Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier: CS9d2S60NnZ+sHEh8DuREIWf/5j7vAzGlscIM1LyZlY=
Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial: 0B22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number: 0B21
Signing time: Wed 18 Mar 2026 04:59:18 +0000
Manifest this update: Wed 18 Mar 2026 04:59:18 +0000
Manifest next update: Wed 18 Mar 2026 10:59:18 +0000
Files and hashes: 1: N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa (hash: vzjXOq9gWNducRtzdYPGbix/Jawvkq34+JnAREKG1mY=)
2: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: TUwtb3fi49nUU02oEfhnLjQtQL/W6qdY5zJdZGtYlpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2850 (0xb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
Validity
Not Before: Mar 18 04:59:18 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
X509v3 Authority Key Identifier:
keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:09:23:f8:a6:af:b5:50:ea:28:da:ea:6c:d7:81:ba:6e:19:
1f:96:6d:4f:40:62:40:f8:58:d1:17:8e:c4:5c:fc:8c:68:44:
b7:a0:17:f5:7e:26:aa:61:41:03:62:af:95:68:68:d6:72:91:
2d:c8:ae:90:46:ad:2d:44:86:7d:86:4b:6e:40:88:04:35:ce:
53:a2:8b:d0:6a:f9:1a:65:e0:4d:9f:54:4c:22:d8:b2:9a:09:
78:11:da:4d:44:6b:6f:d4:85:08:65:bc:b5:28:aa:7f:25:e9:
4f:7f:c2:b3:ee:20:48:3b:b9:df:08:1a:95:f8:64:fb:d2:db:
b2:04:a0:11:cb:80:96:30:92:01:c0:1f:d8:62:a8:5f:d1:cd:
0e:7f:47:7e:3f:e5:05:1e:1a:5b:a7:e0:5d:38:af:0b:7b:fc:
99:16:6d:d2:90:06:ec:b0:eb:ad:ba:d7:ae:7d:c5:6b:9c:93:
0e:b0:44:b5:41:17:fe:29:2f:0e:20:a7:fe:ed:af:af:46:31:
7e:7d:7a:e7:04:c5:ff:98:37:96:1c:0a:6f:e2:2a:25:70:be:
ba:48:35:ad:fc:15:7f:31:00:b8:d2:a3:09:61:c9:88:cc:12:
5f:06:e6:00:5e:dc:b7:cf:76:da:28:69:90:2a:4f:2c:19:35:
36:4b:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:34:05 2026 by rpki-client