Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft
File: zgJJuefVZubL61d9djs8y7Gwqy0.mft (raw, json)
Hash identifier: RtLbWz+KlFGyvb9xBdBDl+uYuSue1i8UeqBS9SxplG4=
Subject key identifier: D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A
Authority key identifier: CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D
Certificate issuer: /CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D
Certificate serial: 27EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft
Manifest number: 27D8
Signing time: Wed 18 Mar 2026 02:59:02 +0000
Manifest this update: Wed 18 Mar 2026 02:59:02 +0000
Manifest next update: Wed 18 Mar 2026 08:59:02 +0000
Files and hashes: 1: WyTkXHEhLqcsjNd_oPHvbf674aI.roa (hash: gt/t6rEu5sUWRrRf2e3Slg7FAm0I0chcu0jtaf/OGlg=)
2: cYoSIKX5rPaGhe1jQErFxMn1KlE.roa (hash: sGiqqVrNR6d7HV7W1A6wNpAMcqkm+3f/aPa23FGvVeA=)
3: zgJJuefVZubL61d9djs8y7Gwqy0.crl (hash: ROuKyVnaLhDGULpuycwHEPJ8bWY1FBMGldN9VT1rkx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10218 (0x27ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D
Validity
Not Before: Mar 18 02:59:02 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D735CF064F7BA7C52F1067937F4D16BAF06C5E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:3b:af:00:60:89:fe:1c:da:67:e3:72:bb:
e8:ad:94:64:0b:0e:e3:b8:81:9f:9f:09:c0:99:4c:
7e:5d:df:36:31:92:48:82:c2:8d:27:f8:66:60:b6:
1a:60:9c:9a:0a:da:a9:8c:fb:0e:a5:cf:6d:64:e4:
6c:b6:b3:c8:d0:15:a2:e6:03:55:bb:14:77:6e:d6:
2b:1a:2e:70:a9:a8:1f:c9:67:b7:de:a3:53:90:48:
88:12:bd:6f:1c:e2:38:aa:40:dd:5c:08:ab:18:8a:
75:5b:ac:1f:be:b1:dd:34:9d:b5:69:92:a8:6f:8d:
c5:8f:d6:51:ae:37:72:d2:44:27:f8:4c:6c:8f:d5:
6f:73:87:21:6a:21:4c:77:fd:5d:b0:1c:01:55:e7:
7d:b4:5d:bd:d8:1b:b2:1d:46:05:28:47:f1:82:6f:
94:4a:50:83:56:0c:f8:20:cd:78:f4:0e:fa:a2:41:
6c:76:1b:67:66:a3:32:12:a4:af:45:a4:f6:25:35:
22:cd:f3:b5:bc:ea:8a:2c:f0:64:c9:ba:c4:98:13:
90:16:04:5e:17:23:6f:3c:c1:b6:36:15:2c:09:a0:
73:fb:e3:51:e6:1f:96:63:14:26:bc:48:48:67:eb:
44:67:16:86:ea:59:f5:33:79:b6:5d:49:c9:eb:d5:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A
X509v3 Authority Key Identifier:
keyid:CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cf:7f:94:6f:f8:5d:3f:2e:0b:04:23:60:51:d7:dc:d6:9e:
05:6d:e2:0c:61:5f:c8:3d:1b:36:9d:b7:c1:e3:cb:4e:c5:91:
39:fd:2c:f9:fc:61:22:2a:06:63:b5:aa:c9:ee:f2:e8:88:63:
2f:c1:94:88:23:53:37:9d:c3:66:02:bf:86:09:98:22:8a:bd:
1e:12:8e:03:73:94:f4:85:15:31:04:6e:1f:09:c4:a7:a9:d5:
42:0a:61:cf:d8:9b:7f:ad:c0:be:ad:0f:b3:36:ad:3c:67:a6:
df:09:a9:ac:a3:b0:89:6a:72:f9:1b:bf:06:27:30:e5:a4:47:
1f:64:99:5a:6f:be:be:59:2c:42:59:8a:77:b0:c1:ee:4d:cf:
a6:fd:56:2e:71:ed:21:20:a7:ea:28:48:0b:40:7b:b5:f0:54:
a9:f9:23:08:d5:2a:62:6c:2d:eb:4b:70:2b:32:11:04:42:9f:
fb:a9:72:d3:19:3c:e8:6f:5d:39:de:ee:1f:14:10:a7:84:41:
8f:e7:f2:e2:d3:db:ca:24:b5:8c:15:41:5d:71:a0:6a:fa:2b:
40:de:32:a1:c2:a9:17:89:1b:1d:9e:f0:b2:2f:21:9a:f2:d3:
f4:59:4b:6d:71:8e:31:4a:75:8a:e2:83:e2:25:54:f7:ff:5d:
c1:42:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:10:04 2026 by rpki-client