Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
File:                     1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft (raw, json)
Hash identifier:          bzzfmsQZmuzNDPCZ/50F2tZSmsRYqmee3ODgYfeM6ug=
Subject key identifier:   07:FD:51:87:5C:37:F9:3D:2E:40:BF:6E:6E:C6:36:33:78:E0:6E:DE
Authority key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Certificate issuer:       /CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Certificate serial:       239E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
Manifest number:          2398
Signing time:             Wed 18 Mar 2026 01:00:01 +0000
Manifest this update:     Wed 18 Mar 2026 01:00:01 +0000
Manifest next update:     Wed 18 Mar 2026 07:00:01 +0000
Files and hashes:         1: -a1jdxdHPICbVsGbYZhm8xBMOls.roa (hash: 9kCwOnNKxY6VM8dDFxiIule25mLmEQcmiPBStuJwclU=)
                          2: 1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl (hash: ONzspJshHgEMP4jU+CXYn9MwGgH/B4MVCqHWk9ah3Uk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9118 (0x239e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
        Validity
            Not Before: Mar 18 01:00:01 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=07FD51875C37F93D2E40BF6E6EC6363378E06EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:26:f7:fb:1c:7a:2f:ad:71:9f:27:07:8e:
                    e1:a8:17:cb:24:31:4f:d5:c7:7f:8e:3a:bd:e6:db:
                    6f:61:94:36:03:28:d0:db:a7:37:28:2b:e9:b2:2f:
                    02:d5:d5:58:27:ec:7f:25:65:10:0b:90:3d:02:b1:
                    2c:71:64:d8:e0:be:b5:55:e8:e0:6c:4d:25:c1:b1:
                    31:1d:0d:78:53:29:3f:a3:b4:f9:e6:1c:81:eb:05:
                    48:c6:f8:5b:8b:2e:3a:01:de:91:06:59:a4:3f:e8:
                    65:e0:85:77:4f:c5:aa:f5:9e:7b:ae:49:e6:b9:24:
                    e2:30:dd:cc:ad:7b:82:5e:1b:0e:16:72:f7:20:be:
                    d2:66:0a:ce:bb:4b:88:2f:32:39:d2:ca:41:ab:60:
                    77:5a:ee:42:ed:10:83:cc:fb:a0:15:b2:fe:0f:5e:
                    4c:5d:44:14:12:77:04:db:7a:c8:b7:97:24:b6:e5:
                    2e:d2:27:3d:cb:2d:bc:81:ac:ba:9c:87:c3:b0:f3:
                    b0:38:5c:9e:3f:33:4c:c6:db:4e:cd:c5:f5:94:a1:
                    97:0c:a3:e7:ed:5f:ad:83:8d:a5:28:d2:d9:56:f4:
                    8b:23:27:b8:3d:88:3b:9c:0e:6a:a3:0e:8b:a9:ec:
                    0e:62:a8:0d:9e:fc:d1:83:42:c2:ed:b7:1b:f8:28:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:51:87:5C:37:F9:3D:2E:40:BF:6E:6E:C6:36:33:78:E0:6E:DE
            X509v3 Authority Key Identifier:
                keyid:D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b4:6f:29:a8:77:88:17:0d:7e:dd:57:9e:f0:c9:07:79:61:
         15:46:8b:56:8c:28:96:ac:d2:74:49:46:ad:4a:fc:6b:55:22:
         b5:37:52:55:63:c7:04:e9:7f:14:b1:e0:36:fc:a4:e2:f4:59:
         6d:6f:1f:04:28:42:4c:5c:a3:3a:14:c6:af:69:9d:1f:07:86:
         4b:05:f2:16:d7:80:2a:1d:c2:99:6e:6a:09:dd:d6:d1:0b:7f:
         c1:3b:cd:32:0e:b1:2d:7a:b7:78:5f:ff:d0:97:64:b0:52:8f:
         23:f5:99:01:0c:4b:1b:82:f1:b7:15:78:6b:a3:0f:87:f5:00:
         94:1c:e9:be:fc:23:e7:4c:89:2a:2d:dd:52:f9:3a:ab:aa:81:
         b2:28:92:7c:4d:96:93:01:c7:dc:06:b4:53:39:b7:7c:da:f6:
         d6:64:c6:90:0c:a3:7a:65:0d:6a:54:dd:3a:d6:7a:de:86:8e:
         af:23:76:22:2a:11:b8:39:31:55:60:6d:18:4f:5c:e7:cf:08:
         93:ab:57:ee:30:22:13:ab:b6:91:8e:d9:b0:a4:86:39:e6:8a:
         ab:a9:23:3f:e3:f3:9d:80:b2:62:4c:a2:f7:6a:e9:65:cc:28:
         d9:d6:ec:c1:4a:e3:a2:d0:e2:f8:3f:88:06:57:76:2b:31:df:
         fa:1a:db:6d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICI54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZE
RDBCNDY3RUU4RDc1QjE1MTQ2NjI4Qzk5MUFDMzE0MDU1OEY5NDAeFw0yNjAzMTgw
MTAwMDFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDA3RkQ1MTg3NUMzN0Y5
M0QyRTQwQkY2RTZFQzYzNjMzNzhFMDZFREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuayb3+xx6L61xnycHjuGoF8skMU/Vx3+OOr3m229hlDYDKNDb
pzcoK+myLwLV1Vgn7H8lZRALkD0CsSxxZNjgvrVV6OBsTSXBsTEdDXhTKT+jtPnm
HIHrBUjG+FuLLjoB3pEGWaQ/6GXghXdPxar1nnuuSea5JOIw3cyte4JeGw4Wcvcg
vtJmCs67S4gvMjnSykGrYHda7kLtEIPM+6AVsv4PXkxdRBQSdwTbesi3lyS25S7S
Jz3LLbyBrLqch8Ow87A4XJ4/M0zG207NxfWUoZcMo+ftX62DjaUo0tlW9IsjJ7g9
iDucDmqjDoup7A5iqA2e/NGDQsLttxv4KP+rAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUB/1Rh1w3+T0uQL9ubsY2M3jgbt4wHwYDVR0jBBgwFoAU1t0LRn7o11sVFGYo
yZGsMUBVj5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0
Mi8xdDBMUm43bzExc1ZGR1lveVpHc01VQlZqNVEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzF0MExSbjdvMTFzVkZHWW95WkdzTVVCVmo1US5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDIvMXQwTFJuN28xMXNW
RkdZb3laR3NNVUJWajVRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMC0bymod4gXDX7dV57wyQd5YRVGi1aMKJas0nRJRq1K/GtVIrU3UlVjxwTp
fxSx4Db8pOL0WW1vHwQoQkxcozoUxq9pnR8HhksF8hbXgCodwpluagnd1tELf8E7
zTIOsS16t3hf/9CXZLBSjyP1mQEMSxuC8bcVeGujD4f1AJQc6b78I+dMiSot3VL5
OquqgbIoknxNlpMBx9wGtFM5t3za9tZkxpAMo3plDWpU3TrWet6Gjq8jdiIqEbg5
MVVgbRhPXOfPCJOrV+4wIhOrtpGO2bCkhjnmiqupIz/j852AsmJMovdq6WXMKNnW
7MFK46LQ4vg/iAZXdisx3/oa220=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:35:06 2026 by rpki-client