Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft
File: LLI3q-GmanVdqVRXlfHdIp8OAxE.mft (raw, json)
Hash identifier: BnmHtOI2wd0Z5PP3awU9yx89fzIvK44u8YlXHuVTwKU=
Subject key identifier: 06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E
Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11
Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311
Certificate serial: 0514
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft
Manifest number: 050B
Signing time: Thu 12 Mar 2026 08:59:41 +0000
Manifest this update: Thu 12 Mar 2026 08:59:41 +0000
Manifest next update: Thu 12 Mar 2026 14:59:41 +0000
Files and hashes: 1: 9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa (hash: HDm3k5h1sfqyLnQmNMvNHosv+I3s5AORyNkXQmJTU78=)
2: FyybFiuEViG5XFYVlJCL72bEuR0.roa (hash: KEY+/EsJuZ5bAgnI9aKK1bCipVEiV8K+I8VHY3pGYsI=)
3: LLI3q-GmanVdqVRXlfHdIp8OAxE.crl (hash: sgDVQFb3eqZArnwtFAnmmhNH6xinVwFvUTsgaIyw9U8=)
4: U920pSevAo0A9h7_80K1YALjgUs.roa (hash: FiOVz3qGUZZUlaVu0vbZuhl2BuArsO723IJDUP3t1mA=)
5: bf80vGJx1kOSgi2RVns6J-gthuM.roa (hash: fYtyeR4OpchTaBP5z19Hqq6dvcexMPu8HpmrKS3XhdQ=)
6: hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa (hash: aIdx+y/qTmn5HIbaHq/qrQpV2h9fairT3WeXGqtjbpI=)
7: w7SIswm54yr5I1yAEfk9WiNQoO4.roa (hash: xGKjdzo5tRsYGzfgTCksTTn0dgC6BOOFZ8hSCAswRjg=)
8: wgZ4qGzKdDXXH1HF5nti5GKG3N4.roa (hash: FN30N9G4iSO3OygjiOveFzO+6LPT/EsEoUmWxVb6+Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311
Validity
Not Before: Mar 12 08:59:41 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=06D252BDB94FB7B5FBAC0A3FF581E87DDA27C90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:1f:a6:ad:f8:5c:74:19:81:9a:ba:d9:1f:
81:2d:5a:44:33:90:50:d1:da:22:26:36:2c:1c:7a:
75:f6:77:9a:a3:aa:c6:af:13:b0:e7:de:53:75:cb:
07:f9:57:cf:31:ed:19:a5:73:97:dd:fb:38:f4:fe:
25:84:3b:0e:cf:ba:d5:c4:bd:0e:77:07:57:20:fb:
73:dd:54:ba:33:bc:48:66:e7:c4:f3:94:ef:ce:1d:
05:77:0c:ff:0a:ac:80:cf:5b:85:a2:11:e4:64:d8:
59:d3:29:e9:f5:c2:ea:07:ff:6d:cb:a1:49:5d:27:
d9:dd:08:42:a6:7c:1f:10:7d:9d:d0:33:42:2f:77:
47:e7:8b:21:ab:ac:9a:e3:09:a9:cc:78:44:57:ad:
6f:5f:91:70:8d:17:d9:68:8b:e4:3c:3a:0c:46:ce:
19:ab:ef:c2:f2:89:45:f5:69:f8:04:f6:d4:2c:8e:
b6:75:5a:42:6e:97:52:f0:f7:0d:6d:ab:e5:b4:4a:
fa:b4:bc:e7:d2:d2:62:93:8e:80:3b:87:e7:b8:37:
88:70:c8:4f:63:7a:9a:d7:75:58:fa:c8:2c:12:9c:
bb:54:ef:3c:9c:3b:7b:3d:f5:9d:d6:f0:e9:9c:d4:
13:d8:f5:2a:fc:30:d2:13:da:e8:18:aa:97:94:cc:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E
X509v3 Authority Key Identifier:
keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:30:d6:83:f4:82:10:3c:1f:8c:e5:a7:64:82:12:ba:64:33:
06:cd:bd:4a:f8:76:5d:64:53:f7:66:a4:fc:78:a8:25:ff:cb:
7d:e8:22:56:3d:28:70:f8:00:1b:34:c7:3c:ac:12:5c:2d:ec:
80:45:9d:40:bf:c9:0b:dc:61:51:fa:3b:df:6e:76:94:57:41:
f2:82:45:6c:d2:8d:72:f6:4e:cd:e1:72:ac:c3:17:20:9e:04:
c7:61:34:1c:4f:74:54:0a:bf:31:07:7e:28:8d:06:7c:d6:37:
09:d3:b5:b5:ec:9f:86:ce:c3:68:6d:53:c5:ad:2c:5d:e6:ec:
e6:58:b9:c9:38:84:b2:d0:64:55:69:56:8d:bb:54:7e:79:f3:
2a:70:c1:0a:5e:c7:8d:52:b5:b9:63:db:9a:6f:5c:f4:bf:1a:
b0:eb:97:11:7b:7c:65:86:d6:a0:59:d4:34:1e:5b:69:58:91:
47:80:3d:be:62:80:25:4b:02:91:7c:4c:e9:bc:86:98:2f:ef:
13:ef:a5:8a:d3:c5:d2:df:1a:9a:e3:02:17:98:6d:14:bd:c2:
a3:d1:35:c5:3f:89:25:f7:9d:3d:7a:dc:35:0d:6d:14:ad:a5:
28:b8:3f:5f:93:9d:27:df:f6:15:58:63:d0:37:b8:f4:15:b6:
16:ba:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:25:04 2026 by rpki-client