSqWu8.mft (raw, json)
Hash identifier: GEwHm8hJwnqvt5iEG4+Z4aOwt9/OF7iNF48/C5Gkxlo=
Subject key identifier: E6:80:90:B1:B9:42:51:2A:C2:9F:64:03:96:02:39:A3:F1:F0:1B:32
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 12F7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft
Manifest number: 12EE
Signing time: Fri 31 Jan 2025 15:25:24 +0000
Manifest this update: Fri 31 Jan 2025 15:25:24 +0000
Manifest next update: Fri 31 Jan 2025 21:25:24 +0000
Files and hashes: 1: IdyHWWXCumHR2su0je4UBVSqWu8.crl (hash: rye/SLZ/Hu8GYlO4xf4IuXHzudBLIiWIyIDANjQyoEU=)
2: ZuvQbTH8ZAJqK3Bv4oQXcXDGOM8.roa (hash: vBuDQxOioQeWVe9lqMaBkRts1ZbtGfixeSvj7yTqxCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4855 (0x12f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 31 15:25:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E68090B1B942512AC29F6403960239A3F1F01B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:fa:5f:fc:6c:3b:90:84:16:c8:16:f7:1a:
76:ea:da:ef:9a:17:a6:a5:24:93:14:18:19:af:9b:
d9:0b:22:9a:b6:18:da:c0:a1:e9:13:00:79:17:fc:
d2:ee:ef:cb:cd:ae:96:d3:80:a3:b4:c7:17:a8:21:
12:20:77:ee:50:36:91:d8:34:03:07:92:b4:de:fe:
5a:79:ab:5a:34:9a:b4:79:d0:2a:dc:7d:11:95:42:
43:21:ea:0a:0e:8d:96:bc:a5:4d:af:fa:17:cc:8c:
29:38:3b:19:d1:50:21:63:69:b9:3a:02:68:6c:68:
6c:73:88:44:67:cc:ab:4f:44:45:58:b3:3c:cb:af:
6e:c9:b9:61:43:4e:8b:ec:63:3c:ce:de:71:ef:d4:
d5:b7:f7:4b:62:7d:9e:37:2b:10:99:5e:1a:49:69:
7f:b0:69:25:a8:b7:6f:3c:6d:fb:51:88:f0:1e:c6:
08:e1:bb:45:2c:d3:bf:c5:30:7e:cf:a9:4b:28:ec:
83:07:c6:ef:bd:b0:ec:f1:be:6e:57:2f:0f:46:dd:
b1:ba:43:e7:57:9d:63:12:6f:c1:fa:50:48:6e:b0:
a4:af:97:7d:57:93:2f:1c:16:6d:a6:e5:35:62:ab:
e2:46:ea:db:c8:c0:71:72:e7:d7:ee:de:0d:9a:64:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:90:B1:B9:42:51:2A:C2:9F:64:03:96:02:39:A3:F1:F0:1B:32
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:51:fd:09:22:f4:8e:a4:36:f8:1c:fc:ff:64:5c:cd:e0:d7:
b7:ee:db:4e:a7:a4:2c:9f:bc:9c:28:1f:df:bb:12:3c:cc:c7:
e3:1d:11:2d:2a:4d:82:0f:97:26:38:81:f5:6f:f3:7e:89:8f:
bf:d1:2e:ad:37:80:5f:35:76:8e:a9:58:ad:d0:76:1e:f2:f0:
07:26:7b:51:a6:35:a0:93:55:fc:3a:ec:69:c8:72:d3:ce:e2:
9c:72:99:7a:e8:e3:4e:d4:85:07:4a:87:59:ad:af:2a:42:9f:
4d:11:a6:dc:4f:36:e8:b0:99:0e:88:31:a3:3b:b4:ce:25:07:
46:a1:5b:4b:b0:f4:b6:79:ce:3d:a6:4d:0b:0f:0b:55:b6:ea:
bd:7d:06:88:10:f1:5f:08:1b:c9:eb:f4:bd:95:a2:66:48:35:
2e:87:3c:29:01:a4:75:5e:61:1b:75:49:cf:56:bf:46:cf:39:
4a:42:20:2f:28:4b:29:34:68:d4:60:e4:8d:57:2f:18:34:72:
c9:74:50:e0:68:2a:5e:57:ea:12:35:de:f3:3b:b3:cc:00:1d:
dd:b4:50:16:5a:ac:63:e1:f2:38:fa:ef:fe:14:89:7c:36:1b:
de:e0:27:61:f6:67:97:11:59:4e:47:28:0e:fd:5f:ed:ea:dd:
eb:f0:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:26:36 2025 by rpki-client