Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
File: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft (raw, json)
Hash identifier: rBSy/jJmg8oGMXVEtu1jztB8ZhDkgnCxCCc9UthdDig=
Subject key identifier: 95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0
Authority key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
Certificate issuer: /CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Certificate serial: 25A3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
Manifest number: 259C
Signing time: Wed 18 Mar 2026 02:58:50 +0000
Manifest this update: Wed 18 Mar 2026 02:58:50 +0000
Manifest next update: Wed 18 Mar 2026 08:58:50 +0000
Files and hashes: 1: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl (hash: uK9X86UPWILXv84b6i29B0FXtlvXMOukX2Nuuw82HyM=)
2: RCbHnrCCg725J7bG--pX2X5ZrnU.roa (hash: cudInYIi8qbG8xgW0WIGQuE7ptgpnghhjyFMl40TDyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9635 (0x25a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Validity
Not Before: Mar 18 02:58:50 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=9504C67257F7D1E8BDCACE86676AE26ED01CE8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:c2:38:5d:ef:6d:62:88:61:35:41:9f:07:
3c:dd:f7:29:98:e8:22:b1:85:65:c7:87:ef:98:d6:
59:a4:a2:d1:21:11:87:29:f4:f8:94:fe:f5:63:c9:
ba:43:50:68:2d:ea:38:3d:15:9d:a2:52:09:7d:50:
a2:d4:89:9a:f5:42:a9:d0:6d:7a:3d:eb:89:cb:b9:
27:4e:c8:3e:2b:31:d3:e0:d8:94:68:29:ec:45:e9:
e3:26:33:6b:4b:14:c2:4e:81:27:e4:60:ea:24:23:
bb:40:cc:6d:b5:fa:cd:db:53:06:64:ae:92:40:04:
6f:68:c3:58:f5:be:50:a4:af:63:e7:97:ea:60:34:
10:e3:36:45:10:98:a2:d0:08:6c:d5:e7:1c:2d:b3:
77:d0:40:6e:e8:91:2a:c4:f8:71:ae:21:f4:39:25:
2a:91:f2:18:31:7c:04:cf:5a:19:09:50:6d:50:22:
9b:9d:d5:93:01:74:a3:51:c8:90:00:2d:87:9f:0c:
66:34:c8:33:bf:6c:1f:a6:fd:4e:fb:29:9c:7c:26:
9b:80:71:75:05:a8:ea:90:ce:fb:32:37:f2:16:34:
b0:aa:db:2a:a7:a9:ab:f5:6c:a4:10:4f:80:45:1b:
64:e3:8b:78:18:0d:03:ba:58:e2:cc:be:b7:c6:42:
e1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0
X509v3 Authority Key Identifier:
keyid:E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:19:97:9b:50:f8:73:e1:99:c3:83:f0:fd:b1:3d:01:34:9c:
54:61:98:7e:a0:a2:ae:cf:86:72:5f:d7:35:6e:0e:52:08:89:
57:13:c2:e5:fa:b3:b5:5c:47:89:41:61:4c:63:09:1d:33:35:
23:4f:de:eb:20:66:e1:47:dc:ea:66:1b:16:e4:1c:bf:bc:e0:
14:de:d9:d5:99:73:71:a4:39:38:88:06:00:bd:69:56:72:26:
ce:d8:0a:13:f5:fe:cf:d0:e0:65:f5:89:3b:d2:7f:bf:af:48:
4d:5a:55:a8:14:6c:75:9c:2b:81:58:d0:2d:6a:1e:62:ac:a5:
50:76:47:a5:77:4a:cc:d6:86:ab:1d:0d:a2:e1:48:e5:8d:cf:
ba:2e:53:93:90:2d:5c:ca:98:7f:13:de:6e:df:24:a5:63:a6:
18:0a:76:a9:e4:6f:b3:6e:f0:60:8e:89:b8:4c:44:6d:75:49:
4c:46:20:89:75:58:63:ec:d1:38:85:0b:67:aa:34:26:18:f7:
b6:ba:ef:1f:a7:07:aa:65:8c:15:a8:25:07:f1:d8:bf:ee:47:
f1:3d:c3:43:41:ab:4a:36:38:9e:ed:9e:81:e4:46:c6:de:05:
af:ec:69:42:b1:92:02:a4:ce:3e:44:81:c5:ba:66:e7:f5:9e:
4b:8f:fe:e4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICJaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTgy
Mjg3QkI1NkZBQzhFNjc1M0FCREUzNkIzQjZBOTM5Q0I1OUE1MzAeFw0yNjAzMTgw
MjU4NTBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk1MDRDNjcyNTdGN0Qx
RThCRENBQ0U4NjY3NkFFMjZFRDAxQ0U4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWo8I4Xe9tYohhNUGfBzzd9ymY6CKxhWXHh++Y1lmkotEhEYcp
9PiU/vVjybpDUGgt6jg9FZ2iUgl9UKLUiZr1QqnQbXo964nLuSdOyD4rMdPg2JRo
KexF6eMmM2tLFMJOgSfkYOokI7tAzG21+s3bUwZkrpJABG9ow1j1vlCkr2Pnl+pg
NBDjNkUQmKLQCGzV5xwts3fQQG7okSrE+HGuIfQ5JSqR8hgxfATPWhkJUG1QIpud
1ZMBdKNRyJAALYefDGY0yDO/bB+m/U77KZx8JpuAcXUFqOqQzvsyN/IWNLCq2yqn
qav1bKQQT4BFG2Tji3gYDQO6WOLMvrfGQuF1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUlQTGclf30ei9ys6GZ2ribtAc6NAwHwYDVR0jBBgwFoAU6CKHu1b6yOZ1Or3j
aztqk5y1mlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjI5
MS82Q0tIdTFiNnlPWjFPcjNqYXp0cWs1eTFtbE0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzZDS0h1MWI2eU9aMU9yM2phenRxazV5MW1sTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyOTEvNkNLSHUxYjZ5T1ox
T3IzamF6dHFrNXkxbWxNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMMZl5tQ+HPhmcOD8P2xPQE0nFRhmH6goq7PhnJf1zVuDlIIiVcTwuX6s7Vc
R4lBYUxjCR0zNSNP3usgZuFH3OpmGxbkHL+84BTe2dWZc3GkOTiIBgC9aVZyJs7Y
ChP1/s/Q4GX1iTvSf7+vSE1aVagUbHWcK4FY0C1qHmKspVB2R6V3SszWhqsdDaLh
SOWNz7ouU5OQLVzKmH8T3m7fJKVjphgKdqnkb7Nu8GCOibhMRG11SUxGIIl1WGPs
0TiFC2eqNCYY97a67x+nB6pljBWoJQfx2L/uR/E9w0NBq0o2OJ7tnoHkRsbeBa/s
aUKxkgKkzj5EgcW6Zuf1nkuP/uQ=
-----END CERTIFICATE-----
Generated at Thu Apr 16 11:10:10 2026 by rpki-client