Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft
File: 0l8rHfhFF12JkzFKs-8VOushUQM.mft (raw, json)
Hash identifier: jYXtCSmuigwmKCDGnIwjb0tqqYSqvqqQSCSTaQSqPYw=
Subject key identifier: AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50
Authority key identifier: D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03
Certificate issuer: /CN=D25F2B1DF845175D8993314AB3EF153AEB215103
Certificate serial: 02F6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft
Manifest number: 02F5
Signing time: Wed 18 Mar 2026 01:01:03 +0000
Manifest this update: Wed 18 Mar 2026 01:01:03 +0000
Manifest next update: Wed 18 Mar 2026 07:01:03 +0000
Files and hashes: 1: 0l8rHfhFF12JkzFKs-8VOushUQM.crl (hash: TwP02J3v+7Eekte7jhx1CtYug2v9SahllFNiHqthphg=)
2: AGriyG3XsaomyXY3wqP5qpGbufk.roa (hash: 43km3iEPjFQcdhRCmSjkh6AivcIkq02LE0ll+nx4s3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25F2B1DF845175D8993314AB3EF153AEB215103
Validity
Not Before: Mar 18 01:01:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=AAD1ABC0C457D5B68BBDE599A858F4DBC37A0E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:9e:04:e6:0b:2a:b4:dc:ca:7f:5f:75:28:
86:85:89:d0:57:c6:78:3b:f9:68:1d:c1:67:df:84:
ee:89:9f:4c:ff:3d:9a:0f:df:6f:ad:68:82:23:db:
aa:06:82:ac:e7:b1:3c:89:45:71:b9:e6:fe:19:a2:
fd:d5:b0:80:53:d5:99:38:5b:8e:70:e0:cd:a5:d1:
7e:5b:e4:86:24:91:f2:4e:b2:66:2e:c5:94:ba:8a:
03:e3:6e:62:ae:d6:39:ae:3e:89:5e:4a:a8:83:c2:
d7:b1:dd:32:5f:9e:4c:97:bb:e3:71:0f:0f:e7:3e:
d1:6a:d8:3d:14:24:d4:b9:87:71:aa:66:25:24:7a:
32:b1:7f:78:8e:87:f1:5d:52:ea:a8:bd:3d:7f:75:
b7:77:13:fd:dc:cb:64:c2:19:a5:39:24:eb:42:94:
5e:ef:88:06:4e:4e:33:a8:a9:fd:b6:0c:5d:39:ea:
d1:6b:88:f7:bb:0e:aa:7e:ea:69:ce:56:2b:21:28:
01:90:af:90:26:6c:92:dd:2c:de:ef:0d:30:a8:a0:
4f:6f:39:7e:76:54:63:5f:90:2a:e2:0f:6c:de:2e:
3c:4e:b9:a5:4d:d5:cd:64:72:c9:69:6b:02:92:b7:
a8:62:0d:b4:10:b8:f5:1f:e6:5d:d5:1a:32:21:9c:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50
X509v3 Authority Key Identifier:
keyid:D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:59:a7:7c:a5:7a:da:92:23:4d:ec:6d:37:b9:dd:11:dd:7f:
0d:08:cf:8b:61:4c:96:22:50:8a:79:6f:f8:94:f0:d8:39:47:
13:dd:7d:bb:b6:0d:06:62:ed:e7:c9:1b:77:1c:05:94:3f:c3:
d0:20:2c:f1:80:a1:57:f3:9e:f7:a6:41:86:20:35:77:b7:ec:
6b:f6:1d:d9:8c:ba:df:49:a4:85:48:45:d4:ea:d4:4e:1e:95:
c0:a1:0c:11:1c:f1:30:12:64:a9:99:d7:fc:bf:0c:57:81:52:
e8:8b:85:93:52:e9:ff:1a:69:e3:38:d9:6f:d9:26:a7:ef:52:
eb:23:40:1b:ce:07:5b:a4:cd:85:b4:da:37:ca:06:2e:ca:6e:
bd:2d:f5:58:87:9a:d3:24:c9:4a:6b:a9:4c:30:f5:46:b1:58:
07:04:40:39:c7:9c:26:44:9f:92:8e:e6:26:7c:b0:0f:de:bb:
f1:d6:31:d0:bd:70:e9:df:bc:60:0f:b1:65:0a:75:ec:85:39:
9d:9e:0c:82:12:bd:8d:45:55:8b:2f:ac:e8:bc:71:5c:d7:5b:
6d:e1:54:5a:fd:5f:92:96:f8:8b:f6:47:b8:02:7b:dd:da:dd:
6a:b1:6f:41:de:5f:5c:cc:77:1e:db:18:68:b1:b3:44:91:fc:
64:10:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:35:47 2026 by rpki-client