Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
File: UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft (raw, json)
Hash identifier: VLmsA96bWNystRUZ221RT07QUeIiZu46gT9PDf1lo2U=
Subject key identifier: 45:86:B6:38:15:3D:06:0E:6A:8E:DE:19:BF:C8:E8:80:D7:43:84:37
Authority key identifier: 50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
Certificate issuer: /CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Certificate serial: 3F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
Manifest number: 3E
Signing time: Wed 18 Mar 2026 05:00:05 +0000
Manifest this update: Wed 18 Mar 2026 05:00:05 +0000
Manifest next update: Wed 18 Mar 2026 11:00:05 +0000
Files and hashes: 1: UFLe6SgjxY8pJ_It-mk2KR0bkDc.crl (hash: dD6Sv1h340cI35ZGr2pTA4wmJS++WSwOfCWmzMujc10=)
2: tw3GmUPozK61MSCAj3C44lnNpbg.roa (hash: DWRnHy2RXVELP2YDEL0Yq4/mjoKf1N+AjPHdIO4Vtcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Validity
Not Before: Mar 18 05:00:05 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=4586B638153D060E6A8EDE19BFC8E880D7438437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:c6:bc:89:38:09:0a:73:d2:82:2c:d6:9a:
a1:dd:31:1a:84:73:c5:0f:c2:5a:f7:1c:33:53:e5:
4a:a5:43:96:01:be:c6:aa:2b:e7:92:63:69:1e:46:
09:cd:f3:18:44:cd:d8:e2:ca:38:09:8b:fc:d8:5b:
1d:8b:75:96:ca:10:39:07:0f:4a:c5:6b:da:92:79:
d9:bf:7d:d1:33:88:38:92:b6:73:dc:8c:18:b4:fb:
8a:2d:de:7f:6e:03:88:29:fc:d4:28:39:1e:77:4d:
d8:ce:ee:9e:ab:e4:14:e6:72:8e:37:ca:8d:12:10:
53:ee:1f:25:b5:1e:b7:6c:a1:5d:33:e9:ca:f7:c8:
db:78:f1:74:60:78:14:de:64:aa:96:84:00:a7:e0:
9a:47:84:5f:d6:db:a6:e4:02:cf:c4:32:97:50:b9:
3b:23:00:f6:18:51:a2:19:87:d0:8a:6e:16:ae:20:
bf:f4:f3:63:d4:8d:74:47:2a:2b:d5:d7:0b:51:f8:
b5:38:1c:3b:19:c9:cc:62:ae:2a:b5:aa:c0:d4:45:
91:59:95:cf:27:6d:26:b9:30:f2:7d:3f:6c:a2:fc:
9b:18:a3:a9:87:d4:f8:85:c3:7d:90:5f:e5:7e:e3:
3c:d5:2a:b6:88:cc:6f:2c:13:0d:54:87:c6:52:1a:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:B6:38:15:3D:06:0E:6A:8E:DE:19:BF:C8:E8:80:D7:43:84:37
X509v3 Authority Key Identifier:
keyid:50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:e3:9c:15:5c:37:2b:ca:61:fe:13:a3:2c:69:0a:a1:cf:
62:9f:ed:3e:14:1a:9f:bd:75:1b:a5:7e:71:7e:ff:79:94:cd:
36:f1:81:e4:50:f5:ba:90:cf:9c:2e:3d:5d:ab:7c:b5:b5:fe:
f3:99:ee:01:63:7c:e1:19:64:5b:b1:f1:40:1a:d4:a9:72:54:
56:9d:3b:6e:a0:34:d3:42:8c:c2:59:8c:e6:19:ba:a2:c9:66:
fa:3d:eb:6b:6b:fc:6d:60:f8:13:09:0d:a8:be:40:f4:94:53:
32:d6:70:af:2b:5e:f9:54:33:ae:33:0f:f9:17:9c:34:6e:6b:
bc:73:eb:0f:fc:26:73:8f:f7:e4:c6:03:ef:67:4d:64:b5:d6:
b7:b0:a8:6b:c7:b7:c0:a3:87:8e:72:3f:92:17:e7:0d:8c:8a:
1f:30:41:81:cb:2b:5b:5e:b1:30:db:a7:73:ca:b9:72:04:ab:
d5:d7:70:b9:b9:57:e1:e3:b2:0d:e7:90:86:d9:ec:22:cb:8d:
78:f3:9b:b8:8f:0b:fa:f2:0a:e4:1e:7e:56:92:b6:65:74:64:
af:d9:39:32:5d:43:71:93:b5:7b:3b:70:65:22:73:e3:2f:12:
f2:d9:28:7f:8f:3f:05:d5:86:09:7c:29:3e:e8:54:73:a0:73:
ef:81:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:05:39 2026 by rpki-client