Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
File: fOXOA9K0n058QIor97wEpeqCTms.mft (raw, json)
Hash identifier: k/EB/cCceTL1GPBPXFG86fSIpsH1mKxdE9d5Ej7LhG8=
Subject key identifier: AE:28:37:93:FA:DB:95:28:EA:3C:C6:C2:61:60:29:0B:88:0A:92:E5
Authority key identifier: 7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
Certificate issuer: /CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Certificate serial: E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
Manifest number: DE
Signing time: Wed 18 Mar 2026 02:58:57 +0000
Manifest this update: Wed 18 Mar 2026 02:58:57 +0000
Manifest next update: Wed 18 Mar 2026 08:58:57 +0000
Files and hashes: 1: VUqIDMTtELKIYrxAqK_hUi9wDww.roa (hash: f4A4tnRN0eQ8pw+ILPCNER3LHOoKHgYuaz681BtdDus=)
2: fOXOA9K0n058QIor97wEpeqCTms.crl (hash: J2joelcvbaZGZK+sR8vEZg2UFK1kI4BQUYDBZs+oIrk=)
3: vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa (hash: Ez3G/6FV77f1KQ1yizzdm8rRAToXRUstPgobHTnrtdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Validity
Not Before: Mar 18 02:58:57 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=AE283793FADB9528EA3CC6C26160290B880A92E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:53:9a:c9:2a:61:03:15:ce:39:94:a9:e5:
8b:97:15:ae:c2:bc:37:8e:5a:5e:95:ac:78:b2:b9:
a8:09:28:7c:da:96:18:d9:4c:71:a5:00:5e:a1:e6:
1f:da:82:0d:c1:40:e2:3b:03:f8:1f:77:97:27:5b:
77:c0:52:e0:f8:07:70:75:3f:22:21:60:ee:2c:f6:
c0:b6:72:6b:67:1a:f1:70:64:3c:af:cf:23:7c:65:
5c:ba:e1:f0:77:43:d8:01:6a:ee:25:f2:07:6f:0c:
36:e1:9f:87:8b:9f:e1:b5:db:52:31:39:7b:6e:c4:
f9:5f:10:6c:fb:38:e7:66:9c:2c:8e:06:e3:28:5b:
8c:fa:83:30:4f:f3:a0:18:c6:24:a0:6d:b6:dd:b8:
39:73:e1:b4:4f:f4:97:23:01:3d:6b:05:20:eb:3a:
20:a9:f7:a6:2c:e1:2a:24:4d:ac:86:c8:ab:d0:8e:
a0:2e:67:32:d8:88:c8:d1:c6:8d:0f:b1:69:6b:f5:
ca:b6:0b:69:ae:1a:53:a0:90:a7:51:cf:ad:23:2b:
8b:af:a5:44:88:ca:db:e9:30:0f:4f:09:90:42:51:
02:d4:95:2f:31:f6:78:1d:e1:b4:38:6f:c9:f5:6b:
38:79:5b:e9:ab:bc:66:c2:7a:39:b2:f1:36:4a:4e:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:37:93:FA:DB:95:28:EA:3C:C6:C2:61:60:29:0B:88:0A:92:E5
X509v3 Authority Key Identifier:
keyid:7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d3:ce:85:08:ff:dc:59:13:1c:8d:b4:d9:91:63:f9:18:22:
22:0a:75:d9:92:f7:9c:fb:99:e3:b5:0d:eb:3b:ff:b8:22:4e:
67:e0:38:b8:ff:cb:a2:f3:e6:9a:00:01:47:ae:5f:fe:33:a2:
48:b0:a7:b4:de:ef:4d:27:ac:04:fc:11:98:ef:9c:9c:e2:e1:
62:0b:22:a4:f7:b7:8d:ac:02:f7:ed:77:08:08:97:48:aa:fd:
be:ac:9a:7b:11:e1:61:60:c7:0e:34:3a:10:de:0a:bd:8b:92:
b7:6a:6d:20:a3:89:93:f4:60:d8:79:ca:d0:4d:4d:4a:29:9a:
29:22:b0:5d:f6:84:dd:ac:66:b3:a2:51:6b:ae:ed:05:92:b5:
f3:54:23:e8:f5:8f:5f:9f:b2:86:7f:9d:d4:91:2a:90:3b:8f:
f1:9c:82:6a:26:31:cd:25:aa:de:17:4d:87:f1:83:36:f5:a6:
07:d9:06:7a:63:ff:04:5b:a5:77:38:d1:61:7a:c8:0f:7e:b1:
e4:69:e9:03:9a:53:be:fd:27:b7:b3:6f:45:36:46:b3:1c:7a:
12:b3:38:f0:6a:ba:95:93:d4:bf:03:45:61:f0:0f:a8:6a:f6:
c0:94:ba:de:d3:fe:49:07:a9:ea:c0:ee:ff:0e:6a:70:a3:d0:
5c:2f:46:6b
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0NF
NUNFMDNEMkI0OUY0RTdDNDA4QTJCRjdCQzA0QTVFQTgyNEU2QjAeFw0yNjAzMTgw
MjU4NTdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEFFMjgzNzkzRkFEQjk1
MjhFQTNDQzZDMjYxNjAyOTBCODgwQTkyRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC00FOaySphAxXOOZSp5YuXFa7CvDeOWl6VrHiyuagJKHzalhjZ
THGlAF6h5h/agg3BQOI7A/gfd5cnW3fAUuD4B3B1PyIhYO4s9sC2cmtnGvFwZDyv
zyN8ZVy64fB3Q9gBau4l8gdvDDbhn4eLn+G121IxOXtuxPlfEGz7OOdmnCyOBuMo
W4z6gzBP86AYxiSgbbbduDlz4bRP9JcjAT1rBSDrOiCp96Ys4SokTayGyKvQjqAu
ZzLYiMjRxo0PsWlr9cq2C2muGlOgkKdRz60jK4uvpUSIytvpMA9PCZBCUQLUlS8x
9ngd4bQ4b8n1azh5W+mrvGbCejmy8TZKTrSzAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUrig3k/rblSjqPMbCYWApC4gKkuUwHwYDVR0jBBgwFoAUfOXOA9K0n058QIor
97wEpeqCTmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2
My9mT1hPQTlLMG4wNThRSW9yOTd3RXBlcUNUbXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZPWE9BOUswbjA1OFFJb3I5N3dFcGVxQ1Rtcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjMvZk9YT0E5SzBuMDU4
UUlvcjk3d0VwZXFDVG1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHPTzoUI/9xZExyNtNmRY/kYIiIKddmS95z7meO1Des7/7giTmfgOLj/y6Lz
5poAAUeuX/4zokiwp7Te700nrAT8EZjvnJzi4WILIqT3t42sAvftdwgIl0iq/b6s
mnsR4WFgxw40OhDeCr2LkrdqbSCjiZP0YNh5ytBNTUopmikisF32hN2sZrOiUWuu
7QWStfNUI+j1j1+fsoZ/ndSRKpA7j/GcgmomMc0lqt4XTYfxgzb1pgfZBnpj/wRb
pXc40WF6yA9+seRp6QOaU779J7ezb0U2RrMcehKzOPBqupWT1L8DRWHwD6hq9sCU
ut7T/kkHqerA7v8OanCj0FwvRms=
-----END CERTIFICATE-----
Generated at Thu Apr 16 11:09:49 2026 by rpki-client