Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft
File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json)
Hash identifier: SMWiaC6dTb8IfZf2daAUop55pPDAhGtpluVK/OcHT7M=
Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D
Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56
Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56
Certificate serial: 05B0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft
Manifest number: 05AE
Signing time: Wed 18 Mar 2026 00:59:52 +0000
Manifest this update: Wed 18 Mar 2026 00:59:52 +0000
Manifest next update: Wed 18 Mar 2026 06:59:52 +0000
Files and hashes: 1: k2fsIbftQRjCuaw8vM9IdWoUcpg.roa (hash: QUuqwryAn7tNC/7s8b5C6mc0fqcFuWn03lmSuHGpGJ8=)
2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: JXgPX5JJwRrN+dpy+0QCx9wHfvF/y33d02Yr9b6Epd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56
Validity
Not Before: Mar 18 00:59:52 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc:
8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68:
fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1:
fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d:
85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7:
81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83:
4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20:
0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b:
d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2:
df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea:
eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3:
bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4:
24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44:
cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29:
fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d:
f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af:
0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D
X509v3 Authority Key Identifier:
keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fd:14:6f:e9:2c:23:1e:20:60:68:96:39:03:11:f9:16:74:
9a:56:e3:e0:bf:f7:ce:44:49:b5:76:40:7f:0b:26:17:1e:9c:
20:98:3c:f9:65:a6:77:77:a2:eb:8e:75:91:60:4e:3a:e0:26:
07:57:98:8d:bb:dd:a5:ef:de:ef:59:a0:e8:5b:46:5c:bc:98:
2c:b1:62:17:61:d3:61:4a:81:19:0e:58:5a:fc:7c:0a:12:52:
0e:6c:f7:1f:a5:fa:1f:46:15:87:87:bc:ea:c4:01:9f:ec:f1:
d5:6e:52:23:4e:49:97:c6:a6:20:af:bd:1c:23:3f:9d:a8:a6:
8d:fe:46:8c:46:e7:22:b4:d3:72:03:6b:ad:b9:12:a0:20:eb:
47:68:b3:dc:c5:c8:95:b3:6d:d8:db:0a:bb:5f:41:a2:44:f7:
40:18:fc:57:72:b0:4d:56:91:e7:2f:dc:c4:77:3a:df:84:ee:
d1:34:f9:61:de:22:a0:02:2d:de:1b:f4:d7:2e:9f:db:5c:a8:
c7:fc:09:81:43:a7:d2:35:ab:91:19:b0:f4:62:b2:c6:e6:66:
7c:9e:c5:8d:55:5c:7d:bb:f6:4a:87:43:7f:2d:9f:e2:fd:d0:
de:6f:d7:ae:09:6c:f4:cd:20:9e:e1:a7:c1:a8:63:87:51:e2:
ea:cd:ab:16
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD
QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNjAzMTgw
MDU5NTJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz
NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X
xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb
p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE
ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs
qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE
Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g
BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx
Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF
NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKP9FG/pLCMeIGBoljkDEfkWdJpW4+C/985ESbV2QH8LJhcenCCYPPllpnd3
ouuOdZFgTjrgJgdXmI273aXv3u9ZoOhbRly8mCyxYhdh02FKgRkOWFr8fAoSUg5s
9x+l+h9GFYeHvOrEAZ/s8dVuUiNOSZfGpiCvvRwjP52opo3+RoxG5yK003IDa625
EqAg60dos9zFyJWzbdjbCrtfQaJE90AY/FdysE1Wkecv3MR3Ot+E7tE0+WHeIqAC
Ld4b9Ncun9tcqMf8CYFDp9I1q5EZsPRissbmZnyexY1VXH279kqHQ38tn+L90N5v
164JbPTNIJ7hp8GoY4dR4urNqxY=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:28:03 2026 by rpki-client