Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
File: OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft (raw, json)
Hash identifier: IXCosROZiiBBAp98ZqMltF6jDK/PqobuoNMZFdhJxX0=
Subject key identifier: D5:C0:84:64:B4:0A:63:4F:DB:E6:79:1A:74:15:94:0B:79:FA:BB:61
Authority key identifier: 39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
Certificate issuer: /CN=39E47899249325DB499BFC6910919D2F36003E9A
Certificate serial: 231B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
Manifest number: 2309
Signing time: Wed 18 Mar 2026 02:59:00 +0000
Manifest this update: Wed 18 Mar 2026 02:59:00 +0000
Manifest next update: Wed 18 Mar 2026 08:59:00 +0000
Files and hashes: 1: 8h30GBA3h4n0nrMTSP0xr0y7b_o.roa (hash: 9cfhHU+BjNybxApiI/hSLUqpXkVi5pN6Lvjf+RUUdws=)
2: OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl (hash: fQMUAOnLmVaX1ahJhj92gUb8JCmw2ZxpjoYo1RSCyUU=)
3: aVTN-qNwRozZt36ArshpmDXx0vM.roa (hash: CYQAt9Bb/xP653vpZ4vy+xW+gUj2bdrDgCV5WzAbI34=)
4: vvJwb1gYnGrBw5xA1UrXbiG1jGk.roa (hash: Xd/UqKRCspic2JRT51UsT5/47rtxoF0+T2yGguQfGw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8987 (0x231b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E47899249325DB499BFC6910919D2F36003E9A
Validity
Not Before: Mar 18 02:59:00 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=D5C08464B40A634FDBE6791A7415940B79FABB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:98:90:78:55:2c:20:cb:a2:b3:29:ed:dc:
f3:25:4d:a0:36:42:42:0f:12:8f:41:e4:92:79:28:
84:9f:f0:80:bd:6c:22:33:42:6e:fc:44:b4:49:8f:
14:81:bb:94:ba:44:58:be:45:f2:81:20:e0:88:86:
58:f8:ad:ad:97:46:6f:b0:8c:5f:7a:6a:df:94:a1:
cc:aa:33:73:1b:a0:87:17:0f:f7:16:c5:a6:a2:b6:
e2:f5:77:47:fb:37:85:e0:6c:83:fe:25:4d:9c:4d:
02:dd:6d:c4:91:58:3c:bf:a1:0b:f4:d7:35:e8:a6:
fd:f8:37:5d:de:04:60:5d:c1:e5:eb:80:48:8c:6a:
bc:f0:e8:37:54:ae:35:c7:dc:f8:98:71:d8:aa:f4:
e8:7a:ac:f6:b9:1e:60:c3:db:b9:ee:fc:9b:a5:24:
ae:78:51:b8:98:d7:6d:18:41:40:3b:4a:45:11:b6:
90:9f:78:54:34:31:c5:83:ce:a7:50:63:d3:97:f2:
ad:96:fa:ef:21:6a:0f:ac:00:2b:0d:93:44:b8:cb:
2f:57:49:37:96:0a:93:28:e3:64:ce:4e:56:bf:41:
4f:2e:1a:12:a2:6c:a4:f6:8b:bd:4b:12:88:50:0f:
e4:70:20:4c:5e:f0:84:70:4a:c6:9e:69:1a:39:8c:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:84:64:B4:0A:63:4F:DB:E6:79:1A:74:15:94:0B:79:FA:BB:61
X509v3 Authority Key Identifier:
keyid:39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:50:a7:0a:ef:1f:1f:08:91:77:ad:c3:fc:e3:2e:5c:96:
63:01:8f:42:94:69:22:9c:fa:b0:b8:61:aa:6a:3f:74:5e:f3:
9d:f7:33:bb:73:a7:e1:32:2f:5e:f7:7d:30:50:2d:5b:bf:9f:
d6:42:ee:c7:26:b8:7e:3e:4c:5f:a7:de:ea:57:00:17:66:d0:
f9:06:b1:27:5d:62:ac:00:1b:b6:a0:85:b2:a0:ec:c4:cd:20:
95:01:51:91:2e:64:5a:ad:69:e5:2a:66:c8:cc:a1:63:2c:8d:
b7:18:c1:79:84:84:ba:79:95:5a:03:8b:cc:d3:ed:36:dd:ba:
ae:db:41:45:dc:41:bc:72:6d:85:77:ad:96:0d:04:35:eb:68:
26:9d:93:a9:fc:8d:5d:b1:6a:33:8f:47:69:f1:e1:a6:b5:89:
1e:f1:e9:33:b7:22:f9:fb:6f:22:59:93:bc:d8:dc:64:98:ab:
ca:2b:02:04:32:a9:6a:27:c8:c0:64:e4:70:02:33:d3:88:b1:
91:7b:91:03:f4:10:16:3b:27:21:30:3f:ba:dd:89:15:ee:b2:
8a:e9:b8:dd:8c:74:fc:1a:c6:b3:03:19:19:fd:3c:7e:84:0f:
5a:5d:6b:13:4d:14:96:20:8d:84:af:f0:e4:87:16:69:01:b5:
38:46:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:14:41 2026 by rpki-client