Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json)
Hash identifier: x77vn7341wsVuSaU0qXmOc2n7OEYiJh/opER+zGKqOA=
Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985
Certificate serial: 0E7E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
Manifest number: 0E6A
Signing time: Tue 17 Mar 2026 23:59:36 +0000
Manifest this update: Tue 17 Mar 2026 23:59:36 +0000
Manifest next update: Wed 18 Mar 2026 05:59:36 +0000
Files and hashes: 1: 1cfEcZ4-vFAqK8rRk0HKRl5oSRk.roa (hash: jcHU4SMG/LFs1PMjAXJH6LggvyNmeTBJ9u2coCQ22os=)
2: 9auDNIZCbjl_dR6fOh7bMwHRIxI.roa (hash: 48huSmnJ70AKHAUL57h7oRKzP1wxQyh5B4+QfWDCA5g=)
3: ILIlPnvphY6ZF9cBaiTqY1h4mRs.roa (hash: x0zOl7jLNATrELF2DWvZCwCJAQ4mYnsB8j1kcGUpShQ=)
4: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: AB7D62B1emkbXkglGqV/kxkoWEPG8VruANWyWLOTf58=)
5: iFNWz1s03opy6tw4o0dL2HLh85w.roa (hash: rJb0Cf8r/TMQB2flbiJonEOGNUQgEHZ2qMHMgoJNvVo=)
6: mP1Ce9x6N0aeyRbidd3setyV2Zo.roa (hash: 5RQtUB4f4JwROI8dcp9uGQmxbhXc7p6Y7M35xZKtB84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3710 (0xe7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985
Validity
Not Before: Mar 17 23:59:36 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39:
6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29:
57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f:
b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc:
69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4:
a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90:
c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de:
7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72:
bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7:
32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3:
88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f:
13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad:
74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94:
5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c:
91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a:
00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15:
a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
X509v3 Authority Key Identifier:
keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:eb:68:1a:3d:95:6c:cc:b3:3b:1d:9b:2e:4f:77:72:eb:40:
b4:05:4a:2d:30:d7:12:ef:c3:75:3b:bb:b5:15:5d:47:0d:6d:
0f:77:d4:56:96:dc:28:39:0f:f8:f3:6d:88:4d:d5:d7:45:da:
51:d2:28:d1:60:e5:99:8a:ea:0d:03:9f:db:c4:c3:4a:57:cf:
b7:bd:21:6b:92:07:1a:cf:eb:0e:de:f1:83:b4:0c:a8:c8:f6:
6f:7b:df:d4:b6:f2:6f:dd:10:86:96:13:a8:bb:ec:15:98:44:
b7:7b:fd:9b:1f:29:d9:03:05:bb:40:00:03:07:64:7c:0f:4f:
91:a6:cb:18:89:5b:de:94:aa:95:92:f6:18:a1:ae:5f:11:a8:
d3:7f:24:67:c4:49:02:b3:ee:97:d3:3c:86:2d:cd:73:71:3d:
37:fb:98:55:07:ff:45:69:58:c5:e1:cb:f4:ec:30:9a:9e:35:
10:ac:7b:55:35:cf:20:04:37:81:32:63:df:1a:9a:95:a8:d4:
fb:05:3c:f0:0a:da:08:60:b8:6e:e9:46:25:ce:5d:94:e8:b2:
5e:79:0f:f9:cc:5a:2c:89:de:57:41:3d:eb:6e:ab:2f:d2:c7:
60:b5:72:64:dd:85:7f:e1:2f:08:40:68:df:59:37:b6:d9:14:
5d:17:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:13:09 2026 by rpki-client