Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft
File: f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft (raw, json)
Hash identifier: t6vOSycxS0EJEKoKwTX+Kdj3Q3Wz3zccppQyBFWOFRY=
Subject key identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C
Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45
Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245
Certificate serial: 0F60
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft
Manifest number: 0F5B
Signing time: Wed 18 Mar 2026 02:59:02 +0000
Manifest this update: Wed 18 Mar 2026 02:59:02 +0000
Manifest next update: Wed 18 Mar 2026 08:59:02 +0000
Files and hashes: 1: 3kY-W2DzzQgIYqWj02E7erQNW4c.roa (hash: nRO2jqx2JO4q4Ht0LRbD0tkIA6beoFq/ALxWOLJtGCE=)
2: _BP2LqZJMcOyQvNBpa3Q47BT6oA.roa (hash: yDSr2meIUpsVWLqpJTPM9gyFnwq268HREVuKgOGwG1Y=)
3: f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl (hash: +Mw2Ti1i22VHwG9n/OuD21MGpHISMNIS7Z0NE4b2UMg=)
4: oGei8yg9fd9SkrzhzuLc-JojTYY.roa (hash: 2V/6e6KOfi1svdPiW7H733/F3UuvvZUsPn4oRJj/Udc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3936 (0xf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245
Validity
Not Before: Mar 18 02:59:02 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=229A4488A06AE99167E29F0F5A53BEC21DE1AF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:be:bb:ac:d1:89:8b:e9:9a:bd:0b:83:83:
9c:a1:61:ea:25:ae:7c:c1:ca:6d:8b:87:e0:26:fd:
c1:96:8f:48:ce:ef:af:d8:a8:d4:7f:d1:60:3d:53:
7e:5c:f8:19:fb:bc:08:e2:9b:aa:84:76:cc:8f:d1:
ff:37:07:44:cd:5f:44:d8:94:2b:8e:47:8e:ee:b6:
26:a5:83:8d:22:a9:b6:b3:2e:83:84:0c:a4:1a:b3:
e7:43:ab:32:25:a3:7a:d1:7e:52:6c:6c:63:d5:e3:
c7:34:37:4b:81:10:bd:cf:c5:4f:be:90:ea:27:fa:
9b:52:ae:60:00:63:e1:4e:d0:3c:99:d3:e2:59:b4:
b6:b3:1b:c1:0a:e2:46:e7:5a:73:f3:b7:86:c7:fc:
5c:fe:0c:29:61:b8:4d:fa:b1:fa:d5:a5:ca:2f:4e:
25:06:03:4c:89:c1:53:ff:18:2c:19:3b:74:b3:76:
1b:75:22:7e:04:00:7d:8d:60:d1:f2:33:df:ec:54:
bc:2b:30:4f:8f:d7:11:21:7e:d5:32:5a:74:81:dc:
6c:68:72:4b:32:68:55:4f:6a:1c:1b:0e:7a:86:32:
8e:32:ce:2f:96:03:00:e8:f2:49:45:83:78:8a:51:
e5:27:23:8d:c2:1f:b5:7f:8c:e3:eb:7b:e4:24:b1:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C
X509v3 Authority Key Identifier:
keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c7:c9:b3:24:51:50:4b:23:93:08:54:15:60:bd:92:4b:b2:
aa:ac:a7:df:68:fb:dc:9f:86:bb:42:75:f7:7b:c1:d4:7e:8c:
04:03:e6:eb:6d:cb:f3:fd:1c:a2:e1:99:9b:22:99:30:fa:0d:
d6:d4:ab:ab:4c:ae:36:00:7f:31:2c:77:17:82:0a:3e:c9:1e:
08:5e:68:cb:e7:2c:5f:d2:62:45:6f:1e:57:66:60:b6:79:ce:
87:01:bb:6a:3c:fa:37:c2:ae:ce:d8:6f:4a:a3:22:2c:4d:f3:
e8:3a:1f:53:0c:4c:9b:e8:7b:53:dd:b6:54:11:b1:c7:c2:71:
4b:63:aa:48:0d:1f:27:86:80:22:bf:16:b7:36:b4:b8:bb:24:
3b:7b:aa:85:73:00:8c:a2:86:e1:d6:65:ed:68:f1:90:a5:8f:
b9:b1:74:47:a8:38:db:cd:68:b1:bf:d8:92:a6:af:04:72:26:
11:41:9e:eb:22:15:67:b6:6f:f4:cd:0e:64:9f:ef:84:47:14:
d0:e9:d8:71:c4:15:c2:bb:0a:cc:9d:f8:6f:0c:5f:85:ec:a2:
14:17:1a:a9:5c:e5:71:13:e9:f6:7f:6b:97:50:ea:fe:21:64:
54:28:e4:75:7b:65:63:b0:9a:1d:f4:39:48:43:ac:47:24:d2:
0e:d4:b6:09
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5
MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNjAzMTgw
MjU5MDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDIyOUE0NDg4QTA2QUU5
OTE2N0UyOUYwRjVBNTNCRUMyMURFMUFGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHhb67rNGJi+mavQuDg5yhYeolrnzBym2Lh+Am/cGWj0jO76/Y
qNR/0WA9U35c+Bn7vAjim6qEdsyP0f83B0TNX0TYlCuOR47utialg40iqbazLoOE
DKQas+dDqzIlo3rRflJsbGPV48c0N0uBEL3PxU++kOon+ptSrmAAY+FO0DyZ0+JZ
tLazG8EK4kbnWnPzt4bH/Fz+DClhuE36sfrVpcovTiUGA0yJwVP/GCwZO3Szdht1
In4EAH2NYNHyM9/sVLwrME+P1xEhftUyWnSB3GxocksyaFVPahwbDnqGMo4yzi+W
AwDo8klFg3iKUeUnI43CH7V/jOPre+QksWjNAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUIppEiKBq6ZFn4p8PWlO+wh3hrywwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc
CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvZjVHTThtVUQwZm04
LW5mY0NxV1NwWDNmZ2tVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALLHybMkUVBLI5MIVBVgvZJLsqqsp99o+9yfhrtCdfd7wdR+jAQD5utty/P9
HKLhmZsimTD6DdbUq6tMrjYAfzEsdxeCCj7JHgheaMvnLF/SYkVvHldmYLZ5zocB
u2o8+jfCrs7Yb0qjIixN8+g6H1MMTJvoe1PdtlQRscfCcUtjqkgNHyeGgCK/Frc2
tLi7JDt7qoVzAIyihuHWZe1o8ZClj7mxdEeoONvNaLG/2JKmrwRyJhFBnusiFWe2
b/TNDmSf74RHFNDp2HHEFcK7Csyd+G8MX4XsohQXGqlc5XET6fZ/a5dQ6v4hZFQo
5HV7ZWOwmh30OUhDrEck0g7Utgk=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:31:19 2026 by rpki-client