Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft
File: d1a8u4G6ySFoe23DL0DCd0K0b44.mft (raw, json)
Hash identifier: s4M2UhkkZLFK1GjIfJUSVuCqCuAfShaEai18oZTEMYk=
Subject key identifier: 43:28:07:89:50:BC:C8:7D:94:39:C5:7F:9F:EE:8A:8A:36:A8:7F:65
Authority key identifier: 77:56:BC:BB:81:BA:C9:21:68:7B:6D:C3:2F:40:C2:77:42:B4:6F:8E
Certificate issuer: /CN=7756BCBB81BAC921687B6DC32F40C27742B46F8E
Certificate serial: 1DE9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft
Manifest number: 1DE9
Signing time: Tue 17 Mar 2026 23:59:14 +0000
Manifest this update: Tue 17 Mar 2026 23:59:14 +0000
Manifest next update: Wed 18 Mar 2026 05:59:14 +0000
Files and hashes: 1: d1a8u4G6ySFoe23DL0DCd0K0b44.crl (hash: XlfljYULYNCx7KtX6k2srg0AdCo321X0Wbqpe4Aq+8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7657 (0x1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7756BCBB81BAC921687B6DC32F40C27742B46F8E
Validity
Not Before: Mar 17 23:59:14 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=4328078950BCC87D9439C57F9FEE8A8A36A87F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:84:7f:79:5c:b0:4a:19:5f:01:60:db:95:
0f:df:72:cd:cc:72:e9:27:40:66:aa:2c:89:05:7f:
cf:3c:46:e2:98:d7:7f:74:e7:e6:f4:89:96:76:54:
71:99:30:8b:ef:8b:f5:a3:4d:47:8b:36:7c:66:0a:
ce:3f:a3:0d:0f:e1:19:6d:f9:a6:c3:5f:d1:1f:70:
4e:30:46:4d:bb:46:12:dc:91:cf:e5:cc:5e:b4:54:
81:b0:b2:41:e8:58:4d:c7:75:36:6c:aa:8f:be:c1:
22:b0:87:b8:bc:a3:b4:be:8b:3e:ca:d4:b4:4c:9f:
d6:40:4f:d1:2b:59:99:1a:5e:cc:a6:05:45:a1:63:
4a:82:be:ec:54:f5:b1:93:df:85:96:98:6f:f9:db:
9c:ba:94:b4:60:45:4a:36:ff:3e:c7:05:d4:5f:57:
54:14:08:1d:06:25:36:43:bf:37:6c:fc:04:54:9d:
91:eb:c7:09:38:fe:6f:d3:11:a6:3e:2a:a3:68:16:
5b:96:f5:91:d5:b8:25:5c:0d:8e:7e:c9:cc:4c:0c:
38:a1:c1:16:e4:ef:49:f4:a2:93:71:41:19:5e:cc:
ba:c9:4a:1e:0f:7f:6d:ae:36:cc:3d:38:a5:88:32:
9c:a6:ca:6d:a2:47:ab:20:4a:d9:c4:1b:55:11:bf:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:07:89:50:BC:C8:7D:94:39:C5:7F:9F:EE:8A:8A:36:A8:7F:65
X509v3 Authority Key Identifier:
keyid:77:56:BC:BB:81:BA:C9:21:68:7B:6D:C3:2F:40:C2:77:42:B4:6F:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:be:90:51:5e:51:7f:2e:c9:b5:0d:69:22:00:a0:a4:58:96:
c1:63:87:d6:2c:6a:08:72:53:da:5d:af:40:16:16:09:1d:e8:
6b:84:78:03:2c:2a:f4:2f:c8:c8:f3:d7:f1:90:fb:2d:46:78:
5d:d4:c5:a8:2f:68:09:9c:51:f3:2b:38:58:e7:7a:24:db:8c:
58:56:7d:5f:4e:c1:d5:36:e9:ee:e1:60:37:61:7a:16:c8:10:
ee:d2:8d:e2:42:e2:03:fa:f8:75:74:d3:3d:b0:61:7c:71:e0:
68:06:d4:d5:54:00:5e:ae:e3:a9:3d:f5:16:67:2e:ae:d1:9f:
5b:61:e3:7b:3f:21:f9:a4:b8:82:86:81:1d:41:5a:05:c4:8a:
94:5e:33:1f:eb:6b:6a:4b:c2:3e:f5:a8:13:29:ab:3e:cd:7c:
bc:e1:83:1f:10:6e:98:fa:ea:79:7a:3d:b2:dd:6e:2a:9f:f6:
14:e0:06:dd:83:6d:fc:23:0f:c2:89:aa:49:fd:e3:7a:5c:e3:
f8:0a:27:d9:8a:c4:28:1d:dd:98:21:30:6e:94:46:87:ca:01:
58:3c:42:5e:43:d3:3d:a5:ea:07:ac:22:46:44:e4:2c:62:85:
95:b5:de:c3:4d:1e:58:e0:4c:fc:92:2b:81:c4:4a:77:66:39:
1b:33:ab:b1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc1
NkJDQkI4MUJBQzkyMTY4N0I2REMzMkY0MEMyNzc0MkI0NkY4RTAeFw0yNjAzMTcy
MzU5MTRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzMjgwNzg5NTBCQ0M4
N0Q5NDM5QzU3RjlGRUU4QThBMzZBODdGNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKnoR/eVywShlfAWDblQ/fcs3McuknQGaqLIkFf888RuKY1390
5+b0iZZ2VHGZMIvvi/WjTUeLNnxmCs4/ow0P4Rlt+abDX9EfcE4wRk27RhLckc/l
zF60VIGwskHoWE3HdTZsqo++wSKwh7i8o7S+iz7K1LRMn9ZAT9ErWZkaXsymBUWh
Y0qCvuxU9bGT34WWmG/525y6lLRgRUo2/z7HBdRfV1QUCB0GJTZDvzds/ARUnZHr
xwk4/m/TEaY+KqNoFluW9ZHVuCVcDY5+ycxMDDihwRbk70n0opNxQRlezLrJSh4P
f22uNsw9OKWIMpymym2iR6sgStnEG1URv8mBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUQygHiVC8yH2UOcV/n+6Kijaof2UwHwYDVR0jBBgwFoAUd1a8u4G6ySFoe23D
L0DCd0K0b44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NS9kMWE4dTRHNnlTRm9lMjNETDBEQ2QwSzBiNDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2QxYTh1NEc2eVNGb2UyM0RMMERDZDBLMGI0NC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTUvZDFhOHU0RzZ5U0Zv
ZTIzREwwRENkMEswYjQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABe+kFFeUX8uybUNaSIAoKRYlsFjh9YsaghyU9pdr0AWFgkd6GuEeAMsKvQv
yMjz1/GQ+y1GeF3UxagvaAmcUfMrOFjneiTbjFhWfV9OwdU26e7hYDdhehbIEO7S
jeJC4gP6+HV00z2wYXxx4GgG1NVUAF6u46k99RZnLq7Rn1th43s/IfmkuIKGgR1B
WgXEipReMx/ra2pLwj71qBMpqz7NfLzhgx8Qbpj66nl6PbLdbiqf9hTgBt2Dbfwj
D8KJqkn943pc4/gKJ9mKxCgd3ZghMG6URofKAVg8Ql5D0z2l6gesIkZE5CxihZW1
3sNNHljgTPySK4HESndmORszq7E=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:15:25 2026 by rpki-client