Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
File: iY_NiB8trZUa3DHkgcTtyCCTGtM.mft (raw, json)
Hash identifier: NG4GzkDOSlog+ZZZOdq/YVCU4kHvNgdsocbvcIHktTw=
Subject key identifier: 26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
Authority key identifier: 89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
Certificate issuer: /CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Certificate serial: 1F6D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
Manifest number: 1F69
Signing time: Wed 18 Mar 2026 00:00:07 +0000
Manifest this update: Wed 18 Mar 2026 00:00:07 +0000
Manifest next update: Wed 18 Mar 2026 06:00:07 +0000
Files and hashes: 1: Wzii9_QWmSVl-N_6G91avja0YOc.roa (hash: J4Y7c48I7hy7enjeQZaFVZFGM2fxvpU0zMufHNQ7zqQ=)
2: iY_NiB8trZUa3DHkgcTtyCCTGtM.crl (hash: LfZJZlpQPC3J9LL2Blp6iTJ4fbfKKoI1naGsBrQtcsQ=)
3: uM6Bqukp71aahKZqrWcNnfGwOYI.roa (hash: H3DFr6Y9Y8ld4YjkkbdfArBir243O4bRpYhIkO/uIQ0=)
4: z8nEI0PVZKixUPYdOSjsiaDkmF4.roa (hash: iqSQUxk8APbiU25wwbDe3cNxYBayQ78aqZz8203Okhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8045 (0x1f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Validity
Not Before: Mar 18 00:00:07 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=26D5A2250C9C07F5B0C055570D9FF4BBDA7D20B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:a5:d2:e2:cc:2c:37:c8:aa:43:13:1a:2c:
9e:fb:21:87:69:c8:00:c4:83:45:43:c3:87:cf:ed:
29:50:14:42:61:c4:66:ce:6d:c5:59:9d:2a:9f:f5:
67:c5:ae:17:f8:1b:2c:75:60:2b:dd:bf:b3:fe:59:
02:7a:11:d2:9a:11:21:36:5f:cc:8b:3b:2c:5b:8c:
d4:bb:20:52:8e:a0:62:a2:dc:14:29:42:26:97:7c:
8e:fc:af:7b:14:b3:8d:df:61:27:09:8f:a5:1f:f8:
e9:93:a3:ba:ab:cb:79:80:5b:c9:45:d3:bb:50:d8:
ce:eb:7c:84:95:48:98:37:e8:22:8a:cd:36:85:2b:
c1:56:70:63:86:c1:cb:55:20:10:42:5e:ad:98:9b:
d2:ac:c2:40:1b:3e:66:55:7e:6e:49:9d:1c:8a:75:
c7:5b:e5:2f:77:8d:20:67:2c:a6:aa:d6:f8:b4:d1:
40:47:e2:71:23:01:9a:19:7f:9e:ff:62:95:a1:39:
e9:1a:c6:76:14:3a:93:c2:13:9f:4e:5c:81:88:80:
f6:e4:0c:d9:2a:b6:c9:98:88:1e:d8:e0:53:92:bb:
e7:43:08:67:11:12:ed:90:b3:45:9d:3f:ae:be:a5:
6d:91:1f:d9:b3:9a:8d:d2:bf:4e:09:a1:76:43:b3:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
X509v3 Authority Key Identifier:
keyid:89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e7:94:e1:80:e5:55:35:a7:98:2c:7d:44:63:1d:43:34:85:
8a:69:c8:01:60:10:7f:fe:d2:f6:82:3a:ef:c5:5d:e2:46:42:
3f:e3:2d:ee:dc:5b:c9:67:d7:3a:45:31:f6:e4:cd:81:c3:6f:
f9:09:1f:c5:ec:ce:29:3d:57:bd:fd:18:ea:81:ad:48:7a:b8:
cb:6c:35:8c:5a:b5:07:11:96:8f:df:a1:f6:07:4c:bc:c4:99:
5c:ab:82:06:ae:97:66:79:7d:6a:2a:41:98:bb:ce:92:74:ae:
c6:c5:db:7e:b7:e4:44:55:e2:1f:68:4c:80:db:7e:45:01:6e:
45:db:34:36:00:a2:f6:a2:f3:08:ea:fd:b3:fd:13:e3:cf:2d:
3c:c6:45:ad:a8:cf:63:29:99:99:a5:37:49:42:f3:5d:07:d5:
af:ea:99:17:2c:8f:1b:5a:8e:cf:66:66:e7:1a:35:72:ed:56:
b3:47:6c:1c:0a:a1:66:37:31:30:b9:ef:7b:fd:61:1a:5d:70:
16:8c:af:c6:8e:64:b2:07:7e:09:e5:bd:78:c2:a7:97:5c:aa:
c0:46:d6:77:fb:c3:50:0a:00:8c:cb:88:37:51:cb:86:1d:b6:
a3:c2:90:9a:b2:89:4b:48:db:a8:4b:2f:1a:30:8e:90:05:e0:
7e:38:af:18
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICH20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk4
RkNEODgxRjJEQUQ5NTFBREMzMUU0ODFDNEVEQzgyMDkzMUFEMzAeFw0yNjAzMTgw
MDAwMDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDI2RDVBMjI1MEM5QzA3
RjVCMEMwNTU1NzBEOUZGNEJCREE3RDIwQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt76XS4swsN8iqQxMaLJ77IYdpyADEg0VDw4fP7SlQFEJhxGbO
bcVZnSqf9WfFrhf4Gyx1YCvdv7P+WQJ6EdKaESE2X8yLOyxbjNS7IFKOoGKi3BQp
QiaXfI78r3sUs43fYScJj6Uf+OmTo7qry3mAW8lF07tQ2M7rfISVSJg36CKKzTaF
K8FWcGOGwctVIBBCXq2Ym9KswkAbPmZVfm5JnRyKdcdb5S93jSBnLKaq1vi00UBH
4nEjAZoZf57/YpWhOekaxnYUOpPCE59OXIGIgPbkDNkqtsmYiB7Y4FOSu+dDCGcR
Eu2Qs0WdP66+pW2RH9mzmo3Sv04JoXZDs54pAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUJtWiJQycB/WwwFVXDZ/0u9p9ILgwHwYDVR0jBBgwFoAUiY/NiB8trZUa3DHk
gcTtyCCTGtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4
L2lZX05pQjh0clpVYTNESGtnY1R0eUNDVEd0TS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvaVlfTmlCOHRyWlVhM0RIa2djVHR5Q0NUR3RNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4L2lZX05pQjh0clpVYTNE
SGtnY1R0eUNDVEd0TS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBy55ThgOVVNaeYLH1EYx1DNIWKacgBYBB//tL2gjrvxV3iRkI/4y3u3FvJZ9c6
RTH25M2Bw2/5CR/F7M4pPVe9/Rjqga1IerjLbDWMWrUHEZaP36H2B0y8xJlcq4IG
rpdmeX1qKkGYu86SdK7Gxdt+t+REVeIfaEyA235FAW5F2zQ2AKL2ovMI6v2z/RPj
zy08xkWtqM9jKZmZpTdJQvNdB9Wv6pkXLI8bWo7PZmbnGjVy7VazR2wcCqFmNzEw
ue97/WEaXXAWjK/GjmSyB34J5b14wqeXXKrARtZ3+8NQCgCMy4g3UcuGHbajwpCa
solLSNuoSy8aMI6QBeB+OK8Y
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:27:56 2026 by rpki-client