Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2662/vcTZgftYN_Id2VEGP1m0dd1WJTY.mft
File:                     vcTZgftYN_Id2VEGP1m0dd1WJTY.mft (raw, json)
Hash identifier:          fPRQWcvvlW6FWPgiS5hETjodkkp4yhQDSMvHwWRIgDQ=
Subject key identifier:   48:ED:2D:04:59:DF:0F:E7:68:E6:07:DA:7C:6D:13:70:A3:01:41:9D
Authority key identifier: BD:C4:D9:81:FB:58:37:F2:1D:D9:51:06:3F:59:B4:75:DD:56:25:36
Certificate issuer:       /CN=BDC4D981FB5837F21DD951063F59B475DD562536
Certificate serial:       0613
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vcTZgftYN_Id2VEGP1m0dd1WJTY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2662/vcTZgftYN_Id2VEGP1m0dd1WJTY.mft
Manifest number:          0612
Signing time:             Tue 17 Mar 2026 23:59:06 +0000
Manifest this update:     Tue 17 Mar 2026 23:59:06 +0000
Manifest next update:     Wed 18 Mar 2026 05:59:06 +0000
Files and hashes:         1: ihz4sFLDfkN7Fk9DCBqiadh-ivQ.roa (hash: gR5LOmN4JF2dPB94elxL+UoXokAkI2kc2RKlgGd4ebs=)
                          2: vcTZgftYN_Id2VEGP1m0dd1WJTY.crl (hash: mK67KflXZHPUBe/dyWmqtjda0o3/Dt8ownjSBd87QHM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC4D981FB5837F21DD951063F59B475DD562536
        Validity
            Not Before: Mar 17 23:59:06 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=48ED2D0459DF0FE768E607DA7C6D1370A301419D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:01:25:5d:b3:c7:08:4c:9d:8f:fb:8d:cc:
                    f4:c4:07:1f:79:ca:fb:0d:18:3a:55:90:e8:6d:a6:
                    53:ed:b3:73:02:97:4d:46:3f:52:7d:2d:2a:9d:29:
                    b0:92:90:d8:01:f3:25:ad:1f:dd:a1:17:0a:a4:69:
                    d7:2e:a6:d1:2e:45:7b:ba:09:2d:c0:77:aa:d0:f5:
                    cb:a3:50:a9:2f:7e:5a:a0:11:0b:96:c6:ff:49:78:
                    79:e4:59:a5:e2:b2:d0:82:37:69:da:01:40:4c:89:
                    3a:d1:c2:0b:d7:ea:5d:3e:7f:92:ed:ad:2b:b7:3e:
                    ec:a9:b1:0e:34:16:c0:a2:8e:2f:c3:a0:06:0e:c6:
                    29:0e:62:a9:6a:9a:85:d9:32:83:51:7e:a0:e6:ab:
                    8d:e8:c2:45:7b:a1:94:9d:a5:04:29:32:a7:77:16:
                    8f:c7:e8:38:70:3f:43:8c:97:de:e7:3d:0e:e3:5d:
                    e0:7d:70:c8:11:4d:16:a1:67:c6:94:11:6b:7e:c1:
                    a6:1e:5a:43:06:58:74:49:a9:6f:b0:eb:54:ff:c2:
                    ce:2e:61:27:de:29:59:21:92:1c:54:04:69:8b:70:
                    76:85:e4:83:21:38:3e:69:af:de:0e:9e:cb:27:a7:
                    40:06:b7:03:05:3f:3d:55:56:b3:44:b9:fc:2e:41:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:2D:04:59:DF:0F:E7:68:E6:07:DA:7C:6D:13:70:A3:01:41:9D
            X509v3 Authority Key Identifier:
                keyid:BD:C4:D9:81:FB:58:37:F2:1D:D9:51:06:3F:59:B4:75:DD:56:25:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2662/vcTZgftYN_Id2VEGP1m0dd1WJTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vcTZgftYN_Id2VEGP1m0dd1WJTY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2662/vcTZgftYN_Id2VEGP1m0dd1WJTY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:ca:03:2f:0e:4f:34:86:34:e5:2f:da:6a:5c:1d:e0:01:
         0b:22:6b:44:1c:04:bd:ef:70:80:41:0d:69:e7:66:7b:4c:33:
         38:bc:eb:30:a6:4b:5a:45:ec:13:8c:3e:9c:e9:33:59:43:a2:
         1e:b3:32:b7:f6:b4:94:a6:7b:a2:f7:49:11:78:14:61:28:a7:
         48:e5:10:72:cd:2d:c4:1f:c9:fb:2d:34:49:9e:7e:9d:e5:3b:
         fb:c7:2d:f0:4d:f5:a0:e9:55:1d:b6:4e:66:14:79:6a:18:a8:
         46:93:99:51:e0:06:3e:fa:67:73:95:d5:8e:e0:dc:be:ab:89:
         5f:d9:24:84:e0:25:24:04:7c:53:0d:3a:9a:aa:cd:15:e1:3c:
         5b:ef:6f:cf:a8:ef:e0:f4:2d:07:5d:0c:d0:34:25:75:ea:0e:
         18:cc:cd:4b:cb:17:48:9b:54:37:d7:a4:7e:c3:0a:b7:15:7c:
         50:29:94:ec:cb:1d:ec:5d:de:2e:fb:0a:b3:42:64:03:d5:64:
         d3:61:73:3f:c2:d2:46:ba:ae:83:5e:c1:e1:7c:e8:50:7a:6a:
         93:6d:71:7d:d0:fa:32:79:75:01:f6:03:d7:59:ab:53:4d:15:
         e3:9b:61:32:bb:d5:d7:16:f7:a9:31:95:56:1f:ec:63:54:fd:
         da:41:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:14:41 2026 by rpki-client