Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier: m79Z1P+/8cpMDCJsaoNkNCLXPcNaxy/ljcaMueQVnjI=
Subject key identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial: 1CBE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number: 1CB7
Signing time: Wed 18 Mar 2026 01:01:05 +0000
Manifest this update: Wed 18 Mar 2026 01:01:05 +0000
Manifest next update: Wed 18 Mar 2026 07:01:05 +0000
Files and hashes: 1: 5H9xm8sFNjlauRfit6inw9B9qF8.roa (hash: ST519f8zju4XOEkqrxswQqviHUh35KmFlV/rOg2xuv4=)
2: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: K6WNWbJENzjdOJc/KHOQSDmUv0kR7OFDsNUlrIpSj2A=)
3: G0OzAKp9H3qMTcdDSd383-EnaNY.roa (hash: 6M95qsHvHVz8pg7gOuht4QMpvYxmMeouys9XnZmlOoU=)
4: GFoY3c0huT5AcgeDD1txw4ZsUJY.roa (hash: S8dj+GBLsvU8XOwcrIiwuCkqZCbtLR2H2LVR4IXCQTs=)
5: ksV90rYgQGWCW_zswnSCo4Hhlas.roa (hash: Fx78asKV1L7Hm6uWNysmnMGruYE92gBLrzXEIF5SsAM=)
6: ljHKtUvHDkf9lBkanIoc-YuHVB4.roa (hash: yVBKihHdvHcmNN6jWu6AQcR8iBGZilDk4RxvxP/Hxu8=)
7: x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa (hash: KKLN3wj6w6+GZPg4mWY+9cSane2EnXX2A3ZYmL8Aiyg=)
8: zAB7KdB3MZHXTnVzdqED51EalUg.roa (hash: +ZdEVksBWwEhvnmdhugXRzR69tGG2HocpA/7R2PVt7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7358 (0x1cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Validity
Not Before: Mar 18 01:01:05 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
X509v3 Authority Key Identifier:
keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ce:db:71:96:8a:95:a4:1d:83:f4:3c:31:1b:26:d3:20:a4:
96:8d:b6:38:ed:aa:79:58:78:00:9d:1d:42:b3:21:bb:29:5d:
b1:ba:ff:1b:55:2c:f2:15:5e:04:98:7f:ef:77:50:ed:87:5f:
bb:42:4c:58:62:1a:51:a2:84:2b:b7:8f:4e:f6:2d:bf:ce:44:
1c:80:1f:09:13:c9:0b:59:fb:ab:43:80:37:16:64:9c:98:84:
df:6f:99:4d:c2:a7:2b:41:28:3e:79:f5:aa:51:dd:17:7d:2c:
93:3e:ae:e1:a8:33:6b:ee:f9:78:21:ac:a5:45:8d:8e:8a:53:
d8:72:74:1d:41:c9:42:b2:3d:a4:36:74:e2:f4:63:3f:37:ba:
92:04:df:df:22:2b:92:2e:fe:2c:7c:0b:ad:fc:b1:53:60:8a:
71:93:b5:df:26:24:27:83:ab:17:8e:dd:19:6d:60:a8:31:25:
28:72:48:de:8b:a2:a3:4c:9a:98:ab:42:a8:c5:0c:14:fe:61:
1e:ba:3b:36:7c:47:05:2a:5c:8f:37:e6:75:ce:6e:2c:a4:c3:
3c:e2:ca:41:de:2b:83:5c:08:16:09:6c:62:48:e7:75:e1:75:
d6:f2:c2:1a:83:00:48:25:ec:c5:71:42:04:cf:20:14:fc:d9:
39:b5:f5:51
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy
NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNjAzMTgw
MTAxMDVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEZDRjU0MzlBOTFDQjVD
OEIxMkEwQjFEMjBBQkQwODVENjhFMzhDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy7FyQGO/IYiIDMQKIkrpprDsIQGae4BbDbPtMwUJL53IOPCSK
8Aarh86OaP8vtvVppUfx2O4gUmGnrUvOtvlH31oj2n7kwLBs01H7DvR+ZQlysJmR
fOWDJS8AoTUt/oaraXzc/O6z7FjXr0nbwUKyb7QbR9o0TxQ3Ttf2Zmvi1rW69aLc
4x3begaBUOF0p5+2Gsq5Nkk6TeTUSB9eSVjMFEyzz78zuntNOwz7zEuE2nmctXWo
rUGWSFYIxh3yYyo/ARRRCsAK/OIcxwGL/VfG1PHdy6wagOt9UBOpKX+QAOzVjru8
i8/TW4mkwF/X2Ume2eKc2g8FPVjDes0FMW4rAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU/PVDmpHLXIsSoLHSCr0IXWjjjOIwHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5
WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw
OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvRENVNmNaNktSUHdZ
NFFXNVdxSTBpMTNPMVpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGnO23GWipWkHYP0PDEbJtMgpJaNtjjtqnlYeACdHUKzIbspXbG6/xtVLPIV
XgSYf+93UO2HX7tCTFhiGlGihCu3j072Lb/ORByAHwkTyQtZ+6tDgDcWZJyYhN9v
mU3CpytBKD559apR3Rd9LJM+ruGoM2vu+XghrKVFjY6KU9hydB1ByUKyPaQ2dOL0
Yz83upIE398iK5Iu/ix8C638sVNginGTtd8mJCeDqxeO3RltYKgxJShySN6LoqNM
mpirQqjFDBT+YR66OzZ8RwUqXI835nXObiykwzziykHeK4NcCBYJbGJI53Xhddby
whqDAEgl7MVxQgTPIBT82Tm19VE=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:32:54 2026 by rpki-client