Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
File: A_B12cbxjcCb2mK3CH6oDcW3EcU.mft (raw, json)
Hash identifier: R9FisfEwchIjPVfM/eIOFiUBGo4Wb0ix1pL0Uz5L4kw=
Subject key identifier: 59:BD:DE:EC:FF:BC:DF:DB:7F:B9:34:74:4B:91:BE:CE:0D:5E:F5:0C
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial: 27AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
Manifest number: 278A
Signing time: Wed 18 Mar 2026 01:00:43 +0000
Manifest this update: Wed 18 Mar 2026 01:00:43 +0000
Manifest next update: Wed 18 Mar 2026 07:00:43 +0000
Files and hashes: 1: 0FSVK6s04HHBN8epe9fP2wVDWH8.roa (hash: 3NwXayRgOaHm4yyAt+gwo8VvokNDN1y5+kh9Wr8A518=)
2: 26nfclt7wbiQRG1tuar1edqlPuQ.roa (hash: 7bRbPfslXEs3TjEM4CrcO8B9RJYVR53bUL6SReCjYeg=)
3: A_B12cbxjcCb2mK3CH6oDcW3EcU.crl (hash: KtIHpMmQajH3seeeT1hP49k7xPzYTctY+9xK8lru5fA=)
4: RKrRwdp1VyFPQ7YbOEvL0wAMGbA.roa (hash: oU8zQEw2eThFvF/D8BoL4kKFFC2d3GWIrdQQ9ZEQibs=)
5: SJcJOm94YNprsBDmeCqmWx-C3LQ.roa (hash: KXDOAJ6r4lJzy0HEh/J4AvyHcXZql3168riO6sZOp+U=)
6: V_7hTWVFCqFCyXBTaJlyeP7nJEM.roa (hash: cz4GgmIXHdIcCIecSCmWFQ5YJfIeBJwaw6JfOzuSyhw=)
7: xV8ygWjfpKQ9Oad95gT5LAdGa10.roa (hash: u57mFXwZsJ/ZGyKdm3KF3eMYd8r+NX1Rduny/5/lc9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10157 (0x27ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Validity
Not Before: Mar 18 01:00:43 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=59BDDEECFFBCDFDB7FB934744B91BECE0D5EF50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:0e:89:3e:40:82:0e:7a:8d:6d:a9:30:f4:
8d:d2:ed:71:78:21:45:90:ec:bc:89:e6:53:69:e9:
bb:5c:81:72:b6:6f:58:fe:09:2b:59:58:eb:d0:13:
ed:23:72:e8:4a:ff:14:b2:e3:5d:97:68:a3:60:c4:
8b:27:6a:60:6d:76:21:ab:1e:fa:d3:c1:ee:12:39:
d7:18:b2:15:27:38:48:3b:71:0a:6f:82:cb:f0:e9:
ac:33:24:69:04:19:6e:fb:d3:3b:12:58:41:42:55:
14:41:0a:b9:c2:0d:c8:68:85:bf:36:1f:d1:a2:e3:
9c:9b:c7:ba:51:96:3a:2d:c7:2d:29:f3:f3:08:45:
6f:0a:03:1a:ae:ed:d9:a5:b6:6e:7b:1a:58:1e:e5:
d6:a7:b0:ef:e0:48:8b:48:ad:c3:2c:70:90:a9:c9:
ba:4e:75:0c:65:01:15:7a:3f:6f:3b:89:a3:28:3b:
a9:79:ea:14:9a:d3:fb:11:9e:37:7f:c0:10:73:12:
36:eb:2f:e4:ee:cc:12:42:d7:16:39:73:8c:b8:9f:
c3:bf:be:5c:6f:ea:de:fc:ea:32:7d:17:85:f1:15:
ab:79:b7:af:13:59:3a:d8:23:2f:8b:d6:f9:c9:a4:
cc:30:d1:26:9d:2f:ee:e9:45:03:f6:59:35:55:bc:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:DE:EC:FF:BC:DF:DB:7F:B9:34:74:4B:91:BE:CE:0D:5E:F5:0C
X509v3 Authority Key Identifier:
keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:b4:ee:37:d3:6d:40:da:62:af:3b:f6:40:81:01:4f:71:
ff:89:58:53:e3:52:a8:a8:00:9f:a2:21:9b:18:6c:8a:a6:fe:
d4:9b:3f:27:52:30:03:a7:47:6e:3b:17:f5:b2:2d:5a:19:f4:
2b:1a:27:2b:4c:c0:bb:80:0e:cd:c5:82:b8:d6:51:63:52:3e:
c6:36:de:7f:59:c4:cd:ae:24:bc:b9:20:cb:2e:d1:38:b7:f4:
cd:c8:b7:11:aa:b4:d5:77:4f:06:e2:29:4e:d1:51:f8:3c:13:
a7:c1:3d:37:07:86:46:19:f8:b1:bd:c9:f4:63:e3:f6:5d:e7:
e9:3f:80:c0:1c:15:44:53:b9:4b:45:60:8e:54:e9:50:32:bb:
52:7a:b3:98:4f:5d:07:4f:a6:f4:d8:59:87:ad:9d:92:8a:8c:
b2:5f:17:38:a2:26:0f:94:35:40:3e:18:94:19:3c:7c:05:4d:
30:a3:3e:e3:82:b8:07:7a:7e:d5:34:46:8f:b7:25:dd:6b:7d:
aa:58:b0:46:eb:57:b8:49:fa:80:b1:05:d4:a9:0a:67:61:76:
d0:d7:42:11:05:0a:32:58:85:54:42:17:81:15:02:44:06:29:
74:35:51:43:73:18:09:38:2d:c7:f5:26:4b:be:5c:89:40:c1:
b4:fe:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:05:34 2026 by rpki-client