Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
File:                     GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft (raw, json)
Hash identifier:          Cj/ZZb7ihlP4/kIMuIsfG5RrtYTv/Ui646GQkM8hAfc=
Subject key identifier:   7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD
Authority key identifier: 1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43
Certificate issuer:       /CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43
Certificate serial:       019C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
Manifest number:          019C
Signing time:             Wed 18 Mar 2026 01:01:43 +0000
Manifest this update:     Wed 18 Mar 2026 01:01:42 +0000
Manifest next update:     Wed 18 Mar 2026 07:01:42 +0000
Files and hashes:         1: GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl (hash: byHt2y5UPPO1e6mQS2a71vfthCbD3HFxlf2i8A+r1KE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43
        Validity
            Not Before: Mar 18 01:01:42 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=7ECF9B376B5F206D2B200CE21F49F5E958A94CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:f7:2e:87:5b:a8:41:83:5c:7e:9c:fe:06:
                    d5:47:58:1e:ae:84:fd:a0:74:92:88:60:ef:e0:6f:
                    4a:8e:62:74:4e:f5:32:a9:af:a1:a1:0e:1e:5a:f3:
                    00:35:2c:6e:3e:63:65:b6:6f:ae:5b:f3:46:dc:c0:
                    ea:44:05:1c:23:a6:d1:45:d4:37:bd:d1:8c:16:9e:
                    b4:13:78:26:53:8d:8e:59:14:94:03:28:c9:0c:47:
                    d2:cd:8f:d4:a9:05:57:00:7a:1f:54:da:e4:83:d7:
                    bf:97:6e:cf:92:fd:c8:4c:56:22:aa:f8:e4:a5:49:
                    d7:f2:22:5e:ba:0e:2f:5d:42:4f:4e:27:3a:3f:6e:
                    87:e6:0c:8b:ac:c2:79:c6:fa:57:8a:a1:cb:fe:5a:
                    88:a0:2e:fd:6c:7f:bd:9a:e4:ff:84:91:76:96:46:
                    66:9c:6c:57:49:cd:c5:3d:b3:ea:75:8d:a5:88:d9:
                    2e:6c:c6:fd:e5:09:2e:0c:ff:f7:3a:4b:b5:5b:b9:
                    c5:fe:bd:8b:4c:c8:10:38:bf:d7:a9:ad:dd:b4:61:
                    63:92:b7:fa:c0:35:2d:73:fd:ab:69:c8:30:ad:dd:
                    f4:a6:b9:0e:e2:9b:57:be:e4:e5:18:25:70:ea:79:
                    c9:4c:85:e7:ad:2f:4d:a1:9d:cd:70:5c:a4:7e:3f:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD
            X509v3 Authority Key Identifier:
                keyid:1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:21:5e:b0:4f:db:1b:86:fb:71:d2:5a:d4:2f:5a:c8:05:
         11:65:00:39:2f:a7:3d:b3:98:3d:8d:d4:4d:72:75:cd:2f:c6:
         37:8b:32:10:94:98:28:bc:0b:d4:2b:ef:15:58:c5:b9:a0:e0:
         35:bd:9a:ea:d1:de:3c:ff:1b:dc:ba:df:7d:12:ac:aa:19:c4:
         e5:db:17:44:97:24:d4:11:1b:bb:7f:42:0e:df:86:30:a5:3c:
         50:56:be:f9:f3:46:29:3d:d9:64:3b:dd:83:45:ad:1a:28:e6:
         9b:7a:aa:39:c2:7b:a7:dc:c3:54:88:17:65:1c:cd:9c:87:c4:
         6e:d9:80:0a:cd:e2:4e:40:21:8d:85:95:4b:ad:8f:39:b4:28:
         3e:1f:18:af:ef:98:8a:77:90:0d:9d:b0:9f:f3:15:3c:02:af:
         12:86:fb:f7:dc:d0:7c:7a:60:78:14:eb:06:14:9a:95:25:3e:
         5e:48:74:74:f5:5c:8f:17:39:22:31:a2:2f:6e:e0:f5:23:70:
         48:04:b9:9f:86:c6:55:ea:e0:80:d4:7a:e8:09:9c:fd:11:47:
         93:44:2f:3e:fc:39:27:30:0d:fc:b7:65:3b:a5:d3:ad:4d:d1:
         e1:1e:78:44:cc:e9:85:1a:90:45:0e:79:4e:80:a6:82:92:e4:
         37:3d:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:21:39 2026 by rpki-client