Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
File: UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft (raw, json)
Hash identifier: +BOKcXujRyH/01TqYHCqYnaih3AkuS6x2s2uNUlvMew=
Subject key identifier: 45:86:B6:38:15:3D:06:0E:6A:8E:DE:19:BF:C8:E8:80:D7:43:84:37
Authority key identifier: 50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
Certificate issuer: /CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Certificate serial: 3E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
Manifest number: 3D
Signing time: Wed 18 Mar 2026 00:00:04 +0000
Manifest this update: Wed 18 Mar 2026 00:00:04 +0000
Manifest next update: Wed 18 Mar 2026 06:00:04 +0000
Files and hashes: 1: UFLe6SgjxY8pJ_It-mk2KR0bkDc.crl (hash: qfsAd7qQvGB+lRjrdgeKkReKLCIdGZJfewFcPiPQyoA=)
2: tw3GmUPozK61MSCAj3C44lnNpbg.roa (hash: DWRnHy2RXVELP2YDEL0Yq4/mjoKf1N+AjPHdIO4Vtcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Validity
Not Before: Mar 18 00:00:04 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=4586B638153D060E6A8EDE19BFC8E880D7438437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:c6:bc:89:38:09:0a:73:d2:82:2c:d6:9a:
a1:dd:31:1a:84:73:c5:0f:c2:5a:f7:1c:33:53:e5:
4a:a5:43:96:01:be:c6:aa:2b:e7:92:63:69:1e:46:
09:cd:f3:18:44:cd:d8:e2:ca:38:09:8b:fc:d8:5b:
1d:8b:75:96:ca:10:39:07:0f:4a:c5:6b:da:92:79:
d9:bf:7d:d1:33:88:38:92:b6:73:dc:8c:18:b4:fb:
8a:2d:de:7f:6e:03:88:29:fc:d4:28:39:1e:77:4d:
d8:ce:ee:9e:ab:e4:14:e6:72:8e:37:ca:8d:12:10:
53:ee:1f:25:b5:1e:b7:6c:a1:5d:33:e9:ca:f7:c8:
db:78:f1:74:60:78:14:de:64:aa:96:84:00:a7:e0:
9a:47:84:5f:d6:db:a6:e4:02:cf:c4:32:97:50:b9:
3b:23:00:f6:18:51:a2:19:87:d0:8a:6e:16:ae:20:
bf:f4:f3:63:d4:8d:74:47:2a:2b:d5:d7:0b:51:f8:
b5:38:1c:3b:19:c9:cc:62:ae:2a:b5:aa:c0:d4:45:
91:59:95:cf:27:6d:26:b9:30:f2:7d:3f:6c:a2:fc:
9b:18:a3:a9:87:d4:f8:85:c3:7d:90:5f:e5:7e:e3:
3c:d5:2a:b6:88:cc:6f:2c:13:0d:54:87:c6:52:1a:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:B6:38:15:3D:06:0E:6A:8E:DE:19:BF:C8:E8:80:D7:43:84:37
X509v3 Authority Key Identifier:
keyid:50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:f8:de:cb:2e:32:54:45:4f:1d:64:6e:2b:6f:6c:33:80:8d:
8b:4a:ba:2e:7b:dd:ff:8d:01:09:f4:48:e7:9d:f2:cb:43:4a:
0d:95:bf:23:35:05:55:9c:cb:8b:ec:5d:4d:91:4c:ee:c1:31:
22:b2:e5:5d:7d:ab:20:c7:53:8b:75:a3:88:d8:1a:c6:c1:18:
b8:09:ac:00:59:9f:86:46:df:31:93:6b:ec:99:7e:fb:68:9a:
f2:26:10:3e:98:7d:c8:6d:4d:a6:02:56:95:c4:f0:be:88:95:
29:d5:4f:ca:49:60:9f:a8:d0:2c:dd:b2:a9:53:7b:50:c9:1a:
9d:d5:86:76:34:8d:4d:37:87:12:2a:19:c6:fe:c3:41:dc:d6:
df:4a:d6:b1:26:c8:b6:fc:51:45:95:ee:89:fc:28:41:69:fa:
d5:9c:87:92:25:46:43:f4:3b:30:46:91:94:c0:53:09:86:38:
13:a6:aa:50:8d:37:e1:e1:4a:63:4b:38:3d:83:48:e5:9a:56:
8b:e7:a2:69:64:ae:b7:f7:04:2d:72:21:30:ec:aa:9f:16:5f:
f1:42:fc:79:eb:5f:b1:03:58:29:63:f1:39:33:4f:e3:c4:2b:
50:62:89:e2:49:93:b4:3b:5b:ab:e7:04:7d:fd:4b:93:ea:53:
49:e2:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:34:05 2026 by rpki-client