Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json)
Hash identifier: 7GwlRmB+SFxA4q4wmGJARV8DzfRlrswYLvG7FTopnEA=
Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 505B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
Manifest number: 4F9F
Signing time: Thu 23 Oct 2025 12:34:22 +0000
Manifest this update: Thu 23 Oct 2025 12:34:22 +0000
Manifest next update: Thu 23 Oct 2025 18:34:22 +0000
Files and hashes: 1: 2ZNG3G15upo8DORIFiVyLWoui78.roa (hash: /g1ANhvVUUwRjtioqGKC6HhkujrV1TiAQQd00tluKNY=)
2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: /uHQCpMqQsgKnlX3YX0gWR/OdCCa7mqwRZ+QCC+vfDQ=)
3: DV9YoxqGdTNaNkV_dYo-cE56LG8.roa (hash: F7xF65w7NyXs1wwERCI4GYlXmPQAH0vs9sPxouOySIM=)
4: J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa (hash: JZqbb7i6bVnvHtRzZU32RSdzBfvZIDA6IYjDqF9aNjc=)
5: LRJECCnX55OdUvyz3ONAzIkv5nI.roa (hash: 3zSjtIJYi9xVkXkHnSqHSf/dmCG1ykp7G9yOBv7E9MM=)
6: Rps_aascbWKVxn-HDX6jbtslKTA.roa (hash: u5Q1UZLIxQetQhf2YB+ch/nEGtvCZ6oy7BTHV/FKJlA=)
7: fTnsAq-nYxMPC2yJwoC13w2UuLk.roa (hash: jFmHe4BkqyRGfRC3sFzmFBQojOAoAG2h4AXZKCXK/MQ=)
8: mfehLdMxOl0f-IZiSB9uOhDcYeY.roa (hash: n6lU7gobMpe3yBX3oBWMDem6twM0TGI2lZ6jEGt5qbc=)
9: nbUssdIHSjWfeIh8L_-mJVYgAZA.roa (hash: zmncN5W9l/SLW+y/pIfUzhguaT/pe9S0Xfsqg1Y0LbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20571 (0x505b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Oct 23 12:34:22 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84:
da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea:
da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08:
02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8:
25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7:
59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61:
a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc:
fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a:
7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1:
67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72:
5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c:
a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33:
02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da:
93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e:
17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98:
98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a:
cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:f7:b3:13:ca:38:a2:d1:62:1d:ba:11:5b:b8:31:90:be:
22:64:a7:46:e5:87:ec:ca:fe:e3:60:67:a2:b0:eb:59:37:29:
6c:04:81:9d:e2:d9:ec:a4:40:f7:ec:93:ab:c3:47:4a:db:db:
dc:a8:d1:11:de:5e:57:31:44:ad:00:1f:75:24:86:5e:07:a3:
6e:e1:aa:03:22:13:83:01:bc:f3:e4:9f:a0:78:c1:c9:fd:09:
92:7e:d4:13:22:fc:8d:62:af:d6:8a:d3:4e:dc:e2:4d:ac:ab:
3c:5c:31:d9:79:1e:0f:69:2a:dc:84:1b:1f:22:af:b6:30:ee:
fe:10:d0:c5:a8:04:8c:75:9a:d8:4b:83:a5:8b:52:3a:a4:d8:
de:ff:10:e1:f8:c5:01:de:0f:65:79:8e:bc:d4:cb:dc:a2:3b:
32:90:23:56:fd:d2:46:a0:ea:1f:8e:62:db:bd:2a:43:c7:d3:
4b:90:07:71:84:ad:7b:84:66:2a:f9:cc:7d:cb:1f:21:04:68:
ec:1b:59:c5:f8:2d:0d:62:b9:98:a7:2f:ce:85:a5:07:db:b8:
6e:ec:ae:43:ff:84:3c:7c:a1:b6:04:ef:15:e2:23:6c:37:46:
46:72:b9:7d:75:c4:89:a6:44:c9:d8:a5:2e:e5:a6:f1:89:f4:
ba:c0:0e:c6
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICUFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz
NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTEwMjMx
MjM0MjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ3RUNCRkJBM0IzQzlB
NTM4REJDNDQ1Rjc5OURDMTU3NUNGRjBDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhfwXNsx00OroWdg8QhNrsepI85PvJr1WVI9Bp6tpU3zorW9C4
edup1M+wCAINb2l8cZ9DaHotaEKAuCW37wdDe4Kcmd/AYU2tt1kT1ozu6yNxQ3lq
0JwLYaD6tg1RX5x5/PIMeJaK3PxKjmjbshflUK/jOdPlKn5GSuu6cl9tMSRh3anR
8Wfr03ZKnP/njDJfzRnoclqdGMOajQJIB6q57g1UTKUw4mG958JBjQPhh1NKMwLj
QFSBU/XNAfHBHjYW2pPRNhM95YizKTdRp5pwnhcz21IZNZALPvckARW7mJh+cHmF
J2aWVRjGAufhKsuPsQRAsB697GUTxxTDT5jDAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU1+y/ujs8mlONvERfeZ3BV1z/DC8wHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU
/Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx
OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvQVRZRUdpOVQ4bXRD
RFd2VV9RNmNMWGN5Q1hFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEY397MTyjii0WIduhFbuDGQviJkp0blh+zK/uNgZ6Kw61k3KWwEgZ3i2eyk
QPfsk6vDR0rb29yo0RHeXlcxRK0AH3Ukhl4Ho27hqgMiE4MBvPPkn6B4wcn9CZJ+
1BMi/I1ir9aK007c4k2sqzxcMdl5Hg9pKtyEGx8ir7Yw7v4Q0MWoBIx1mthLg6WL
Ujqk2N7/EOH4xQHeD2V5jrzUy9yiOzKQI1b90kag6h+OYtu9KkPH00uQB3GErXuE
Zir5zH3LHyEEaOwbWcX4LQ1iuZinL86FpQfbuG7srkP/hDx8obYE7xXiI2w3RkZy
uX11xImmRMnYpS7lpvGJ9LrADsY=
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:40:24 2025 by rpki-client