Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft
File:                     06BdqqCQU2XvHzmKUupfkfbC2SA.mft (raw, json)
Hash identifier:          ZPUwwrr7tP3Vdez1bip++5thcTpqCDNVNGKBxEmIKxA=
Subject key identifier:   30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7
Authority key identifier: D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20
Certificate issuer:       /CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920
Certificate serial:       02C3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft
Manifest number:          02C3
Signing time:             Wed 18 Mar 2026 01:01:02 +0000
Manifest this update:     Wed 18 Mar 2026 01:01:02 +0000
Manifest next update:     Wed 18 Mar 2026 07:01:02 +0000
Files and hashes:         1: 06BdqqCQU2XvHzmKUupfkfbC2SA.crl (hash: a9bcy04lDb12hegYhFvBjpY9nVxaJUrlpuqfEhA/DxA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920
        Validity
            Not Before: Mar 18 01:01:02 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=30D8963FB0F4CE7D7DEB12E041F58EE911E5CCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:29:02:45:42:ff:bd:86:e7:f4:2b:5f:60:
                    0e:af:48:60:7b:c5:db:51:32:bf:8a:22:1d:32:3f:
                    d3:87:0a:c4:20:03:ae:83:3e:a0:b5:eb:8c:36:b3:
                    73:e0:71:39:78:77:64:de:6b:5a:8c:6d:54:b1:47:
                    71:29:6d:ee:12:4f:9b:20:2f:ab:d5:1c:2d:96:0f:
                    b9:fd:60:46:6b:59:98:45:d4:43:e3:8a:25:5c:aa:
                    26:1d:87:2e:7f:23:f7:44:54:3b:b6:e4:74:0a:47:
                    53:9b:86:a3:93:a5:25:98:4c:2d:85:99:21:0d:80:
                    a3:f8:ce:0a:cc:9c:23:b6:64:8e:95:c0:23:08:a8:
                    69:1d:7b:3b:d1:b4:c6:af:72:47:6d:c9:23:f4:da:
                    71:3c:70:9e:69:e6:1e:cc:de:c5:7c:d8:87:e8:40:
                    9a:05:fc:c4:a5:ba:b7:18:13:6b:ca:c6:cd:d5:21:
                    a4:af:32:79:af:cf:d2:ec:5e:cd:78:90:70:b3:7b:
                    42:bd:f2:fa:11:70:d9:fd:00:2a:b1:d9:1a:53:37:
                    16:ae:19:36:0a:18:42:f6:e5:c1:39:0f:b7:a4:e7:
                    95:49:e9:e5:bb:d4:04:d2:ae:9b:f2:32:71:d7:ea:
                    0f:7a:24:ba:d3:05:f7:69:19:86:db:73:74:60:1f:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7
            X509v3 Authority Key Identifier:
                keyid:D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:26:8c:b3:8a:f8:6e:ef:0a:5c:d1:3a:df:50:86:72:ec:ff:
         42:c0:10:fc:56:bc:95:b4:96:0a:5f:62:cd:9f:36:62:91:1a:
         a2:92:19:10:92:06:51:ed:a4:e3:34:1a:0c:a4:e3:51:08:17:
         33:c7:f0:02:ab:30:de:f3:b0:47:93:6e:61:d9:0a:c7:60:45:
         01:8b:eb:b9:0a:63:d3:3b:b1:55:e7:08:29:a4:41:4f:b9:e7:
         48:48:8a:1e:6b:2c:79:df:49:60:79:3c:5e:3b:97:52:29:58:
         62:e1:77:50:eb:6d:d6:ad:f1:b0:0f:b0:90:61:ba:27:3a:81:
         3e:52:49:43:89:de:4e:74:dd:35:f3:d1:23:1a:85:3a:1f:a1:
         8d:d3:57:ec:56:14:67:12:e0:15:14:39:30:79:8b:53:ea:b9:
         da:ce:2e:f6:f7:52:2d:d3:19:dc:b4:42:11:be:0d:3e:89:e5:
         0f:c5:17:6c:6b:50:be:f5:53:a4:a0:8b:a3:e2:01:8a:98:94:
         2c:7d:b1:f1:ec:c5:29:47:dd:89:41:dc:31:cb:10:aa:2c:97:
         96:ea:d1:53:43:67:12:70:57:2b:9f:09:0e:d8:37:86:5b:f7:
         24:60:e5:90:a4:51:0c:0a:72:b7:53:53:fe:65:21:e7:87:b9:
         f8:94:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:14:59 2026 by rpki-client