Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft
File: A8JGgRHqHFTvizzN765RbDCabsg.mft (raw, json)
Hash identifier: brP8cXMzIJacf64ehWJV456lj81Yq19ns5xSiofIH6A=
Subject key identifier: 40:E8:44:62:90:F9:7A:3A:6D:7C:48:87:B3:13:FC:D3:B1:AE:09:A3
Authority key identifier: 03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
Certificate issuer: /CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Certificate serial: 1ACF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft
Manifest number: 1ACA
Signing time: Wed 18 Mar 2026 01:01:48 +0000
Manifest this update: Wed 18 Mar 2026 01:01:48 +0000
Manifest next update: Wed 18 Mar 2026 07:01:48 +0000
Files and hashes: 1: 1BaPXImToIuFK4BWNNtuYSr1xSs.roa (hash: 0kFs+yiHRiw9WM1kz8pmSH14HDb/suhbncCkEWRjlzg=)
2: 245GYucSpaUoadtDQ8QIqw50V8U.roa (hash: fMgFFlzyEf5nzePcMKIWx0QdNucCDxf/kk1XhK/If+E=)
3: 7TNp04BVwJQHv1dTpUlNr2M_EVY.roa (hash: yU8KZh3ejWSVkJaNoqfDcd1ZHbJOOM2Z2NpvcoGuRRE=)
4: A8JGgRHqHFTvizzN765RbDCabsg.crl (hash: PUpJ3a1gQJOaq+T6wg7hZXFEVKxZbDWYz7c6WKS6vHU=)
5: LQsH_tF9tF9VXzV6Uq7lUCHdWS0.roa (hash: 2nQiV3yM4C9uHYb22n7t+ehtYvRe8MKJ9sBDK6zNMA0=)
6: cbKUR4BQHdrUir8bbKDhSJs8Mvw.roa (hash: xi3EzrF8AJJluHP7mpwsm0sUqDojImmwuHEyhBXFSF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6863 (0x1acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Validity
Not Before: Mar 18 01:01:48 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=40E8446290F97A3A6D7C4887B313FCD3B1AE09A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:e5:02:3a:07:fe:b0:b7:77:17:ee:fa:a3:
ea:3b:73:73:27:29:98:72:24:b2:bd:ae:95:48:b6:
3c:52:8e:6c:fd:80:4e:c8:f2:aa:d4:c2:09:50:f6:
47:6e:46:ba:9b:bf:a6:e1:a2:7f:16:73:fc:4d:bb:
50:f6:48:ad:82:22:44:28:ff:c0:81:50:71:dd:25:
b6:a3:7b:3d:0f:b6:5c:fc:ff:86:47:9e:19:86:f0:
e8:62:31:44:33:73:40:de:f2:e4:29:ea:c9:c0:b5:
81:3e:6d:5a:03:e0:2f:ab:f4:86:d7:fc:89:95:ca:
db:b9:ba:7d:e9:b9:3c:04:f0:c4:02:ae:38:e8:f4:
5b:22:8e:76:8e:ad:ee:4b:2b:5d:35:4e:ef:d1:78:
94:89:1a:e4:94:1f:31:ec:f8:31:3a:56:3e:44:35:
56:3f:9d:6f:17:5e:91:ef:55:cc:d6:fd:4d:84:55:
91:08:17:41:b6:35:b5:86:50:8a:b6:83:3e:7c:d4:
d4:e2:f5:5b:6a:d3:53:26:f0:6c:9f:5b:0d:1a:6f:
e6:ee:d7:d0:fd:8e:40:82:8c:0b:16:6b:96:ef:5d:
13:f6:bd:8c:1a:52:b5:9f:67:88:ff:3e:d0:e0:de:
74:a7:0a:cd:1f:c4:da:0d:34:9d:09:ea:35:63:2d:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E8:44:62:90:F9:7A:3A:6D:7C:48:87:B3:13:FC:D3:B1:AE:09:A3
X509v3 Authority Key Identifier:
keyid:03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:c9:3f:24:1a:89:6d:14:01:3d:86:e2:95:39:f4:20:90:
69:25:ae:13:98:e5:2f:70:9c:eb:e4:d8:49:48:31:df:4b:f5:
58:72:37:7d:95:ed:34:11:cc:ed:8c:a7:22:2f:5f:4f:c3:58:
1b:4f:4a:be:9e:a2:29:ce:fb:b8:a8:66:90:90:f3:4c:06:9b:
ac:c7:3e:c3:7d:dd:cf:fd:3c:ee:ef:8d:16:82:5c:57:12:4b:
5a:16:57:f6:4d:13:92:0e:de:d1:0d:e4:84:c4:6d:4b:ea:77:
9d:0a:70:77:6b:c3:ee:27:a7:b5:a6:81:cc:01:39:0e:00:c7:
c9:40:82:ff:3b:58:99:90:be:96:49:49:09:92:12:6a:36:e4:
a9:b3:58:17:6f:66:3e:46:a7:c1:fe:b5:cf:4f:c1:93:ed:ea:
5b:b7:d7:b0:f9:b3:ea:df:46:65:3f:0f:ba:76:d8:25:e6:4c:
72:f9:2e:01:3d:07:0f:08:11:8e:9a:32:c1:63:89:0a:c4:1c:
91:6f:d7:98:51:e3:43:2b:ed:06:57:88:0d:56:8c:f3:e3:69:
e0:e5:07:12:76:4a:d6:4d:d4:31:e6:aa:d1:5d:09:7a:69:4c:
59:a4:ea:65:ee:bb:65:a1:e4:a3:a1:29:bc:8b:97:9f:11:79:
48:84:80:5d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICGs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDND
MjQ2ODExMUVBMUM1NEVGOEIzQ0NERUZBRTUxNkMzMDlBNkVDODAeFw0yNjAzMTgw
MTAxNDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQwRTg0NDYyOTBGOTdB
M0E2RDdDNDg4N0IzMTNGQ0QzQjFBRTA5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjmuUCOgf+sLd3F+76o+o7c3MnKZhyJLK9rpVItjxSjmz9gE7I
8qrUwglQ9kduRrqbv6bhon8Wc/xNu1D2SK2CIkQo/8CBUHHdJbajez0Ptlz8/4ZH
nhmG8OhiMUQzc0De8uQp6snAtYE+bVoD4C+r9IbX/ImVytu5un3puTwE8MQCrjjo
9FsijnaOre5LK101Tu/ReJSJGuSUHzHs+DE6Vj5ENVY/nW8XXpHvVczW/U2EVZEI
F0G2NbWGUIq2gz581NTi9Vtq01Mm8GyfWw0ab+bu19D9jkCCjAsWa5bvXRP2vYwa
UrWfZ4j/PtDg3nSnCs0fxNoNNJ0J6jVjLVIZAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUQOhEYpD5ejptfEiHsxP807GuCaMwHwYDVR0jBBgwFoAUA8JGgRHqHFTvizzN
765RbDCabsgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTA4
Mi9BOEpHZ1JIcUhGVHZpenpONzY1UmJEQ2Fic2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0E4SkdnUkhxSEZUdml6ek43NjVSYkRDYWJzZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwODIvQThKR2dSSHFIRlR2
aXp6Tjc2NVJiRENhYnNnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADSdyT8kGoltFAE9huKVOfQgkGklrhOY5S9wnOvk2ElIMd9L9VhyN32V7TQR
zO2MpyIvX0/DWBtPSr6eoinO+7ioZpCQ80wGm6zHPsN93c/9PO7vjRaCXFcSS1oW
V/ZNE5IO3tEN5ITEbUvqd50KcHdrw+4np7WmgcwBOQ4Ax8lAgv87WJmQvpZJSQmS
Emo25KmzWBdvZj5Gp8H+tc9PwZPt6lu317D5s+rfRmU/D7p22CXmTHL5LgE9Bw8I
EY6aMsFjiQrEHJFv15hR40Mr7QZXiA1WjPPjaeDlBxJ2StZN1DHmqtFdCXppTFmk
6mXuu2Wh5KOhKbyLl58ReUiEgF0=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:15:40 2026 by rpki-client