Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft
File: TKnrtNTELADG1a1ccPtrRXZYMXc.mft (raw, json)
Hash identifier: K4vdujcZJwr0KDXqqrp/V+NxZLZgLZyhZscNGgH0sG4=
Subject key identifier: AD:D2:3B:B7:E0:3D:1C:25:2C:A7:A0:ED:D2:87:53:CB:C1:7D:86:62
Authority key identifier: 4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77
Certificate issuer: /CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177
Certificate serial: 05D5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft
Manifest number: 05D1
Signing time: Wed 18 Mar 2026 01:01:40 +0000
Manifest this update: Wed 18 Mar 2026 01:01:40 +0000
Manifest next update: Wed 18 Mar 2026 07:01:40 +0000
Files and hashes: 1: TKnrtNTELADG1a1ccPtrRXZYMXc.crl (hash: qlhBfmon2ovC+zm6KWAmnYIYZrT+2ViVCSO5yfQ1C8c=)
2: g_rwJqn620T5ukN94yTzIjH-qVo.roa (hash: 96Avw8eFjSbQ575II11/refxqKik+Cak4C6VORPkNEs=)
3: vRMEkXhgMgYExHesqADIPCrhlMY.roa (hash: Qi9qPsWUwvCaipSHqdP/turP9n7D7ImvplBkZhPm8Ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177
Validity
Not Before: Mar 18 01:01:40 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=ADD23BB7E03D1C252CA7A0EDD28753CBC17D8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:7c:2a:59:0b:f4:f7:2c:ae:6f:07:1c:0a:
ec:1a:4f:06:d5:0b:eb:2f:f0:a3:4d:9c:9e:a9:d4:
ba:04:ba:01:35:0d:73:ff:81:12:ad:6d:0e:a8:0e:
73:2e:15:25:a1:54:eb:18:25:de:b1:25:6c:de:be:
b0:b3:7c:7d:b4:46:d3:04:f9:6a:b0:6e:b7:3d:87:
a6:6c:e7:49:d4:59:5a:77:f5:4b:96:8a:3e:31:da:
1a:15:dc:be:14:a6:74:74:a6:a0:83:0d:f4:a3:1b:
db:2f:eb:55:c5:0f:84:b6:bf:de:96:a8:4d:c4:46:
ca:35:3b:18:89:b4:9f:74:3b:23:20:fa:9c:61:0f:
a4:58:5b:61:57:4d:88:ba:59:5e:b2:18:ad:96:eb:
10:15:b7:2b:a5:6a:3d:21:e2:70:19:ea:58:29:db:
00:fd:a1:4e:cc:27:5a:05:a9:91:38:ec:d7:f7:41:
a2:f9:df:c0:d7:b4:dc:50:1a:b5:fb:cd:9c:a3:e9:
c0:a3:89:17:dc:ff:1e:cd:f3:c6:a7:9d:0f:f5:c9:
66:fc:a9:99:b5:5a:88:26:7f:2e:b0:43:a1:0e:84:
80:a4:68:c2:b5:42:07:ca:14:b8:ee:49:b3:48:22:
36:59:b9:ae:40:25:6a:1f:44:34:91:af:30:68:64:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:3B:B7:E0:3D:1C:25:2C:A7:A0:ED:D2:87:53:CB:C1:7D:86:62
X509v3 Authority Key Identifier:
keyid:4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:75:b9:fa:16:7a:a1:8c:93:0a:89:28:cc:ea:46:74:cd:
cc:17:58:f3:e4:0b:c7:4d:11:36:07:25:33:49:d4:3d:9e:96:
c1:d8:ec:48:fc:d4:83:7c:3e:9b:b4:f1:39:d9:a5:02:f0:62:
ce:3b:40:49:ef:b7:24:b1:71:15:3c:56:7d:ff:ea:4d:e5:1b:
3b:3b:38:8d:9d:be:36:8b:85:87:07:df:6b:33:a1:77:d1:9d:
62:c9:cf:9e:e3:fb:7c:28:75:1d:22:56:49:72:fb:a2:d0:4f:
47:dd:5a:28:42:0c:88:13:1d:e8:06:55:34:21:66:8f:6d:43:
2a:24:74:e1:2c:23:bd:62:c6:e3:48:9d:75:73:a8:39:91:d6:
7f:e3:a2:da:f7:ad:f7:30:9c:c2:5f:b5:46:57:b9:83:a7:c7:
9a:e5:ef:09:1e:3b:de:b2:1e:8e:52:3b:2f:df:77:1c:ad:68:
63:5c:d7:69:67:41:c1:14:a1:95:2d:61:01:08:eb:47:5f:e9:
6d:db:41:2b:42:89:91:f3:bd:53:46:7c:5a:84:46:9b:41:e7:
71:b5:64:68:0f:7a:bd:5c:ad:49:d3:2d:07:42:63:89:80:3c:
be:07:93:a9:41:30:89:34:a3:b8:42:27:a8:83:35:1c:a2:08:
c0:18:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:14:41 2026 by rpki-client