Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
File: AvsF3jxUSp8cNEpj619s_dNIEVY.mft (raw, json)
Hash identifier: PFr/Ex2qefhUqiOIoDlr2HPgELNi2/NaiJH2iCAFUKQ=
Subject key identifier: 96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 1975
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
Manifest number: 194E
Signing time: Wed 18 Mar 2026 00:59:50 +0000
Manifest this update: Wed 18 Mar 2026 00:59:50 +0000
Manifest next update: Wed 18 Mar 2026 06:59:50 +0000
Files and hashes: 1: 4BLZJi41_vWONfweoJM3zBb_vj0.roa (hash: nmJ7Cwv3ZEqUXMRqyY034vsKxXf6IoPwGIioh41JaEI=)
2: AvsF3jxUSp8cNEpj619s_dNIEVY.crl (hash: 7bJ0vfgy3zD+AhMe/PONY+pX4SSwAheVFNj0WpzPM4U=)
3: IlPO1AmLglxYNr-pATX8xLR6erQ.roa (hash: 4O3c5Dg3YlKercskTjYS1XxG5j6Q/Z2Tc9EoPANpsVc=)
4: IxfXHNiBwSEY3syFEveMg9rTGdc.roa (hash: qTU9G9vLx/wbmANvRoLhDvI0zLzaMF2Lznqib2Xc41o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6517 (0x1975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Mar 18 00:59:50 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=96012E597C588B4E7AC6FB9E926EA61074F30DA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:54:81:ef:cb:36:e1:7c:3b:bc:e9:68:a0:9f:
3d:66:05:59:9b:81:6e:b8:af:11:13:6c:07:a7:27:
25:11:7f:9e:09:8e:e8:bd:d7:55:f9:98:76:22:7c:
87:3b:46:e1:cd:aa:a1:a5:b0:02:69:6d:fc:4b:54:
e7:cf:36:49:b3:16:09:b9:b9:df:ad:00:fe:c0:2c:
bf:5e:34:8f:a6:e5:ba:d2:37:d3:56:b7:d5:f2:94:
2a:06:95:b3:b3:c6:df:95:0d:58:14:ca:ab:db:6c:
e8:df:11:9a:0b:65:fb:93:3d:37:2c:f5:b5:b8:97:
4b:1d:89:56:0b:3c:e3:b8:58:39:3e:03:85:97:51:
bb:69:7f:f8:bd:86:21:23:b9:e8:2a:f4:24:30:d0:
37:40:f6:86:f5:35:5d:cd:cd:8e:0a:d6:7a:eb:af:
32:7c:2a:39:8d:cb:32:bb:31:09:37:f2:96:e9:89:
bb:c2:e3:54:3d:1e:98:82:c1:01:88:0e:8c:76:b7:
bf:36:0f:14:cb:dc:6f:de:77:c4:30:7a:69:ab:ba:
1b:c9:d0:34:1f:46:6b:58:fb:22:4d:4b:e3:1e:d5:
12:14:f8:ec:d7:87:8e:06:13:1c:bc:6a:7b:f2:08:
6f:85:77:3a:62:6b:87:88:8b:42:ea:87:8c:6f:e8:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:39:a9:62:3b:07:4c:ee:82:e4:35:65:9d:f2:71:fb:c7:
07:57:b5:11:2f:06:1d:ae:ae:5f:85:45:01:5c:0a:4d:ee:93:
fa:9a:ff:72:f9:71:53:e2:f4:9e:d2:5c:aa:e9:a2:df:ee:f4:
56:ae:4a:0f:bc:35:de:6c:d6:45:48:bc:98:16:a5:2c:09:02:
bc:ae:11:00:62:91:6d:e1:5c:f3:04:ae:c4:1b:91:a0:53:07:
a2:7e:ff:9b:57:35:50:b0:fa:17:ac:a8:0e:3f:02:da:a1:6a:
cf:cb:b0:c0:f4:26:ce:d9:a2:0f:87:4b:18:d3:e7:6c:17:38:
d5:23:6c:57:6c:65:75:b1:1a:09:65:59:02:21:14:8a:86:a0:
bf:40:d1:2a:c2:ca:f7:f1:4a:50:7b:b6:06:e0:5f:a7:40:d0:
57:39:21:77:1f:5f:f1:23:91:bd:ff:41:4d:a6:af:4d:60:45:
9a:d1:10:7f:46:fa:80:da:93:2e:88:60:ab:cc:4a:07:ae:2e:
8e:d9:dc:2a:0a:19:4e:9b:bd:bd:aa:3a:53:5b:0d:81:c0:d1:
31:37:ac:e3:75:13:4e:74:71:bd:da:7f:37:84:01:c6:6c:f6:
e4:1a:df:75:57:0a:2c:ba:e0:73:73:16:dd:01:83:15:0a:23:
60:17:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:31:35 2026 by rpki-client