
Error: rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Error: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer: certificate revoked on Wed 18 Mar 2026 05:22:16 +0000
Manifest
$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.mft
File: 7tDnZmUnL6-VwxBOrhgr0tWggAs.mft (raw, json)
Hash identifier: 5qRyMebpJN4VBY4nIslqx1mzi92uP21diWGNJtKy46Q=
Subject key identifier: 0C:24:2B:0D:DD:F4:86:D0:17:92:CF:5E:37:05:1C:6C:23:12:C7:8C
Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Certificate serial: 1AEB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.mft
Manifest number: 1ADF
Signing time: Wed 18 Mar 2026 04:59:42 +0000
Manifest this update: Wed 18 Mar 2026 04:59:42 +0000
Manifest next update: Wed 18 Mar 2026 10:59:42 +0000
Files and hashes: 1: 7tDnZmUnL6-VwxBOrhgr0tWggAs.crl (hash: DsrgNzsSmreABGfaDuDPy8Svas5blXM2jFLzWVK+Jf4=)
2: 8COYu9w4VilrwhRPXnD2GOb4HqY.roa (hash: DCTT7n4r1jtqDJT+oK/JdlvytI6Xe3jmy1cbSkTcILk=)
3: EMIPj4O3mcBzvCFcm5wmIKTACRc.roa (hash: ALmEIxHla9i7LfYdUVB1V5X39RRvoay1gMJd+t6X4Bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6891 (0x1aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Validity
Not Before: Mar 18 04:59:42 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0C242B0DDDF486D01792CF5E37051C6C2312C78C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:1b:b5:91:62:eb:4e:7a:e2:58:82:f2:fb:
9c:53:ee:05:49:38:1a:75:e8:ad:46:f4:64:87:29:
d8:80:a4:69:f1:a1:ba:4b:b9:6b:10:48:11:ac:e6:
11:8b:c4:b1:fc:59:78:bf:e6:ff:9d:0a:d6:68:4e:
7e:9a:cb:63:95:d4:69:8d:15:13:65:51:66:ac:8a:
ef:83:e9:74:e8:ac:6d:25:4f:26:22:97:90:c3:2e:
2d:86:b1:71:ab:5b:bc:01:da:3d:44:12:f3:be:9d:
10:2e:a3:15:f5:b8:35:b6:6c:9d:26:43:22:ed:27:
de:30:75:ce:83:89:7f:c7:81:31:a6:65:e7:ef:4d:
18:d8:83:44:dd:0c:38:ac:9a:64:43:f1:0a:62:80:
dc:0f:33:02:0c:51:d4:b2:0c:e4:44:65:74:e9:b3:
61:e6:8e:c2:81:a2:c3:c1:cd:0b:4d:ee:f0:8b:fa:
04:95:e7:69:db:70:e0:aa:c1:a8:56:80:85:a4:45:
e7:5d:f1:ed:05:e2:94:e3:1c:39:15:c6:25:36:d2:
02:d1:c4:d4:57:18:b5:57:44:81:aa:0d:ca:d3:d8:
c7:38:67:59:7c:e1:34:4f:7d:5e:05:2a:47:2c:97:
34:85:23:40:56:a5:19:96:69:8c:92:c6:d8:4e:fb:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:24:2B:0D:DD:F4:86:D0:17:92:CF:5E:37:05:1C:6C:23:12:C7:8C
X509v3 Authority Key Identifier:
keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:63:56:d7:b4:67:df:a8:9d:e6:e2:01:9e:4a:c4:ce:53:
7c:d4:9c:a9:42:1f:4a:f1:49:d5:85:03:3e:ee:f9:0d:1a:81:
33:46:fb:54:fc:33:3a:4f:d7:21:0b:23:b9:ba:89:1c:e4:09:
12:ef:15:07:01:ca:d9:72:ee:95:f2:74:75:9b:eb:72:1e:dd:
88:8d:8e:2e:21:ca:9e:90:56:0b:da:aa:4f:30:9b:e2:4b:30:
56:12:0d:ec:9d:22:ff:f3:73:d1:95:80:51:af:51:c7:9b:41:
fd:ff:0e:21:18:c8:22:be:a5:e9:f2:6e:2a:4a:1e:4e:ef:de:
16:60:50:7c:68:79:c2:c3:dd:83:4e:c8:cf:bf:7b:c3:af:67:
c7:4f:46:13:1b:c9:aa:c5:e2:6c:7e:6f:af:2e:6d:eb:e9:48:
f8:e9:6e:71:0a:86:69:13:41:9b:9b:72:69:3f:6e:d8:22:40:
4f:43:a4:59:0b:5d:ce:9d:de:8b:49:63:af:00:17:24:c0:60:
42:27:a7:2c:33:3b:3b:5a:d2:bb:30:08:b9:0f:73:00:b5:7f:
0b:07:11:ed:22:83:d9:ae:59:8f:a7:ec:29:3d:53:e7:a0:c4:
96:aa:28:1d:51:f0:01:37:45:67:8c:e3:14:0f:4a:92:0e:79:
85:ea:fb:cb
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICGuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUVE
MEU3NjY2NTI3MkZBRjk1QzMxMDRFQUUxODJCRDJENUEwODAwQjAeFw0yNjAzMTgw
NDU5NDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBDMjQyQjBERERGNDg2
RDAxNzkyQ0Y1RTM3MDUxQzZDMjMxMkM3OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA5hu1kWLrTnriWILy+5xT7gVJOBp16K1G9GSHKdiApGnxobpL
uWsQSBGs5hGLxLH8WXi/5v+dCtZoTn6ay2OV1GmNFRNlUWasiu+D6XTorG0lTyYi
l5DDLi2GsXGrW7wB2j1EEvO+nRAuoxX1uDW2bJ0mQyLtJ94wdc6DiX/HgTGmZefv
TRjYg0TdDDismmRD8QpigNwPMwIMUdSyDOREZXTps2HmjsKBosPBzQtN7vCL+gSV
52nbcOCqwahWgIWkRedd8e0F4pTjHDkVxiU20gLRxNRXGLVXRIGqDcrT2Mc4Z1l8
4TRPfV4FKkcslzSFI0BWpRmWaYySxthO+0ULAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUDCQrDd30htAXks9eNwUcbCMSx4wwHwYDVR0jBBgwFoAU7tDnZmUnL6+VwxBO
rhgr0tWggAswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAy
Ny83dERuWm1Vbkw2LVZ3eEJPcmhncjB0V2dnQXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzd0RG5abVVuTDYtVnd4Qk9yaGdyMHRXZ2dBcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMjcvN3REblptVW5MNi1W
d3hCT3JoZ3IwdFdnZ0FzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGCAY1bXtGffqJ3m4gGeSsTOU3zUnKlCH0rxSdWFAz7u+Q0agTNG+1T8MzpP
1yELI7m6iRzkCRLvFQcBytly7pXydHWb63Ie3YiNji4hyp6QVgvaqk8wm+JLMFYS
DeydIv/zc9GVgFGvUcebQf3/DiEYyCK+penybipKHk7v3hZgUHxoecLD3YNOyM+/
e8OvZ8dPRhMbyarF4mx+b68ubevpSPjpbnEKhmkTQZubcmk/btgiQE9DpFkLXc6d
3otJY68AFyTAYEInpywzOzta0rswCLkPcwC1fwsHEe0ig9muWY+n7Ck9U+egxJaq
KB1R8AE3RWeM4xQPSpIOeYXq+8s=
-----END CERTIFICATE-----
Generated at Thu Sep 10 00:10:49 2026 by rpki-client