Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
File: 9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft (raw, json)
Hash identifier: TdYVWtEJpUha+eO5D6OcRQwIOydEQe9gk69WKIjzmHs=
Subject key identifier: DB:BB:05:95:FF:E4:2F:BD:86:48:C7:C4:65:64:87:01:14:9E:20:3D
Authority key identifier: F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B
Certificate issuer: /CN=F4729CAF435D698D27C7387914801EFDB8478B8B
Certificate serial: 03E9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
Manifest number: 03E7
Signing time: Wed 18 Mar 2026 04:59:09 +0000
Manifest this update: Wed 18 Mar 2026 04:59:09 +0000
Manifest next update: Wed 18 Mar 2026 10:59:09 +0000
Files and hashes: 1: 9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl (hash: JzSEwtPSMwsRlc684jTH6jnNbnxzHZNyls5V5nJ7uok=)
2: mzEqRGt0VvtSsWPhPBXfjucZFo8.roa (hash: tTxxdHg09ks37JVOcdjBMNEqFSmbff56kqtenIT2bzQ=)
3: xwNLPe_StZMG1iv5jjnMb3WeiqY.roa (hash: T6hWSlRGulCuF3HHzGqvyeRktxl6HgxezfKP3kslbP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4729CAF435D698D27C7387914801EFDB8478B8B
Validity
Not Before: Mar 18 04:59:09 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=DBBB0595FFE42FBD8648C7C465648701149E203D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:71:6c:8b:14:48:16:68:7d:3a:3f:2e:7a:
ce:c4:98:ad:d2:cf:91:60:c8:01:ab:84:02:e6:04:
eb:7a:d6:2b:be:1f:6e:57:4f:c5:63:a0:47:cd:1b:
7c:95:40:bb:cf:f8:28:58:86:20:e5:05:c3:fd:59:
1e:a9:b6:61:50:64:12:10:47:ef:5e:f0:7b:32:1e:
f5:fc:4a:0f:3f:66:53:e4:fd:b8:00:93:c6:76:dc:
f6:6b:e9:bd:71:f1:3e:a4:09:58:af:40:dd:4e:54:
37:21:37:4e:59:a9:51:b6:0b:00:b8:32:16:48:24:
d0:b1:bb:23:9c:1e:9e:26:88:99:3c:2f:c8:82:9a:
3c:5d:67:36:d1:0d:dd:1f:57:60:d3:60:d3:f4:a5:
2a:37:f9:9d:49:9b:f5:2f:7e:9a:dd:c1:8f:be:4c:
b9:ab:59:42:93:0a:52:c6:c2:c4:80:e9:0a:18:84:
ae:57:53:16:db:7a:90:a4:41:e5:a6:4b:3d:81:5e:
e5:19:50:98:6b:db:49:4d:90:9a:8d:21:26:c3:d9:
51:5b:25:e2:6b:03:d9:e4:ef:81:b2:1d:06:0b:af:
ef:7a:85:58:17:2c:d0:0e:67:ee:6b:b1:7a:d1:0d:
c9:10:31:1c:e7:ea:23:8f:0a:dd:fb:ce:92:8a:63:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:05:95:FF:E4:2F:BD:86:48:C7:C4:65:64:87:01:14:9E:20:3D
X509v3 Authority Key Identifier:
keyid:F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:25:90:1c:a4:f4:a7:4d:52:30:a2:19:1e:a4:9c:01:1e:1f:
4c:b6:07:45:7b:0c:ab:93:01:98:ee:87:76:83:43:9b:6c:00:
c5:80:eb:f7:78:db:02:f0:62:3e:36:d7:41:81:0c:a0:48:99:
47:cf:61:0f:7d:53:54:91:34:97:26:29:ef:f0:d2:f2:f8:f1:
b9:f4:b8:a0:e3:1c:91:5a:4c:dc:24:3f:c4:43:d6:90:04:80:
b5:43:e5:97:d5:06:73:9d:0c:26:6d:ef:2f:da:3c:f1:a9:75:
46:0f:19:52:27:93:03:c3:68:0f:d9:b9:c3:8c:5e:bc:e1:81:
76:57:48:2c:a0:b4:41:d1:cd:2c:ca:50:c2:e9:c3:84:86:fb:
e4:4b:a8:4c:34:d0:97:aa:fe:b1:eb:14:37:a1:5f:bc:df:b4:
15:51:18:6d:46:2c:2b:62:aa:30:b9:c6:9b:c9:04:d2:2e:80:
5f:16:a1:3f:28:0d:7f:71:0d:75:d3:2b:51:b7:b5:0c:87:4b:
be:16:a1:7a:23:98:d1:f7:9b:e8:bb:ae:e6:76:b1:40:0b:73:
82:e1:a5:68:aa:78:0c:9d:d0:27:48:6d:c1:70:71:ff:1c:aa:
8b:e8:60:20:5a:a2:c6:1c:63:4f:dd:55:63:3e:4f:ad:fa:b6:
8c:af:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:33:03 2026 by rpki-client