Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: q8XMroxZ+Up/gEA4unvXze8X3KjNc60hP9K3miy8jWA=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: A669
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 4AA5
Signing time: Wed 18 Mar 2026 04:59:45 +0000
Manifest this update: Wed 18 Mar 2026 04:59:44 +0000
Manifest next update: Wed 18 Mar 2026 10:59:44 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: /9D9Z50YW1eRiFVlU1ovjO27JnKjO5VC0h1o4jb3Ebg=)
2: XxXXhggs9aGA0bndFttepY0P3Go.roa (hash: P1p4E28892w17aiBPhnU6+t1s0Pc9IES7M2JO7Fn+yY=)
3: fjaEc_mVudU9HIGtG2H2aVPQ2yE.roa (hash: 6WVd7iWZJDykzdlbaLY2yeHONKcQ16z85Q2rPg1BK80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42601 (0xa669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Mar 18 04:59:44 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:95:0c:9f:53:08:d5:aa:78:56:18:0c:d7:64:ba:5a:06:f9:
b0:8a:6f:de:27:34:5a:26:cf:4b:0c:c2:e7:05:03:c8:f3:f2:
28:e6:21:5f:af:82:ad:c2:c2:6a:6a:ea:68:fb:e3:2a:40:40:
68:b2:f0:39:a0:8d:e4:28:98:1b:09:e3:77:5b:7b:09:30:28:
21:37:c0:86:a6:38:ea:c3:0e:41:39:7e:18:65:2b:50:4a:22:
eb:04:db:38:69:24:7a:1d:15:3d:62:f2:38:40:36:1a:57:7e:
3c:47:2e:44:a3:98:50:22:a2:a2:a6:bc:66:c2:91:3c:e2:68:
d3:c3:ed:a7:10:13:a7:8d:e9:a1:f8:3d:86:e1:ec:e4:ba:a0:
4c:0d:fd:fd:b8:e2:a2:44:e0:a5:95:9b:8c:c8:2c:cb:19:18:
8f:c6:5a:5a:ec:8a:b7:35:de:b8:ac:38:d9:b4:09:f0:26:51:
1f:23:8d:7a:92:c8:d2:ed:5f:59:62:44:98:08:33:ab:53:fd:
43:0d:8e:c6:43:12:43:5e:e8:0c:e2:ea:f4:eb:12:de:22:ae:
99:36:4b:2f:ea:c1:0b:0f:ce:53:77:dd:a3:be:4d:d4:6e:1c:
d1:56:cd:16:4d:f4:13:d8:1e:41:f0:7b:7f:a0:96:22:e3:4c:
04:ad:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:29:44 2026 by rpki-client