Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json)
Hash identifier: LJTq/GAuHBAlI/DsYhxCyJYQkTY/b1l3HVDXXbzNk7o=
Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Certificate serial: 044C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
Manifest number: 044A
Signing time: Wed 18 Mar 2026 01:00:35 +0000
Manifest this update: Wed 18 Mar 2026 01:00:35 +0000
Manifest next update: Wed 18 Mar 2026 07:00:35 +0000
Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=)
2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=)
3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: b2OTQVUcbl++AF9FRmC9eRyWscngGu1/Hfsm/BNTF8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Validity
Not Before: Mar 18 01:00:35 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f:
f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a:
b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d:
ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d:
40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8:
b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c:
d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32:
da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed:
5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5:
b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53:
b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af:
43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac:
5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5:
61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73:
22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6:
bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99:
4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
X509v3 Authority Key Identifier:
keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:25:0c:aa:7d:0d:c0:e6:72:a4:eb:83:53:56:c4:a1:24:
36:1f:74:7d:e1:23:42:cc:4d:64:48:da:04:34:d6:6a:f4:68:
fd:6a:d4:94:2d:7a:95:47:0e:2c:47:a0:4f:fd:12:0b:21:e4:
11:4f:f3:ad:2b:1a:af:da:80:f4:47:35:5c:0b:85:c4:ad:8e:
f3:16:b7:50:3b:42:80:14:ac:4e:a8:88:a4:e9:56:1d:26:f8:
67:a8:12:c0:4c:b5:ba:49:46:a6:7f:0b:5b:e3:13:21:02:1a:
3b:fd:88:5e:9d:39:75:c0:b0:fe:30:ba:a8:2f:86:b2:96:24:
dd:6c:b9:52:30:57:22:41:5a:f4:20:2c:2a:8f:28:40:a4:66:
9c:fb:af:3c:3a:87:8d:67:97:cd:85:3e:9e:14:97:ae:82:96:
d3:69:85:29:a9:7b:2f:c8:82:1b:bf:40:64:d8:4c:33:53:97:
cc:01:57:0d:6f:71:53:98:7c:97:0f:a5:51:74:86:2d:bd:f9:
63:99:c1:a4:0b:6b:90:c8:7f:02:37:f7:ae:63:e4:3e:42:82:
9d:f5:05:7a:4e:7a:70:4a:65:07:22:8e:65:41:6f:7d:38:98:
6a:69:3d:6d:e3:38:d2:1d:a4:81:66:e4:07:48:1d:e0:cc:bf:
b2:bd:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:14:41 2026 by rpki-client