Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft
File: 4LWzbEhxQqoAYPpbVHULJsXPW9w.mft (raw, json)
Hash identifier: JcVUYD8cMRZcWstEU7XUJL67EwdemGYhfAiW5ySqq9k=
Subject key identifier: E6:0A:2E:E9:38:6F:8C:B4:CC:5F:D5:51:C6:B6:7F:AE:A7:E4:C3:1A
Authority key identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC
Certificate issuer: /CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC
Certificate serial: 05B1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft
Manifest number: 05B0
Signing time: Tue 17 Mar 2026 23:59:51 +0000
Manifest this update: Tue 17 Mar 2026 23:59:51 +0000
Manifest next update: Wed 18 Mar 2026 05:59:51 +0000
Files and hashes: 1: 4LWzbEhxQqoAYPpbVHULJsXPW9w.crl (hash: 7Zs5saZBJ9jvAIWLJl6S8cvN21B13mrFTvsgyQFgEiw=)
2: nQe8cqEREUIsJzuFPvvw2A1_6e4.roa (hash: M7HEBLqrcF9Cc43K//Uhar4sJlCkmK82tTZ8yw7MBD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC
Validity
Not Before: Mar 17 23:59:51 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E60A2EE9386F8CB4CC5FD551C6B67FAEA7E4C31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:56:da:d2:cb:7f:a2:3b:9e:7f:2b:fe:7e:
d2:68:1a:40:3f:d8:ee:3b:2e:46:d9:c9:8f:5a:e2:
63:fe:f3:1c:a1:6d:e2:eb:70:e6:93:e2:35:18:24:
72:e8:30:84:77:c9:53:90:39:26:13:0c:4a:5b:24:
2f:70:dd:15:22:2f:c0:92:eb:56:4c:25:bb:26:29:
67:82:6d:e2:86:ad:de:8a:79:8a:69:2c:ea:ec:50:
40:90:c8:f4:9f:33:af:d2:2a:e9:0b:40:2e:39:c9:
bb:3f:75:9d:ef:7d:b8:3c:98:23:8e:21:f1:e3:a3:
2c:a7:fa:2f:b8:95:6c:d9:bd:a5:dc:85:0a:f2:c8:
58:6e:76:c9:33:d1:a1:cc:22:49:1e:3c:fe:cf:a6:
82:1d:78:7b:29:78:07:19:98:40:e0:3e:7d:8c:c5:
0c:00:4f:f3:e9:b3:42:29:7e:2e:4b:30:f1:e2:bf:
1d:39:85:78:33:e5:4f:bf:f6:db:2f:1d:64:5f:f6:
de:1f:14:c7:d2:89:33:b5:d3:04:e6:74:f4:dd:03:
39:d7:8d:3d:cf:02:34:de:f0:18:66:7c:b0:a5:04:
03:58:6d:5a:88:c9:5b:09:a7:52:0d:c1:2f:e8:a0:
e4:c4:c8:9b:6c:f9:f3:2f:38:5c:e9:aa:21:8b:b4:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0A:2E:E9:38:6F:8C:B4:CC:5F:D5:51:C6:B6:7F:AE:A7:E4:C3:1A
X509v3 Authority Key Identifier:
keyid:E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:79:56:8c:68:34:84:31:e2:d5:fc:19:20:c9:d2:66:52:b3:
3d:b1:37:20:82:3e:e7:13:99:bc:70:de:85:23:1e:57:e3:72:
0b:e5:38:5e:72:1d:04:f0:b5:6e:d2:41:58:16:07:3b:a4:7c:
97:82:53:01:7b:e8:88:d6:0c:51:64:3b:64:4d:b8:89:a2:a6:
72:36:1e:93:26:25:15:26:72:5a:fe:be:76:b2:6f:76:64:25:
00:0c:f4:a0:56:80:d8:87:db:e1:80:03:af:b0:e2:f3:7f:c2:
a2:a2:5d:42:70:20:ff:92:dd:dd:ca:02:6b:54:3b:9d:a9:49:
bf:9a:5f:f7:16:a4:5e:7e:d6:b4:33:61:0d:af:e0:ba:c5:f5:
bd:09:7b:83:b9:0e:95:9f:75:c7:a8:49:88:27:1b:d7:8d:70:
36:14:6a:21:71:26:5b:8f:9a:16:39:f6:ce:77:d3:0e:fb:af:
cb:29:bf:9c:b8:36:f7:5a:ae:39:33:20:94:f1:4a:55:7d:9a:
5c:13:e2:61:a1:4a:a0:82:ae:67:cd:1f:d0:cc:2f:a6:69:fd:
be:ad:90:f0:82:8c:dd:4f:30:21:b0:14:65:9e:9b:74:e0:f8:
d4:f8:82:df:f5:be:51:c9:0e:b1:9d:8c:f0:b2:89:30:b1:3b:
4e:2a:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:15:24 2026 by rpki-client