Manifest

$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File:                     YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier:          jHmXd1YcAf30P5Wxr2LeM+yKacAlfEcZ9X51n/sCiQs=
Subject key identifier:   39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer:       /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial:       1AEC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number:          1AE0
Signing time:             Tue 17 Mar 2026 23:59:20 +0000
Manifest this update:     Tue 17 Mar 2026 23:59:20 +0000
Manifest next update:     Wed 18 Mar 2026 05:59:20 +0000
Files and hashes:         1: 97-7C3dDSirb66rQWLzjN8EVFeQ.roa (hash: aSwLkN0n0aTA4qY8RZgyH3sQrimuRFxnnD7txCNU8sw=)
                          2: LYlIwabI9y1aUm1iS6_deSSPdQ4.roa (hash: sMZ2ffWy01w7sJigLlIkp0LMbKutBmFWKnBXY1e2GyY=)
                          3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: M61gk6NYdTTOTasXpoVDXLk7ZuC0qSPYlbpdXvR2oGQ=)
                          4: u6Ak-r7u8luLfAvXH-20LWPkKnc.roa (hash: TxLPFcmNBaJHMcJxiM8fkAKJG66sXfl9PccECAWbdoI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6892 (0x1aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
        Validity
            Not Before: Mar 17 23:59:20 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
                    5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
                    f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
                    6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
                    14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
                    ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
                    3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
                    68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
                    3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
                    a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
                    23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
                    76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
                    5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
                    8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
                    b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
                    48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
                    7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
            X509v3 Authority Key Identifier:
                keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:08:ca:1a:d3:bd:e7:32:dd:23:ec:89:5d:5c:30:48:ac:
         ea:5d:69:9a:53:dc:3f:b9:40:db:d1:af:8b:3c:fe:27:a5:89:
         8b:1b:b0:84:96:b5:39:f6:cf:33:0f:95:b6:8d:97:a7:54:a4:
         f9:d9:7d:5e:cd:19:1f:ee:21:47:53:10:38:2d:9b:51:71:8e:
         f6:23:b5:c2:50:d3:46:da:5d:f6:21:d7:c2:07:6d:6f:d6:d0:
         3f:a6:3b:08:16:59:a6:81:59:54:38:d4:3a:3f:5a:f4:89:91:
         17:5c:f2:09:bb:87:f5:f4:c6:35:15:e0:e0:50:37:e7:f2:aa:
         ac:ef:ff:9b:bc:d8:3b:52:26:af:bb:3e:13:fe:bf:76:8e:04:
         f4:11:b3:5c:36:2b:69:df:76:a5:e5:06:16:b3:7b:2a:f4:19:
         fc:4d:95:be:21:ee:37:98:6b:55:10:8b:c1:3c:e2:20:2c:f6:
         9b:9a:ac:d4:9b:81:c6:1b:4f:e2:3f:6e:54:38:21:b1:cc:98:
         05:c0:17:99:cb:21:88:c8:b2:0f:8e:b0:2c:9c:e5:e1:c5:fe:
         b0:13:ac:79:4c:e4:67:9a:49:31:e9:5a:d7:39:6a:1c:4e:9a:
         83:61:df:d5:01:d3:2e:b6:41:7d:93:9f:35:ca:e5:1e:98:a1:
         44:94:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----