Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
File: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft (raw, json)
Hash identifier: 83+7xly98UHLGqmHr/779VdBVIpVP6Bu3YDCSOsmNMU=
Subject key identifier: 21:81:9E:1E:53:59:62:B1:63:A6:CC:10:63:F1:91:C7:F6:C5:BE:0F
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 0624
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
Manifest number: 0607
Signing time: Wed 18 Mar 2026 00:59:03 +0000
Manifest this update: Wed 18 Mar 2026 00:59:03 +0000
Manifest next update: Wed 18 Mar 2026 06:59:03 +0000
Files and hashes: 1: --5p3HNP_npcM9WwQGiJmHx5u0U.roa (hash: Rl9Es6qphuLb/+2nbxNbdm0tzkYUplAdlWLJexuDZlE=)
2: 22EffpS7GnnifhXrI4tAbrDDc-g.roa (hash: 4E/yKu43inQAr1L9cp/ACPCiEVmbOTFL687c79yRLyA=)
3: 5phZxr5Uhb3NSuw3CQS7G12n8Ms.roa (hash: TiBiBqmX2u+8+lnUT723Nkj/vXcdxQpMq2cHfeG1nv8=)
4: 8GxBtEjdWLiRUsEQxe8VKmjAxXM.roa (hash: 0tZPdUKxLUPOpljwCfdgtZKJbSyJ2wrfzcl03BIcSWI=)
5: PrzOu3HLgb_fDfFfMV2C3u7dgAY.roa (hash: nQaZQEHGizfw2JArT6RRleWiUXqFqGuwPW1JdBlvgps=)
6: hTYglcTaggz46zo2uGojdNR6CiA.roa (hash: oxjLkgxJ/ScFrDTY2HsVJ3eQj12roDmJFBgsJUYTwQE=)
7: p8dPCz1-DM8oZAbLKQI9W1S52aI.roa (hash: YlDx1ECxWXJtCx373KSdly7XOBerHvXGr5nQka2FgVk=)
8: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl (hash: Va7rWmMt1KugC92nXPGQ8PfOJ9qivG0rblWpDvarDh8=)
9: yGBgQ_Is6mtpS4o_kSNsUFhygtE.roa (hash: R7h8Ue7gUr/+0YK1fEjPAlu/UJh1hg66VPEfvazJVHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: Mar 18 00:59:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=21819E1E535962B163A6CC1063F191C7F6C5BE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:55:37:25:4e:0d:99:c8:9f:f1:4c:70:36:
38:4c:9b:db:3c:e2:67:20:93:f7:68:8a:51:f2:86:
5f:49:1e:6b:cb:3a:a7:5e:fb:da:ac:fe:da:a4:6a:
79:79:90:f0:36:73:2b:f2:98:b2:43:46:28:ae:67:
b2:17:6a:8e:81:9e:27:95:97:e2:a5:9e:83:1d:0c:
e9:24:52:c4:ea:bb:32:f8:5f:8c:13:74:c4:63:05:
9f:4e:15:96:cb:c8:e0:42:69:7e:b1:e7:9a:ed:11:
ff:85:8e:96:c4:09:99:10:70:b0:29:71:51:71:30:
35:79:ce:c1:d8:7e:4f:a2:fa:02:b9:99:e4:a5:87:
21:e7:f4:7a:ab:c0:f2:07:02:06:20:8c:18:1b:4d:
e2:4c:fc:16:6b:ae:33:96:5d:1f:6e:dd:1d:5a:fa:
2d:52:44:e8:81:8b:5f:41:01:c0:21:fc:e5:d8:8f:
d9:53:81:3b:e2:2c:77:05:43:41:7c:ba:94:0b:1c:
67:f1:3c:b4:f7:06:20:0f:e8:9a:5e:92:b9:fc:47:
f4:4b:5f:ae:08:dd:8c:b4:e9:1e:e6:de:ce:d1:a5:
b0:e4:3c:84:5a:b1:3b:cc:c1:0c:98:db:a0:85:c8:
66:56:60:fa:dc:fe:64:46:5f:e0:f8:45:cf:e9:55:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:9E:1E:53:59:62:B1:63:A6:CC:10:63:F1:91:C7:F6:C5:BE:0F
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c4:f0:b7:d2:11:60:3e:4f:3b:db:c1:6c:95:5f:7f:cd:29:
6a:f9:cc:59:20:45:42:fb:a5:dc:ed:e1:3e:c8:0e:a2:8d:10:
8e:22:0a:38:2f:d0:22:f8:f3:58:b5:21:b4:6f:77:f1:11:95:
ba:fc:8e:04:c1:f2:32:f7:77:60:45:79:51:b0:86:e0:08:26:
c0:22:b2:fb:0b:7d:0b:a8:63:ca:31:d3:6f:ff:bf:4c:1d:6c:
c8:c7:48:54:fa:3c:49:36:b4:f5:6f:9d:f9:1a:c8:77:9f:c7:
f0:5e:24:8f:ab:ad:ff:5f:a5:0d:42:68:99:a8:9a:63:9f:45:
a1:5d:68:da:87:87:89:30:85:47:46:83:fd:53:91:4c:a4:35:
b8:82:76:37:b7:66:85:11:1b:c6:f7:60:f0:0e:00:5f:71:48:
96:f4:39:6e:d1:9a:15:80:bd:a5:97:8b:0d:42:f8:55:87:d5:
2e:3b:1a:2c:7c:d3:42:5d:07:4a:81:53:85:ec:bf:f0:27:06:
cb:c9:94:35:7d:0d:84:4e:1d:5a:0c:71:21:c2:6e:2c:55:d2:
e2:3d:08:9b:26:73:f7:da:a6:97:46:ec:fb:ec:f5:44:3d:69:
e0:37:12:bc:d7:0c:93:4f:5d:90:0e:26:67:0a:8d:b2:80:82:
a5:15:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:30:08 2026 by rpki-client