Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
File: 5QLeLGCGpmKEuAzbe1rAwSzD88I.mft (raw, json)
Hash identifier: 5sGOEJbLFEAxN+lDHMIMajuJjp+jkEL8BszJpvwX3XY=
Subject key identifier: A4:AF:19:62:66:06:60:15:FB:92:30:A5:EC:33:F6:89:49:09:A1:AB
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 0BC0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
Manifest number: 0BAF
Signing time: Wed 18 Mar 2026 01:28:53 +0000
Manifest this update: Wed 18 Mar 2026 01:28:53 +0000
Manifest next update: Wed 18 Mar 2026 07:28:53 +0000
Files and hashes: 1: 0miT1qb3sPNiM6EZTvVrHTe5sXk.roa (hash: yyQaDYM0U26nrGrY9My6oAjBxf+bycNmeZJpp10aiqE=)
2: 5QLeLGCGpmKEuAzbe1rAwSzD88I.crl (hash: CjdJGhV/wBJRExx5IFWflemDMd3vqebSx77/8tJVf1w=)
3: LO8HMVPffvruOjzIbuw1ImZtHR0.roa (hash: 8un8V406hwQMw02wGz5lRlh72V8cmTt9t+wyq3X9cBc=)
4: O3gZx3V23G7fmgkzzdZ3ZPqfJxs.roa (hash: 7qtX9vNeQlnn5LJAJiPLqpLwF+FjgCLvtipGIf+F088=)
5: OtIpZlJVrqBZv4DYm3n7oxicAeY.roa (hash: u0jmtvmR60BP6iQLbAOxNAJQM+4qmDDOk9QC2DnMX5U=)
6: V6CSeHmY5PoyF2DAnLSvowP5W7g.roa (hash: ixxjdmX9NayZGHWB7qwYCVGnmCyIAj0QVVH+7LNN9uM=)
7: hLY4RJ8LzPh0Lkk02qjHRzc5GfQ.roa (hash: Q+KpZ+R+AE/KrTcEOszITKq1nc6PTLOmSwHuQcEJWb8=)
8: wyyqcUgR0LW5P_sNpH7jNfIyFZ4.roa (hash: OAz3ozWKHsuECXjioaMko7tiXdvS4VoHusuQi5R3sFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: Mar 18 01:28:53 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=A4AF196266066015FB9230A5EC33F6894909A1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:f4:0a:f9:27:63:42:b2:9b:15:2d:b5:23:
8d:58:04:ca:e6:08:81:7d:99:da:4b:5f:63:da:7b:
f4:8d:d1:69:51:64:1a:ca:86:10:38:b2:1a:f0:b2:
76:75:9d:5f:36:3a:9e:6e:c0:fb:97:40:ce:86:c2:
6d:a3:06:1e:fa:67:13:a6:de:66:30:f3:d9:d1:27:
28:ec:09:d1:ef:b7:ba:0b:d7:6d:f7:3f:fc:2f:96:
b9:be:53:84:03:6e:0c:69:32:04:1a:3a:d8:75:89:
d2:d2:dd:8f:30:18:3e:98:32:84:fa:8d:35:92:e0:
fe:b6:f0:ef:2c:2c:9f:b2:60:96:d7:48:0d:d4:d0:
9b:36:6b:bc:4c:51:ec:70:2d:ea:1e:f4:66:74:0d:
43:00:2b:70:a8:96:a0:c0:5b:40:92:f1:66:29:13:
a2:3a:11:db:3a:93:5c:3e:12:14:db:41:cf:66:68:
e2:e0:85:17:84:86:63:42:1b:12:68:a1:2b:8a:f1:
d2:9d:42:94:4a:5e:70:82:6d:11:07:b5:87:fd:c5:
be:c4:a4:9a:dd:39:39:e3:91:52:9b:d1:36:dd:98:
64:8a:32:91:96:cc:00:75:73:e7:db:0c:1f:e1:f7:
df:4e:61:45:47:d8:bb:21:05:63:d7:23:d9:a2:50:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:19:62:66:06:60:15:FB:92:30:A5:EC:33:F6:89:49:09:A1:AB
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bc:8c:1b:d9:52:c7:0f:f4:e4:a0:00:74:76:7e:9f:1f:d7:
ff:f7:34:28:20:93:2e:4f:7d:67:6b:27:b1:a9:6e:41:6c:e7:
66:87:81:d8:c8:3d:b5:cf:43:dc:b3:09:e7:88:78:49:28:8a:
91:57:86:b2:c1:0d:dc:60:bf:fc:61:b5:b3:ef:ca:33:69:63:
67:3d:68:64:7b:74:37:bc:d8:bf:3b:0c:e2:fe:c0:ea:a3:68:
d2:71:f6:36:cc:86:43:4d:c0:f0:0f:ab:b0:6f:85:e7:28:aa:
e6:ef:05:40:bf:62:da:a6:16:27:4b:b9:2a:3b:e3:d5:b3:8f:
14:17:40:8b:be:46:33:60:db:b7:b5:cc:fa:79:12:d3:db:e7:
2f:4d:c9:df:f3:d8:2d:97:32:6a:24:c5:0d:fb:75:68:3d:2c:
ac:a2:10:c5:17:ad:82:10:43:e7:64:04:18:2c:9e:55:98:86:
3e:33:77:57:80:3f:db:85:e2:16:f5:1d:f3:65:25:ca:ad:a7:
05:8c:87:dc:7c:f1:96:7c:8c:f3:c2:51:84:2a:e7:4c:f6:a1:
b4:f9:82:40:01:1e:65:06:cf:9a:81:7b:53:b2:4a:35:96:63:
38:3a:94:e6:e6:19:be:2f:df:53:04:6a:c8:ab:59:f6:dc:d8:
f9:8a:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:21:06 2026 by rpki-client