Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft
File: TKBmowwWxZe0k6YQetAWDYvQCSY.mft (raw, json)
Hash identifier: G+0/62ZYO5VTZi/2G3blwSZk0PK0foKYnYQYFza2j4E=
Subject key identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19
Authority key identifier: 4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26
Certificate issuer: /CN=4CA066A30C16C597B493A6107AD0160D8BD00926
Certificate serial: 03D8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft
Manifest number: 03D7
Signing time: Wed 18 Mar 2026 01:00:45 +0000
Manifest this update: Wed 18 Mar 2026 01:00:45 +0000
Manifest next update: Wed 18 Mar 2026 07:00:45 +0000
Files and hashes: 1: TKBmowwWxZe0k6YQetAWDYvQCSY.crl (hash: lsxXHMF6TbG/ElrK59bZJuqcsMhIMThFZlXjNd8towI=)
2: h_8IDYjXQYEVeDqtIisDjvwzBe8.roa (hash: 0fLzHTo7bkIJSkOlZk3sVXzsaWT/arBgec7m86urnq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CA066A30C16C597B493A6107AD0160D8BD00926
Validity
Not Before: Mar 18 01:00:45 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=327CFBC75AEE907367E3332E3278BEC1F7916319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:50:b9:3f:fc:f4:ee:33:bc:2c:32:96:19:
9f:c2:06:bc:7b:41:7b:91:94:f3:63:ec:ca:90:f7:
ee:15:85:99:33:89:f5:43:24:de:15:8e:ae:1b:45:
64:4e:2c:e3:e8:a6:1f:fb:87:1d:b7:b6:b2:bc:aa:
c3:7f:37:80:b0:f2:24:36:d9:43:75:1e:74:e9:3a:
bf:a6:c3:a1:ec:85:93:81:36:3b:85:0c:b3:3e:87:
96:4f:fb:55:ed:bf:14:af:34:2a:92:46:2b:97:67:
e5:98:3f:e2:1d:08:67:da:57:aa:b3:20:7e:3b:c0:
4b:e9:86:c8:d8:64:db:4b:0e:2c:b4:c9:13:c1:d0:
47:29:8f:dc:a4:2e:fd:df:cb:9b:fc:88:70:51:af:
0b:0b:03:57:a8:fe:c7:73:f0:a3:c3:c8:bd:42:1e:
59:c0:1a:b7:87:3b:2a:ee:e1:83:b7:00:32:c2:bd:
2b:de:f4:42:e9:f4:54:37:cf:19:86:79:40:7c:93:
75:8c:b8:c1:65:26:e2:1c:c5:b0:64:61:ea:91:72:
93:a3:f2:53:e3:1d:d1:a2:3d:8e:86:ee:d8:3c:3a:
fd:72:a8:5d:0a:53:82:b3:95:06:64:cd:45:b5:3d:
ed:af:0d:d3:05:c3:8e:11:fc:90:f6:ac:ff:b2:87:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19
X509v3 Authority Key Identifier:
keyid:4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:b5:c1:9b:ed:80:48:ea:d8:58:3d:8d:ee:a8:9d:4c:95:
01:4c:7d:59:a9:29:01:50:2a:fb:3c:32:13:8c:f0:08:c5:ee:
cb:89:0a:a0:e0:2d:15:af:b0:63:2b:d3:ad:9e:07:9f:9e:a1:
b7:05:95:11:ef:c7:55:b7:0b:ae:24:0a:a8:0e:17:d5:f4:d6:
41:ea:14:da:04:54:56:f5:65:a6:c5:98:bc:ec:8c:ff:22:b2:
fb:b0:6b:8b:3c:ee:6a:fb:75:0f:01:96:44:67:cd:f1:5d:29:
57:eb:41:ac:0c:ac:37:8b:74:22:e8:da:bf:f0:e7:0d:e5:b6:
09:b4:27:29:fd:5b:c2:f5:67:d8:76:d8:40:95:06:f7:d6:44:
ed:b7:d4:09:ab:7d:e6:42:9e:e0:eb:c5:87:d1:67:d7:b4:4c:
3c:1b:b5:20:e1:d0:ee:82:28:2c:16:f1:56:e3:e0:fd:fd:dd:
1e:2b:ed:67:56:53:b3:df:bf:71:b0:8a:dd:24:4c:0f:d2:db:
06:41:2b:7d:25:82:d7:7d:b8:98:14:58:68:17:6d:fb:fb:4e:
3b:80:0a:23:ae:9f:6d:2d:eb:76:ef:68:7f:c0:ce:ce:00:d5:
cb:7a:f8:7d:3d:c0:e1:cc:93:7c:14:b2:d9:38:90:eb:a1:fd:
a1:04:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:21:51 2026 by rpki-client