Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json)
Hash identifier: qQfEormlvZXMKwx1d1IrbiT6X+2kKoFmjJ8wQK1+ZUI=
Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Certificate serial: 0F36
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
Manifest number: 0F36
Signing time: Wed 18 Mar 2026 01:01:34 +0000
Manifest this update: Wed 18 Mar 2026 01:01:34 +0000
Manifest next update: Wed 18 Mar 2026 07:01:34 +0000
Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: lcGMkSpz0dzzCdkCt6N8NYUaHl12Hr6FE7CkCB/Yy3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3894 (0xf36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Validity
Not Before: Mar 18 01:01:34 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2:
c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23:
42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12:
ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67:
06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32:
16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1:
4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f:
c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a:
e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42:
ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6:
90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7:
d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61:
17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa:
e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f:
53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7:
45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b:
c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
X509v3 Authority Key Identifier:
keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:fe:1b:e0:94:90:43:c4:88:5b:04:43:0b:be:34:78:36:
c0:05:06:cd:2d:6a:3c:b4:af:18:d8:69:09:c0:f5:9e:26:7a:
d6:58:6a:7b:51:92:7e:f5:41:a8:52:db:87:d8:92:70:7b:56:
9b:3b:30:7e:07:c9:67:d5:55:6d:69:3b:44:ff:86:57:9c:cf:
69:be:2d:ef:5b:79:c0:b4:bb:d4:b3:61:f7:47:41:97:91:c9:
97:13:28:13:43:b6:70:a8:ac:e1:72:8c:05:2e:e1:db:b6:f3:
df:66:62:d4:d4:6e:48:e8:50:37:8c:df:ee:6b:d7:53:fc:f2:
1b:3b:29:5c:8a:14:2c:9a:e0:33:3d:b2:34:5f:8e:c0:d7:de:
df:de:55:70:98:89:ae:cc:8d:27:f3:81:25:6d:31:34:8c:fa:
75:cb:d5:56:ff:04:fd:75:74:94:b1:7b:19:ca:f4:aa:86:53:
5a:07:84:1c:c9:66:52:a8:7d:8f:c8:3c:12:0d:7d:64:0e:58:
40:b1:7e:4d:58:a2:25:8c:ce:76:9a:96:0e:6f:cf:b9:76:7d:
2e:95:4e:dc:7a:0a:fa:ab:3c:88:87:5f:f9:fb:41:f0:2d:de:
e2:c0:d1:06:f0:1f:7f:f7:c0:35:39:47:66:66:f5:ef:5e:38:
40:4b:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:31:27 2026 by rpki-client