Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier: ZUDGtqD3UBegewD1dk/Y0STWXQV0baONQX8+UF85v+g=
Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 1AED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number: 1AE1
Signing time: Wed 18 Mar 2026 04:59:22 +0000
Manifest this update: Wed 18 Mar 2026 04:59:22 +0000
Manifest next update: Wed 18 Mar 2026 10:59:22 +0000
Files and hashes: 1: 97-7C3dDSirb66rQWLzjN8EVFeQ.roa (hash: aSwLkN0n0aTA4qY8RZgyH3sQrimuRFxnnD7txCNU8sw=)
2: LYlIwabI9y1aUm1iS6_deSSPdQ4.roa (hash: sMZ2ffWy01w7sJigLlIkp0LMbKutBmFWKnBXY1e2GyY=)
3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: RRBYIOa0tZPN6XPAMv8OmXvsco0+wI8f++Na2C2N8mg=)
4: u6Ak-r7u8luLfAvXH-20LWPkKnc.roa (hash: TxLPFcmNBaJHMcJxiM8fkAKJG66sXfl9PccECAWbdoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6893 (0x1aed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: Mar 18 04:59:22 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:2e:f8:56:12:8c:8c:a1:e0:aa:96:fd:eb:d7:8d:3c:82:
54:b7:ba:77:44:ea:5d:8a:ee:9c:b2:8b:b2:8a:0d:ac:6c:3f:
f7:ab:fe:d5:86:41:29:58:94:75:d0:4c:06:7c:b0:6c:c0:a7:
ae:6b:cd:ac:19:8d:ff:fe:43:a4:74:2b:61:9a:3d:36:58:18:
95:fc:95:ae:e1:4f:77:ca:a5:1d:b9:9a:c1:dd:fd:4e:f8:01:
6c:5b:0d:db:02:81:28:14:2b:64:cc:8b:ef:71:2c:b3:a6:03:
13:f5:54:ec:f4:b0:a0:c1:e3:8e:cb:84:ad:28:94:f7:ef:4b:
28:6f:a3:11:20:ae:ba:c9:eb:c8:9e:0d:ef:9b:07:dc:dc:37:
39:69:e1:5e:f5:c8:69:8e:4b:ab:62:e0:60:68:83:79:f1:c2:
5a:0e:7f:07:5d:62:b5:f0:8d:b1:ba:34:4e:de:c1:77:77:60:
89:7a:df:19:10:91:77:fc:dc:63:50:2b:69:04:69:00:38:ca:
7f:50:4a:8f:70:ba:11:72:de:d2:c8:60:46:3d:ed:f4:23:ab:
8b:36:b4:24:b4:6d:18:e7:dd:72:78:dd:50:19:12:c9:d1:83:
a2:5e:df:df:0a:77:68:cb:66:4e:29:74:5b:33:6d:17:61:f3:
73:59:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:36:53 2026 by rpki-client