Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
File: wd4p357Li9rL--H924bfKWtpCOs.mft (raw, json)
Hash identifier: n0GYbkd+kznuAlxqUElPYIXVUOa6hOzMSa6wFIdFYpg=
Subject key identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Certificate serial: 36D0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
Manifest number: 36BE
Signing time: Wed 18 Mar 2026 02:28:59 +0000
Manifest this update: Wed 18 Mar 2026 02:28:59 +0000
Manifest next update: Wed 18 Mar 2026 08:28:59 +0000
Files and hashes: 1: 1-DT5N4BVnYL4adLY10dJcE271Q.roa (hash: UnTAl2o0f9TBX/631I/Ht7IBWTLisaKq0cn2qfGi4pg=)
2: Z5Om1pGyKlhixdvGRYKtjQfJxGw.roa (hash: dugH52tYqaFB0ihOqeTEW+VxDZ1u0aYG8vb2c2hAbhc=)
3: cY6S44cRDedEJFUdnqIJXhck4FU.roa (hash: k0KFYNwYTHa5wPizu6wqiaO0BMIC/WkhkLQPzW1jjCo=)
4: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (hash: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=)
5: wd4p357Li9rL--H924bfKWtpCOs.crl (hash: 3JcIeDC5JYS6s0lv95cx4yvB83xQ98J8J13s9r5ls44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14032 (0x36d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Validity
Not Before: Mar 18 02:28:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D50904F288CA106FC94061AABDF81FBD35239B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ec:55:7c:6b:01:58:d8:57:d8:e3:34:70:
09:65:59:ad:b7:bd:fd:33:c7:21:f7:53:05:f8:4e:
52:4a:85:1a:f7:7c:06:db:55:c2:b2:d7:09:55:d5:
39:a2:2c:2b:2a:70:29:13:35:99:ca:d8:bf:59:d5:
ba:e4:24:48:6f:73:98:44:3d:ac:6d:3d:47:75:d1:
11:fe:8c:e6:01:4e:52:b5:8c:fc:79:d7:c5:75:ea:
a8:23:6d:91:87:e8:5a:aa:95:9f:13:91:de:25:77:
45:9d:9f:19:20:36:3a:5e:7a:0a:03:f0:94:29:e2:
0c:19:09:23:ce:6a:08:74:e5:b9:67:ab:9b:67:31:
f1:24:9a:5f:12:81:5e:0c:a0:6d:c6:14:4e:b0:e5:
ff:a4:f9:9d:27:47:16:d5:ea:ae:27:e8:1b:e7:71:
74:d6:9f:99:11:62:d8:7a:ba:3b:5a:2b:73:37:33:
02:6c:58:11:7d:95:13:20:95:ec:0a:68:b1:fb:4a:
9f:ce:25:9d:6c:f2:00:c5:e9:d7:9b:a2:62:84:ee:
47:26:88:dc:5d:1e:e6:27:7c:91:0b:08:59:7b:0a:
32:f3:c9:59:12:57:8c:b4:c9:e9:82:a5:6e:b4:96:
5c:ad:99:7e:74:e5:91:9d:f5:cd:37:28:11:7d:41:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
X509v3 Authority Key Identifier:
keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:79:a8:4b:ea:41:45:80:6d:f8:19:f9:a4:24:bb:0d:1a:
bc:42:f1:9d:57:d0:37:71:54:e6:51:a4:8b:73:3f:af:f0:b6:
14:c1:ec:5d:4e:f8:ec:4e:c3:33:2c:8d:e5:5d:6d:0c:7b:34:
e2:c0:f6:1b:d0:ee:c8:bb:26:db:a1:67:46:a8:21:6c:8e:f4:
e9:af:56:43:9e:19:8f:28:33:31:12:23:62:25:78:98:eb:49:
94:e2:cd:32:5e:90:de:f5:ca:cd:4e:77:ab:2c:3e:b9:7a:20:
57:87:e6:0c:b8:f1:b9:61:ad:57:ac:a8:de:43:ea:b0:cb:0d:
5e:cc:c1:47:e3:f7:28:83:45:91:6a:00:58:b9:13:ff:ce:1a:
a6:20:69:eb:99:1e:93:be:0b:2c:56:97:20:64:b4:e1:05:ef:
14:28:1a:2d:9f:af:80:20:5f:7f:09:fd:1e:88:8a:55:33:39:
d5:f9:3a:45:3b:5d:57:22:a2:4b:d6:9e:62:94:c0:2b:95:8c:
81:cd:91:95:dd:88:9b:d3:dd:ed:f9:bb:92:fc:9b:80:9c:16:
47:a5:14:38:57:ac:a1:6c:bb:3c:16:58:08:bc:11:63:5d:cb:
c9:4a:a5:ba:1a:af:d6:d2:07:bf:08:3a:77:59:74:83:50:68:
64:01:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:13:11 2026 by rpki-client