Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft
File: qOvq1LE6eRhQyveRTqMND1A2w-c.mft (raw, json)
Hash identifier: nxxSZurwIeSi46JcXPBHxR0oER5DRR2k/RxiUiGig4c=
Subject key identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF
Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7
Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7
Certificate serial: 0306
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft
Manifest number: 0301
Signing time: Wed 18 Mar 2026 01:01:07 +0000
Manifest this update: Wed 18 Mar 2026 01:01:07 +0000
Manifest next update: Wed 18 Mar 2026 07:01:07 +0000
Files and hashes: 1: -MrjC-Wa5eHOs5iz6663lcQmVdk.roa (hash: Cz4/7Zsm1ISGWWnX0XZFGpbGxCLE/5T6NkRhl97/hgg=)
2: 4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa (hash: ifNnF9h072MS6Pwe42EJlNd8XK4udOUQoSw1UcbQjR8=)
3: oN6OAGOV0cdaPZu11iVZrCiBcBI.roa (hash: 3mNZCkp2vcw1/UmFCrK3Wmr5EPSAZSqKxAaz6I4tKuA=)
4: qOvq1LE6eRhQyveRTqMND1A2w-c.crl (hash: ux+Z+ScGd7JrN5FpmaNnrXnxqbOig+ElL6riQ++4ZrM=)
5: rQKvb1lXH1c4bNEw10BfeeCllHs.roa (hash: 8OQWQtkZaG38Cf7QP4OxXvHEUWrAzh4iUe3Z9rIcvNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7
Validity
Not Before: Mar 18 01:01:07 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=5185FA67711A05EB5671FC1222CA12C680FF24BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:6f:77:34:72:f7:14:4c:75:ac:52:29:94:
56:4a:f5:d0:ea:5c:af:84:1b:b8:39:e2:6e:ab:b9:
37:2b:be:05:8a:91:29:a2:d7:53:da:45:08:a2:8e:
7b:d8:db:b5:67:c7:e0:fb:0f:f8:8f:c9:bc:ad:80:
a2:92:0b:f7:eb:d0:03:77:85:3e:45:03:94:b2:14:
c5:c2:10:a6:59:a2:a7:1d:c3:2e:03:03:9b:e2:d6:
50:f1:45:9f:aa:b8:51:5f:cc:47:fc:26:59:41:2b:
84:7c:e0:19:76:03:69:d5:75:eb:4c:44:97:91:3e:
c2:c2:02:b4:30:8a:3a:aa:fb:fd:d4:e0:40:8a:0a:
d3:c4:54:84:f9:29:91:cb:b3:a4:84:35:b3:99:7b:
2e:33:78:d9:d1:86:51:39:e2:86:36:88:21:57:80:
15:49:ef:ec:99:58:b2:4b:af:92:40:e6:58:03:65:
11:bf:70:3d:79:31:96:5b:48:e7:b6:9a:dc:08:6c:
6f:c6:09:ad:d7:5d:b1:a2:86:0b:de:aa:cd:73:1f:
65:88:56:12:f9:f2:42:58:ea:61:9e:57:06:c3:bf:
6d:f1:58:8d:09:44:29:db:44:c2:48:a2:1c:f7:51:
06:2c:6b:b4:c2:15:40:59:d3:31:5c:c8:c6:86:c1:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF
X509v3 Authority Key Identifier:
keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:e4:54:70:f1:97:d4:91:08:50:81:a2:ab:50:b5:a7:8c:8d:
9c:67:e1:da:e0:95:83:26:77:03:8a:fb:f5:c1:68:1d:bc:4e:
89:2e:89:f2:4c:8d:55:67:ca:03:e3:e9:79:52:d6:e8:dc:b3:
cf:40:aa:ea:43:5f:d1:fe:4d:9a:61:58:4b:90:c0:d4:b8:c9:
aa:bc:78:18:bf:7a:8c:c9:3a:55:11:3d:be:49:ec:e2:95:fe:
57:ca:fe:a9:0e:26:07:d7:06:72:94:6c:da:f7:03:36:1f:ba:
6c:33:b7:bf:ea:54:87:32:f6:4b:25:29:a4:38:ab:ac:1e:5b:
e3:ad:28:a0:88:6c:47:2e:f8:13:70:2a:78:c1:9c:b4:b5:7c:
74:1a:43:13:c1:2b:9a:97:a0:f3:c3:0b:4b:85:08:a0:dd:f6:
22:37:96:b3:24:5c:95:24:41:75:eb:df:d4:b2:d0:51:33:de:
64:29:96:26:42:a4:1e:70:28:85:1e:5f:ad:b4:87:ef:f9:af:
44:aa:a8:f2:d9:84:3e:e3:d8:53:05:f7:a6:b4:34:8e:b1:e7:
83:44:7d:18:2a:0d:47:69:6c:59:f3:d4:7c:e6:f1:f0:ff:89:
f1:71:0c:4e:54:2b:b9:c3:11:e5:00:ba:66:76:77:bb:5d:1b:
fe:1f:9c:43
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQThF
QkVBRDRCMTNBNzkxODUwQ0FGNzkxNEVBMzBEMEY1MDM2QzNFNzAeFw0yNjAzMTgw
MTAxMDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDUxODVGQTY3NzExQTA1
RUI1NjcxRkMxMjIyQ0ExMkM2ODBGRjI0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfFG93NHL3FEx1rFIplFZK9dDqXK+EG7g54m6ruTcrvgWKkSmi
11PaRQiijnvY27Vnx+D7D/iPybytgKKSC/fr0AN3hT5FA5SyFMXCEKZZoqcdwy4D
A5vi1lDxRZ+quFFfzEf8JllBK4R84Bl2A2nVdetMRJeRPsLCArQwijqq+/3U4ECK
CtPEVIT5KZHLs6SENbOZey4zeNnRhlE54oY2iCFXgBVJ7+yZWLJLr5JA5lgDZRG/
cD15MZZbSOe2mtwIbG/GCa3XXbGihgveqs1zH2WIVhL58kJY6mGeVwbDv23xWI0J
RCnbRMJIohz3UQYsa7TCFUBZ0zFcyMaGwX3XAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUUYX6Z3EaBetWcfwSIsoSxoD/JL8wHwYDVR0jBBgwFoAUqOvq1LE6eRhQyveR
TqMND1A2w+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3
Mi9xT3ZxMUxFNmVSaFF5dmVSVHFNTkQxQTJ3LWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3FPdnExTEU2ZVJoUXl2ZVJUcU1ORDFBMnctYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NzIvcU92cTFMRTZlUmhR
eXZlUlRxTU5EMUEydy1jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABPkVHDxl9SRCFCBoqtQtaeMjZxn4drglYMmdwOK+/XBaB28TokuifJMjVVn
ygPj6XlS1ujcs89AqupDX9H+TZphWEuQwNS4yaq8eBi/eozJOlURPb5J7OKV/lfK
/qkOJgfXBnKUbNr3AzYfumwzt7/qVIcy9kslKaQ4q6weW+OtKKCIbEcu+BNwKnjB
nLS1fHQaQxPBK5qXoPPDC0uFCKDd9iI3lrMkXJUkQXXr39Sy0FEz3mQpliZCpB5w
KIUeX620h+/5r0SqqPLZhD7j2FMF96a0NI6x54NEfRgqDUdpbFnz1Hzm8fD/ifFx
DE5UK7nDEeUAumZ2d7tdG/4fnEM=
-----END CERTIFICATE-----
Generated at Thu Apr 16 11:22:40 2026 by rpki-client