Manifest

$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File:                     ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier:          JMssoYKCcjJXTxHNCBN9CXRPHlZpzXk/jMbKU+eR+oo=
Subject key identifier:   67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer:       /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial:       0B21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number:          0B20
Signing time:             Tue 17 Mar 2026 23:59:17 +0000
Manifest this update:     Tue 17 Mar 2026 23:59:17 +0000
Manifest next update:     Wed 18 Mar 2026 05:59:17 +0000
Files and hashes:         1: N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa (hash: vzjXOq9gWNducRtzdYPGbix/Jawvkq34+JnAREKG1mY=)
                          2: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: PmUZncLlwHQeCyloWW8tSZeHaY6s0vx6OwKKDFH4cxM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2849 (0xb21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
        Validity
            Not Before: Mar 17 23:59:17 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
                    90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
                    27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
                    a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
                    04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
                    2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
                    af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
                    45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
                    8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
                    48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
                    0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
                    5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
                    19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
                    2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
                    68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
                    a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
                    ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
            X509v3 Authority Key Identifier:
                keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:54:35:75:26:9b:1d:05:85:ce:33:36:a6:6c:58:c7:bb:6a:
         ae:5c:e2:af:f8:b1:49:ce:f7:e4:e5:d1:81:fd:12:b1:20:d0:
         d8:f1:d5:d2:3c:d0:5e:ad:6e:82:e4:28:4d:f9:e4:3b:70:fd:
         79:e6:32:66:81:ca:50:62:8c:54:c4:14:5a:00:24:c1:a2:45:
         12:a0:f7:7e:8c:3c:69:4f:d9:03:b2:07:a3:b6:20:2a:dd:1e:
         0d:fa:96:fa:e8:d0:47:6a:3b:a2:f8:b9:92:b1:4c:86:bd:80:
         78:be:65:cc:59:e2:46:e0:8d:67:d6:ab:48:59:63:ae:1f:3b:
         74:e9:20:59:60:d3:80:94:2d:d5:ed:13:03:02:da:68:26:c4:
         cf:2b:d3:c6:04:de:18:a8:d6:f0:ee:a0:e9:cd:72:b9:70:6d:
         61:59:23:da:f9:c7:1f:5f:b0:74:37:48:63:c7:75:23:28:ed:
         52:9e:79:f5:8a:f1:fa:a6:ce:25:f7:fa:f4:6e:7c:b7:7b:8f:
         f5:79:89:9f:72:3f:fc:e4:fa:69:3c:f0:e1:be:35:41:ce:ef:
         3b:e0:c9:fb:45:93:be:d5:8f:05:39:dd:5d:f2:a2:40:91:69:
         3b:21:31:40:c8:77:f1:70:82:70:a1:0e:65:b9:c2:a8:bf:44:
         38:20:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----