Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File:                     1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier:          Ov1fwGXWsNPeVvpIR7+gSPL+mOjBtmDkv86WHF21S5o=
Subject key identifier:   20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer:       /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial:       23ED
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number:          23E7
Signing time:             Wed 18 Mar 2026 01:00:40 +0000
Manifest this update:     Wed 18 Mar 2026 01:00:40 +0000
Manifest next update:     Wed 18 Mar 2026 07:00:40 +0000
Files and hashes:         1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: hjetJdQtYMD4+ttiYZp657yOFjeZ+Pyoz+f5urx2psg=)
                          2: Jjq7lUGmENI2hGsHBVMBajc7AM0.roa (hash: p6PoxLf28mqVaxNc2P0/8WawjpfYf7LL9ddnWyfyznY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9197 (0x23ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
        Validity
            Not Before: Mar 18 01:00:40 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=2078E015442FC65DBF7411835879235714E226A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
                    5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
                    2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
                    c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
                    25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
                    78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
                    64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
                    19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
                    0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
                    c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
                    db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
                    36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
                    16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
                    49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
                    26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
                    be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
                    09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
            X509v3 Authority Key Identifier:
                keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:2b:c7:a0:e7:15:2c:ed:3d:3b:10:cf:86:16:2a:0c:68:5b:
         cb:4a:1c:d3:d2:3a:71:99:67:b7:bc:b7:a4:1c:eb:21:49:6a:
         79:c8:fe:22:2e:c9:28:c5:30:98:fb:e5:57:c4:19:ab:27:03:
         5c:df:c9:99:6e:7a:22:6d:53:85:fc:9d:1b:21:86:3a:40:02:
         65:3d:f9:4c:63:c8:dd:17:03:b5:e3:1b:85:b5:f6:7f:43:60:
         5d:63:d8:ec:21:70:41:fe:e6:7b:bc:2d:36:0b:dd:c4:84:70:
         15:44:1e:f6:d3:54:eb:d8:d9:52:ba:bd:dd:a9:ff:13:40:2a:
         b6:2e:c2:01:c5:28:5a:8c:21:b0:fc:2e:c1:e1:28:f3:90:0e:
         d1:84:c6:87:f9:bf:f6:55:4f:25:27:f8:8b:ee:e1:58:e0:1f:
         45:53:14:54:20:9f:f0:35:11:9d:fd:70:81:47:a5:fe:9f:b7:
         38:39:68:25:fd:8c:00:4b:cd:b4:bc:0b:91:1b:81:8a:bd:da:
         19:77:7a:10:f9:63:3c:36:1b:ef:14:bc:74:f3:79:1e:86:99:
         c6:13:3a:b4:22:46:69:e3:51:bc:b9:f7:e2:bc:0d:98:30:84:
         34:15:dd:7a:aa:9c:b1:f2:54:14:20:9f:c0:b8:f5:48:70:ca:
         3c:02:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:16:29 2026 by rpki-client