Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File:                     7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier:          lYjslNyWCZA8UtLdTz067lWT736l/uEwHGQQafBB/qs=
Subject key identifier:   9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer:       /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial:       084A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number:          0840
Signing time:             Wed 18 Mar 2026 00:59:54 +0000
Manifest this update:     Wed 18 Mar 2026 00:59:54 +0000
Manifest next update:     Wed 18 Mar 2026 06:59:54 +0000
Files and hashes:         1: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: OURasS3EY2pIVPO+Xm+rufL1L5kl+VGG/MI2hL4XIaQ=)
                          2: SC6m8P0q6p7ntOCpRRKCLD07IV4.roa (hash: F3LkbRuTsF/ZxSWkX81y3jRWbGla7q1/rRTJ2pXLLBQ=)
                          3: Udu4Y2VVSfSvAsDnVgr4ywyw784.roa (hash: b+votEcUwTvuXUiyb8agRXfAYHbNT531+XZyEUMsCjo=)
                          4: esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa (hash: uyPmbNzEpeAABBZYgbGkveGl7ynOz33DLToGYNoP7hg=)
                          5: fotDNxN_sQREMyU_nWg8lpAAvIY.roa (hash: jD3/6TF1DTlEAMRgojNykbybNyv7ZOor/AQZnLJhVXY=)
                          6: nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa (hash: 8DlphKnOC+OQmVIxd6QvTWzWu9l+65jBnGINNbqNneA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
        Validity
            Not Before: Mar 18 00:59:54 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
                    85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
                    14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
                    9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
                    ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
                    d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
                    d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
                    66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
                    26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
                    d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
                    5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
                    0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
                    c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
                    99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
                    e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
                    13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
                    06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
            X509v3 Authority Key Identifier:
                keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e1:12:bf:a3:cb:31:af:7f:ce:20:5b:62:8d:c2:b6:26:b0:
         43:ec:f3:d7:d1:d2:9e:1d:68:47:cc:0a:9b:3e:29:0d:54:c4:
         ce:2b:a2:9e:a7:42:6f:2c:54:e2:ff:ee:1e:3f:e2:aa:ea:be:
         db:cb:16:94:20:dc:77:9a:8b:56:4f:12:d0:c3:e0:35:d7:8a:
         8b:e2:9e:a8:b6:f0:08:95:15:34:48:ef:c6:76:5a:4c:98:0f:
         f1:8e:47:08:fa:44:35:d8:b8:8f:ee:fc:fd:93:4f:c7:ec:3b:
         cd:89:b6:68:5a:1b:08:8d:1b:ae:fb:99:b8:44:3b:db:18:de:
         6c:70:11:bc:ac:b8:a3:5a:01:43:2e:bd:1f:1c:76:76:c8:77:
         88:cc:94:86:ae:5e:db:9b:dc:01:f8:53:f7:78:ef:aa:ce:fb:
         e5:8d:37:80:33:3f:3e:67:cc:87:3a:c8:c6:d1:3f:7a:03:5e:
         4b:63:90:bb:9d:fe:09:ca:8d:90:c6:32:0d:61:34:4d:c8:2c:
         af:28:a4:67:f6:e4:88:a3:49:10:f8:7d:29:e1:c8:97:a3:6c:
         0c:99:5d:fe:eb:10:db:91:09:c8:09:78:4b:88:85:ef:5d:50:
         cc:15:7d:a3:c8:41:ce:04:12:7d:23:ad:18:08:02:28:c7:76:
         b3:7d:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:29:11 2026 by rpki-client