Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft
File: TAQw41GKWvUbwN9iVn4NFXylI8E.mft (raw, json)
Hash identifier: paLGD6pEdGnuF3ss6FA7y3LPtV9qaktUf+IvGXKzwSY=
Subject key identifier: 03:C5:5C:36:36:47:B2:D7:F6:51:A1:96:33:EF:E9:36:EE:B0:A1:BF
Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Certificate serial: 03AB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft
Manifest number: 039E
Signing time: Wed 18 Mar 2026 01:00:48 +0000
Manifest this update: Wed 18 Mar 2026 01:00:48 +0000
Manifest next update: Wed 18 Mar 2026 07:00:48 +0000
Files and hashes: 1: 3chrI5RdhjIBoTWIkcprsQK-7Yo.roa (hash: Z6c3X/e7f8O3PvItxRFteZOKzRAOLRNJsPpjkYKmHUs=)
2: QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa (hash: Uo1NXgmxduN8ZLxUAEiSzkhrWOTJAv90VkspB9KZxo0=)
3: QJumW8JVOTIBPSJm600tKrKrEFU.roa (hash: frjTXPXRplruxuvW/Y/CAhH4DknwM2tPMCNNSkv/bOY=)
4: TAQw41GKWvUbwN9iVn4NFXylI8E.crl (hash: PUH5k4oBQ0JWXkdiX6lsL/JnsbIt+bQ0ow7UiwzzwRM=)
5: YV-bcU71KiaRsGqggAmcQHSDYO0.roa (hash: OEsCMgj+PCyrMdRauHOXf98dueA82V9PBQVMmn2JjQ8=)
6: mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa (hash: ZrEAdpoVCNctVRbTxo9U8dnLeO6B+qrscOutZSSo1gU=)
7: ndp2cKpKYwn8dFgo2JYcOamWIEw.roa (hash: lMcyc7+N5/lOY7lK9mB4EJFp8B3fuByvIbeutE1lkd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Validity
Not Before: Mar 18 01:00:48 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=03C55C363647B2D7F651A19633EFE936EEB0A1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:2c:2e:36:ff:09:4e:87:01:78:9c:0f:74:
07:26:00:76:c1:e7:5e:ca:b3:cb:12:72:f3:ce:fa:
90:86:38:6f:59:5f:97:26:96:f9:bc:0a:ca:c0:26:
b5:49:46:ef:3b:e9:e1:62:22:a2:36:1c:50:e6:79:
fa:2e:e4:8b:81:8d:4c:a7:b9:83:5d:7f:2e:0f:95:
63:ab:3a:6c:2c:9f:07:18:e4:f5:16:9f:46:b5:80:
f3:62:84:98:86:5f:4d:f2:99:c6:92:b5:62:6c:3b:
89:0d:4f:47:65:b2:ac:16:ad:5d:d1:12:5f:f4:38:
1b:a4:66:03:81:85:23:9d:ae:4f:22:33:e7:37:90:
b0:99:b0:1f:1a:93:7f:21:a4:63:78:7f:d4:94:16:
4a:b6:23:97:21:22:fd:98:0e:66:01:bb:94:47:df:
fb:99:4a:9e:11:b8:b9:ba:44:6d:46:e5:9a:b4:ba:
9a:7e:9b:45:6d:26:79:4e:24:71:d0:ad:98:b5:ef:
30:ad:d5:fe:d0:3a:15:14:f1:f7:86:e9:72:a2:fb:
d4:27:f9:3e:0c:f7:a2:25:23:a1:bd:83:53:7b:5a:
6c:fb:5b:ce:fe:c7:9f:20:79:1c:84:b6:72:47:61:
d9:e3:b8:d5:92:e1:0d:1a:9d:a8:19:a5:6c:9b:4d:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:5C:36:36:47:B2:D7:F6:51:A1:96:33:EF:E9:36:EE:B0:A1:BF
X509v3 Authority Key Identifier:
keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:5e:8f:88:ae:da:47:8a:3d:aa:71:d4:3f:c2:36:3f:96:
c1:a7:58:98:96:26:7d:5e:a1:81:89:21:59:50:a0:6e:c0:6e:
4a:d3:6a:20:d1:6b:73:17:28:28:41:fc:89:2e:58:35:bf:77:
62:31:5a:7d:71:36:6d:ef:c3:74:95:17:e4:0d:74:14:b2:6b:
01:13:ca:9a:4e:ad:8c:24:52:a1:f8:80:73:da:63:f3:9d:07:
2a:19:99:61:38:6e:e9:c9:bb:47:17:bb:e5:ba:d7:55:f6:11:
15:02:50:28:61:78:c2:1b:eb:c5:ed:0e:59:81:7e:b9:87:55:
58:e3:9d:5f:8d:38:39:e6:b8:e3:5f:bf:42:fd:29:97:12:72:
70:71:c7:23:13:45:9b:21:fd:3f:35:bf:5a:e3:3c:83:94:98:
d2:5c:a9:e3:33:6c:b1:4a:6d:65:a7:00:7f:56:90:a0:7c:93:
9e:57:75:1c:5a:eb:a8:54:68:43:dc:2a:0f:6a:c6:70:88:51:
b0:d3:3d:79:40:07:14:d0:26:62:01:00:34:9c:9c:c5:88:f6:
ca:18:74:c8:70:14:e0:c9:46:ff:07:17:d6:ae:e9:44:f1:8b:
16:21:1c:38:ee:4d:e3:b1:ef:10:3b:73:43:86:21:2f:53:8b:
4b:9b:96:9f
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMw
NDMwRTM1MThBNUFGNTFCQzBERjYyNTY3RTBEMTU3Q0E1MjNDMTAeFw0yNjAzMTgw
MTAwNDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAzQzU1QzM2MzY0N0Iy
RDdGNjUxQTE5NjMzRUZFOTM2RUVCMEExQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF3iwuNv8JTocBeJwPdAcmAHbB517Ks8sScvPO+pCGOG9ZX5cm
lvm8CsrAJrVJRu876eFiIqI2HFDmefou5IuBjUynuYNdfy4PlWOrOmwsnwcY5PUW
n0a1gPNihJiGX03ymcaStWJsO4kNT0dlsqwWrV3REl/0OBukZgOBhSOdrk8iM+c3
kLCZsB8ak38hpGN4f9SUFkq2I5chIv2YDmYBu5RH3/uZSp4RuLm6RG1G5Zq0upp+
m0VtJnlOJHHQrZi17zCt1f7QOhUU8feG6XKi+9Qn+T4M96IlI6G9g1N7Wmz7W87+
x58geRyEtnJHYdnjuNWS4Q0anagZpWybTaHVAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUA8VcNjZHstf2UaGWM+/pNu6wob8wHwYDVR0jBBgwFoAUTAQw41GKWvUbwN9i
Vn4NFXylI8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM1
OC9UQVF3NDFHS1d2VWJ3TjlpVm40TkZYeWxJOEUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1RBUXc0MUdLV3ZVYndOOWlWbjRORlh5bEk4RS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNTgvVEFRdzQxR0tXdlVi
d045aVZuNE5GWHlsSThFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJXvXo+IrtpHij2qcdQ/wjY/lsGnWJiWJn1eoYGJIVlQoG7AbkrTaiDRa3MX
KChB/IkuWDW/d2IxWn1xNm3vw3SVF+QNdBSyawETyppOrYwkUqH4gHPaY/OdByoZ
mWE4bunJu0cXu+W611X2ERUCUChheMIb68XtDlmBfrmHVVjjnV+NODnmuONfv0L9
KZcScnBxxyMTRZsh/T81v1rjPIOUmNJcqeMzbLFKbWWnAH9WkKB8k55XdRxa66hU
aEPcKg9qxnCIUbDTPXlABxTQJmIBADScnMWI9soYdMhwFODJRv8HF9au6UTxixYh
HDjuTeOx7xA7c0OGIS9Ti0ublp8=
-----END CERTIFICATE-----
Generated at Thu Apr 16 11:10:10 2026 by rpki-client