Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
File: tw-ay_EAFGtabH5NDOLP3_sXgA0.mft (raw, json)
Hash identifier: Vq4Nab2zSVY4v9rxhznHcZBjVnjBoDNRUOyWaoccFQU=
Subject key identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98
Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D
Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D
Certificate serial: 0881
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
Manifest number: 087B
Signing time: Wed 18 Mar 2026 01:01:12 +0000
Manifest this update: Wed 18 Mar 2026 01:01:12 +0000
Manifest next update: Wed 18 Mar 2026 07:01:12 +0000
Files and hashes: 1: 3MKzLGOz3QmJsUndF8T6ajoTyZo.roa (hash: 4L896dvdD7gisLHXlUGakF+hzI7CPBXQcnhbqjLHgUg=)
2: MF6XO1h5tWyAEoasS2UP8bCpZIE.roa (hash: KGjqOIiGrk5B0gayHXAIuw7MZZLoMtK6K+t0VnpthfQ=)
3: PyDtdEk7SDdInPirvHSeb0S9dyI.roa (hash: hrsai+CzpB3uEKss+zEh/wsa25ZUdMenLdtvBxZP5eY=)
4: QNmaUZ9odBUKr7-GsJabU8_NGAo.roa (hash: /2fTnVqeoPrkZWX481e++x3S/mGdslWVB79maUC1fA0=)
5: YP6HNtYypvunlSoIog3xO4pPY4s.roa (hash: UmvJWiELK+WAWticL7Y4JK3MuC5DFGT24tTfsDjGddw=)
6: tw-ay_EAFGtabH5NDOLP3_sXgA0.crl (hash: 1DEL3wslwDJjp1/CNHT4ilD4HyAawP1ldwx/JBTHkKc=)
7: xLHVFN7qgJxmVLccIkF7b6UCWvM.roa (hash: 0y2VZNE8QE1kcUhFGsB7s+y1CW28fjzlrS/rQsX8m2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D
Validity
Not Before: Mar 18 01:01:12 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=54D82569197583EE89B0F404B8F55339789F8598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:e3:97:e5:d6:e5:7b:7a:46:f9:98:ea:1f:
ab:e8:67:42:de:c4:6e:6c:bd:f2:10:47:c7:39:80:
53:f3:3e:d9:9a:d5:c7:31:45:93:93:ee:25:13:97:
bb:87:0a:15:20:8b:a7:87:49:f1:43:17:4f:06:4b:
44:29:12:14:69:17:78:83:a2:3b:94:54:77:2a:a0:
f0:86:3d:50:52:06:7c:e3:4c:4c:2e:ba:89:34:ba:
48:d7:2a:87:92:cc:65:e0:eb:4c:8b:5c:ef:a6:30:
44:f2:de:a2:7b:1e:31:bd:d8:79:96:04:1f:74:c8:
6a:42:60:ff:4d:6f:63:36:92:df:f3:55:dd:90:e2:
65:01:3f:e2:88:91:1a:5a:63:74:c7:b1:e3:a8:d8:
9a:4d:ab:e2:24:b8:77:58:f2:db:25:53:a6:22:aa:
e5:d2:29:32:54:3c:2b:0c:53:be:dc:31:14:db:ec:
c1:00:6e:64:b8:3b:87:f7:f6:3a:bf:c1:0d:50:71:
2b:86:e6:3e:bd:b7:12:02:98:84:6d:e1:42:ea:08:
f2:15:47:4a:55:9a:2e:5c:02:3f:ac:cc:de:39:52:
e7:0d:d0:78:22:b6:b1:b3:13:a7:5f:73:27:b4:97:
e8:8f:0b:b2:9f:b0:a6:1b:4c:50:e2:56:05:09:0b:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98
X509v3 Authority Key Identifier:
keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:49:e1:40:36:6c:89:62:e3:7e:84:80:87:ff:8a:70:af:d1:
60:da:82:4f:73:5e:fb:e5:3b:32:de:9a:70:fe:1b:e4:7c:09:
c4:40:49:6d:9b:ca:48:08:15:6c:b5:99:8e:20:24:14:24:37:
91:1d:d4:19:83:8e:e5:2a:bb:90:72:ab:bb:9e:5f:12:e7:f0:
3b:80:b1:9d:f6:ea:a1:bf:ec:64:e7:5d:33:5d:a6:0a:a1:41:
8c:67:71:c7:8b:f5:db:48:5b:f2:b5:b7:67:26:4a:21:72:e4:
d4:46:4b:02:0e:54:a0:fd:f8:a4:3f:3c:8d:ee:8a:8e:19:b4:
b1:05:0f:d0:cc:f3:28:43:3c:e6:9d:3f:bf:a8:e6:c1:0a:da:
9a:20:01:6c:d2:c2:69:3b:bd:7c:57:08:a3:8c:9e:6c:4d:d0:
42:ec:da:31:d3:de:cf:fd:27:14:31:ca:b5:33:18:80:f2:c7:
a0:66:7b:81:a2:e4:ce:d6:7b:f8:1e:d0:7b:38:fa:d7:47:f1:
3a:3a:ca:44:ff:60:92:b6:44:0e:8e:0f:3e:2a:5f:4c:1e:b6:
e6:bf:46:76:f8:23:52:aa:8a:77:15:db:2b:be:41:5e:97:30:
2e:2a:a4:00:16:0c:6f:21:ca:0c:44:0b:e0:9e:cf:52:a6:9e:
73:04:25:fd
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw
RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNjAzMTgw
MTAxMTJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDU0RDgyNTY5MTk3NTgz
RUU4OUIwRjQwNEI4RjU1MzM5Nzg5Rjg1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFEeOX5dble3pG+ZjqH6voZ0LexG5svfIQR8c5gFPzPtma1ccx
RZOT7iUTl7uHChUgi6eHSfFDF08GS0QpEhRpF3iDojuUVHcqoPCGPVBSBnzjTEwu
uok0ukjXKoeSzGXg60yLXO+mMETy3qJ7HjG92HmWBB90yGpCYP9Nb2M2kt/zVd2Q
4mUBP+KIkRpaY3THseOo2JpNq+IkuHdY8tslU6YiquXSKTJUPCsMU77cMRTb7MEA
bmS4O4f39jq/wQ1QcSuG5j69txICmIRt4ULqCPIVR0pVmi5cAj+szN45UucN0Hgi
trGzE6dfcye0l+iPC7KfsKYbTFDiVgUJCwNRAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUVNglaRl1g+6JsPQEuPVTOXifhZgwHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N
DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvdHctYXlfRUFGR3Rh
Ykg1TkRPTFAzX3NYZ0EwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJlJ4UA2bIli436EgIf/inCv0WDagk9zXvvlOzLemnD+G+R8CcRASW2bykgI
FWy1mY4gJBQkN5Ed1BmDjuUqu5Byq7ueXxLn8DuAsZ326qG/7GTnXTNdpgqhQYxn
cceL9dtIW/K1t2cmSiFy5NRGSwIOVKD9+KQ/PI3uio4ZtLEFD9DM8yhDPOadP7+o
5sEK2pogAWzSwmk7vXxXCKOMnmxN0ELs2jHT3s/9JxQxyrUzGIDyx6Bme4Gi5M7W
e/ge0Hs4+tdH8To6ykT/YJK2RA6ODz4qX0wetua/Rnb4I1KqincV2yu+QV6XMC4q
pAAWDG8hygxEC+Cez1KmnnMEJf0=
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:14:59 2026 by rpki-client