Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
File: KCAlirZf9h_V1m2Vlk9I76NdzIY.mft (raw, json)
Hash identifier: mKJocA67jbuwS9yjgVoySAes0KptT3V/nzsXI9KCd9o=
Subject key identifier: F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 19DB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
Manifest number: 19D3
Signing time: Wed 18 Mar 2026 01:00:56 +0000
Manifest this update: Wed 18 Mar 2026 01:00:56 +0000
Manifest next update: Wed 18 Mar 2026 07:00:56 +0000
Files and hashes: 1: KCAlirZf9h_V1m2Vlk9I76NdzIY.crl (hash: Yt6j5k7s/o37IpxMYep72yQmNdciHxszuci8gsk9Fc0=)
2: NLKKhuGRjjycZyTf-_i8mAuCL5Q.roa (hash: cLFT6F50dW3SQc3+2AFxXkKj0rBzPHjD9HJqJjyi4lU=)
3: aVzNCR3v7HiuGe2nwYVocA3nKD0.roa (hash: VQYg6X41I9K3bkkDLyRhaxL9qX1DdOXnA2NK8J733MU=)
4: tlp2HUUJoI724WS_Ode64_P3E_A.roa (hash: LmhfGm6SiRVSi+vo4yMPXWogFAx5P2LYQsHA7fjHmp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6619 (0x19db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Mar 18 01:00:56 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=F22C52B900B880022A9210A686FE1A8006C4DAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:01:ef:f8:9d:ec:b2:12:09:20:58:1f:f3:
bd:ff:df:54:3b:c9:ac:13:5f:ac:3e:9a:f0:59:2a:
74:83:21:ab:51:13:b2:13:63:81:d9:61:f8:5e:72:
60:1f:12:b1:10:b8:dc:7a:b2:56:21:d0:fb:d7:f2:
aa:49:63:be:c8:7f:19:56:97:04:da:4e:53:1c:16:
c3:31:42:cb:b6:b8:63:dc:61:e5:98:a1:85:70:f3:
67:09:3e:d7:5d:db:ba:22:5d:14:68:44:54:17:ce:
af:66:c2:4f:e8:75:a9:e8:cc:15:f5:4e:86:ae:4d:
bd:6c:c9:56:d8:e9:b3:55:b2:0b:eb:a7:5b:fb:a0:
b1:ff:b0:ab:0f:f4:d2:07:47:cb:2c:90:1f:0e:ef:
ef:7f:4a:20:a2:34:ae:d9:44:8f:d9:a7:52:23:ad:
22:31:a4:2d:eb:05:2e:7a:97:20:23:ab:b8:dc:74:
6e:b5:ef:14:54:01:f8:0d:d1:90:ef:1f:be:ed:99:
aa:81:f8:f5:48:90:4c:c3:2c:07:cd:df:be:58:06:
0f:72:e1:81:bf:f1:58:33:a0:10:5c:bc:6c:0d:34:
36:2e:f3:d8:1a:b3:bd:d0:1b:c2:fa:72:fd:13:9f:
ab:9b:01:90:e8:66:7d:12:2b:b9:80:20:93:cb:4f:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:d0:87:33:76:1e:a3:fa:35:73:a2:89:22:5c:cc:9f:4e:b0:
28:34:29:7b:a9:e8:12:48:cc:34:33:44:88:79:65:74:14:96:
36:20:8f:cb:7a:2f:c5:f9:69:cf:b6:ec:74:75:d2:ae:e6:ee:
14:22:af:97:02:6e:86:e1:63:5b:dc:6b:58:43:b0:48:f4:12:
9f:ff:4f:06:9a:db:a0:9e:94:1a:c6:1f:08:f7:98:30:42:59:
1a:13:b0:5d:9b:a1:42:f2:01:2b:81:fc:55:0b:d1:40:61:ad:
9d:6d:8c:63:e7:5d:39:1b:b3:3b:b6:ce:e5:81:4a:67:31:22:
95:65:85:b0:3b:09:3f:97:83:70:8a:6f:94:07:b5:d7:3f:de:
6b:db:1a:a6:a5:05:5a:19:6e:9e:f3:61:12:9a:e3:fc:42:68:
5f:07:58:8e:84:b2:58:74:a5:1a:1c:cf:e4:c4:8a:b4:32:4d:
ee:28:76:ac:5c:65:74:36:f3:e3:c6:4e:9d:c1:93:02:2e:3e:
52:b2:69:a2:8f:a5:06:11:36:84:4b:bd:3e:9a:55:17:d4:7d:
dc:26:6c:e2:c4:46:8c:ef:f0:57:a7:0e:a9:52:2c:e0:c7:96:
28:66:d0:3b:54:5c:7d:a0:45:46:51:5a:92:46:a6:d7:94:4f:
66:59:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:31:18 2026 by rpki-client