Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft
File: Cm-XLSQHj4kIjtEQom3N-QqevOo.mft (raw, json)
Hash identifier: DnhlZ8SPqwkwIgNOxRUvIn8HKl+ML4UVPi2WB0MsWoU=
Subject key identifier: 47:4E:F3:51:13:0D:53:1A:65:EF:A3:0B:17:39:68:28:39:FC:6C:9A
Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Certificate serial: 1AD6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft
Manifest number: 1AC7
Signing time: Wed 18 Mar 2026 00:59:53 +0000
Manifest this update: Wed 18 Mar 2026 00:59:53 +0000
Manifest next update: Wed 18 Mar 2026 06:59:53 +0000
Files and hashes: 1: 7KhjyFArIahfZqUppN39B2U8uWw.roa (hash: 9Tt4efQa83mrdmNGrnz9HAzUOii4WtxIiWodw7TJf8k=)
2: AKNyCIbrTIx6gqAV6a5tQrFYrPo.roa (hash: dA337WQUV0b/ikW/HF9ddxaiuctveKDFYo10YnqO8bE=)
3: Cm-XLSQHj4kIjtEQom3N-QqevOo.crl (hash: 4cjIHW9ZgZSzvezUWsgE+ZSdYYa8Mb6FeF+y0rjQcd0=)
4: EEyHpeLP2zwPwwDDrnbNGi7XLnE.roa (hash: feXqq3A6jCAD34pacdb2UXtp3vrjgWcmmd2s+ZeVB4g=)
5: FJya2J9MRXewJS0UsrRFHHS19fY.roa (hash: xdD1SHxivnU0RMg/dvIBrXho/Z9i/igtmo4LcBAFRxE=)
6: OfG8EM7TlmfgDQK2fphCmwNipTg.roa (hash: TyDBrbN3myN+sZ6CN/BLu7Dd/j06TToWBDA6q6Kqcjc=)
7: RErAL65HRCGrc8Rg8rd4PzX2Lwk.roa (hash: 0yvpMKvii87j2Vl3CUVTg0uM0+hwFSf/HY7xN0uVRJQ=)
8: RoMFAme2LyvRQ5XYpaCuZ17mdTQ.roa (hash: dH8NlKUfN7377TgKjXA2eMf6m9zUwh0NAEP/qhvWU40=)
9: h_XlbGTtRdzPycnUPkMv_VsHxOk.roa (hash: wUQYuAK1iwgoTRU6i5LJSCAg+l17CLiMUySwmIS4GKA=)
10: qNLltn56HM078SiShLYIiere6-8.roa (hash: D9NCFv8jwYo6nKUJFGsYdY54fL6ckDHlRfe9IKW2EKo=)
11: rv_gAjG_1H9fNLirCKsyP5M3UR4.roa (hash: dOQl+NMTbf19BuAJXCihoFrae8r62h4qO/73ud5Acnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6870 (0x1ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Validity
Not Before: Mar 18 00:59:53 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=474EF351130D531A65EFA30B1739682839FC6C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:3d:ff:74:53:e9:5c:ad:49:15:19:5b:06:
ee:c9:0e:30:1e:d6:58:d1:ca:78:3c:47:f0:9e:a5:
d8:ee:bc:e4:c5:31:02:b9:5c:35:c0:28:b6:3a:0d:
a8:e9:75:88:75:93:a0:6b:e1:13:2d:f8:a9:e5:33:
d5:59:7a:f4:5e:78:46:c4:b0:c3:fc:be:a0:ef:96:
b7:4e:2a:16:10:fa:01:9a:49:a4:36:71:9e:71:e9:
37:8d:c8:ce:3a:4a:ce:f4:6f:60:90:31:2d:9b:c4:
ac:d0:fc:84:d4:35:60:29:54:db:f8:3c:c8:a9:bc:
77:23:df:30:1c:17:82:ce:b0:e5:7f:85:a1:f7:39:
fe:83:6c:07:e3:e3:fe:80:dd:cc:65:60:26:a4:6d:
60:0f:2b:0d:68:0d:c0:82:d1:5a:24:ca:c5:7d:d1:
77:71:fe:d9:1b:0e:d2:85:98:0b:51:00:95:ba:6a:
fe:f4:2f:bf:3f:42:b9:5c:5b:28:e7:9c:90:d8:04:
21:8b:0e:e8:e5:c4:13:8e:83:52:2f:bf:99:7f:10:
13:ba:9e:71:fe:1e:91:23:7f:ce:b9:70:73:6c:03:
24:87:cc:46:6c:16:68:e8:ba:5a:a6:b7:03:ee:e0:
c6:91:16:9c:f8:6e:58:a9:38:2b:0f:96:23:1a:7d:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:F3:51:13:0D:53:1A:65:EF:A3:0B:17:39:68:28:39:FC:6C:9A
X509v3 Authority Key Identifier:
keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:bc:3d:14:7f:92:a6:2b:44:2a:6f:bf:c5:95:8c:80:69:0c:
49:98:6b:78:9b:aa:ff:41:9c:66:3d:54:51:ad:9d:3c:cb:67:
9c:05:ed:3f:df:81:89:80:d0:f4:c4:0d:93:d2:d4:cd:fa:2f:
56:7d:f7:64:3b:36:81:1c:fd:12:66:7d:a9:41:0e:43:c5:17:
db:56:93:e2:b8:f5:0d:c6:47:e7:a7:b6:c3:6a:45:9e:e6:1f:
76:4c:a3:49:22:65:ad:c8:c0:11:70:48:28:ff:4f:00:e6:ad:
59:13:58:79:2a:c9:f7:6b:a6:61:0e:c9:59:66:a5:b4:c1:43:
e5:9f:9d:40:ed:31:fd:13:60:d5:74:78:95:cb:dc:8a:c7:ac:
be:c5:55:94:e6:21:cd:a0:4f:e6:82:f9:7e:1b:66:b4:57:d5:
51:98:30:8b:75:d8:82:e3:46:7e:bd:74:c8:05:b9:9d:97:79:
28:5f:c9:c4:b3:7f:d6:f0:83:5e:4d:dc:fc:10:fa:8b:59:33:
c1:19:6b:1d:f4:8d:f3:b7:b3:d9:0d:78:ce:b9:35:ba:fd:2c:
f2:e9:b4:8d:ae:6d:96:f1:15:9d:de:ec:24:e9:e2:30:2a:f5:
00:c1:bd:c0:2d:71:de:3e:c3:09:19:2b:b7:9e:8b:bd:f1:d3:
3d:e8:99:91
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICGtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2
Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNjAzMTgw
MDU5NTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQ3NEVGMzUxMTMwRDUz
MUE2NUVGQTMwQjE3Mzk2ODI4MzlGQzZDOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3hD3/dFPpXK1JFRlbBu7JDjAe1ljRyng8R/CepdjuvOTFMQK5
XDXAKLY6DajpdYh1k6Br4RMt+KnlM9VZevReeEbEsMP8vqDvlrdOKhYQ+gGaSaQ2
cZ5x6TeNyM46Ss70b2CQMS2bxKzQ/ITUNWApVNv4PMipvHcj3zAcF4LOsOV/haH3
Of6DbAfj4/6A3cxlYCakbWAPKw1oDcCC0VokysV90Xdx/tkbDtKFmAtRAJW6av70
L78/QrlcWyjnnJDYBCGLDujlxBOOg1Ivv5l/EBO6nnH+HpEjf865cHNsAySHzEZs
FmjoulqmtwPu4MaRFpz4blipOCsPliMafSeDAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUR07zURMNUxpl76MLFzloKDn8bJowHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ
om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy
L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyL0NtLVhMU1FIajRrSWp0
RVFvbTNOLVFxZXZPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBBvD0Uf5KmK0Qqb7/FlYyAaQxJmGt4m6r/QZxmPVRRrZ08y2ecBe0/34GJgND0
xA2T0tTN+i9WffdkOzaBHP0SZn2pQQ5DxRfbVpPiuPUNxkfnp7bDakWe5h92TKNJ
ImWtyMARcEgo/08A5q1ZE1h5Ksn3a6ZhDslZZqW0wUPln51A7TH9E2DVdHiVy9yK
x6y+xVWU5iHNoE/mgvl+G2a0V9VRmDCLddiC40Z+vXTIBbmdl3koX8nEs3/W8INe
Tdz8EPqLWTPBGWsd9I3zt7PZDXjOuTW6/Szy6bSNrm2W8RWd3uwk6eIwKvUAwb3A
LXHePsMJGSu3nou98dM96JmR
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:33:02 2026 by rpki-client