Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
File:                     hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft (raw, json)
Hash identifier:          YSfCJ9BCXnL92M7MFBsS3GiwfoEW5ZU7gxo/xx3zMWc=
Subject key identifier:   91:93:97:5D:2B:2B:7A:FF:2F:AC:85:0B:C0:F7:32:23:C6:43:CB:6F
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Certificate issuer:       /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial:       1CD7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
Manifest number:          1CC6
Signing time:             Wed 18 Mar 2026 00:59:55 +0000
Manifest this update:     Wed 18 Mar 2026 00:59:55 +0000
Manifest next update:     Wed 18 Mar 2026 06:59:55 +0000
Files and hashes:         1: 31f7_X2TBqLiBpRN1OnRgM8DC7Q.roa (hash: EDZq6dLm3M96Cr9vfuuCf7swYf2DAzXUcm7JKmSi2EI=)
                          2: 8whNrfvksK_nL7nUwlr3YQ8OCMM.roa (hash: 7A86aEeVyO9bav/9GN5OuESIKlM542uYzcxXx/yoB84=)
                          3: Fx26zS42ZKgHp10iH3hf0EXlPC0.roa (hash: a8XrDUhYRXFVdJn/cYGcXPHJ88eqVViVtNhyRhNrCeM=)
                          4: IsbkjaUAU7euQKyY1WgOzQ_ves4.roa (hash: 88yWZHpmVTvOwW8PjW5Ko+13RaT8E8srLT6pcqhzCGw=)
                          5: O7PXvsoQVsVCbjm80wPTdCIX_2M.roa (hash: i9dI/Y0v5xPJObMG4dUgiVFFT9xbvOLXCYys5EeEDBg=)
                          6: RWOom0h13zAc02rOz6i24OlEc34.roa (hash: +R6GoicznAedk6+/LwpWWdjF8MN83mh2P32QVuI/qSo=)
                          7: TYjGjuiRoF-hGIfULnpS3-xjoQw.roa (hash: TKhwOdjif9ZZ0EHxMGHuC1TKqyqj+utqZbNaJEnhffo=)
                          8: hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl (hash: sAQ7mIhv7kPyhY3BdhUfryy+mFE0/ccvfMCtck4CJys=)
                          9: tLcmaLRL5ow6ONPLFExoGrjFXUg.roa (hash: BqOnsDlye4FTFONHzDyWPpsT/GJiiF+Nkv7UT0czVVw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7383 (0x1cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
        Validity
            Not Before: Mar 18 00:59:55 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9193975D2B2B7AFF2FAC850BC0F73223C643CB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:9e:83:c4:e3:35:6d:08:ca:78:b4:1f:c8:
                    07:90:05:d1:6f:81:4c:22:55:89:ee:71:7f:dc:26:
                    e2:1e:81:79:96:1d:a4:08:e3:29:17:47:11:44:97:
                    b4:03:48:56:ac:47:54:54:9d:81:6f:74:9d:30:5a:
                    51:a1:2a:d5:80:13:c2:84:96:41:80:65:5d:9a:09:
                    f7:f7:39:47:2b:d3:c8:b8:aa:56:9f:1f:a7:94:ca:
                    e9:12:51:46:ca:30:9a:e7:4d:d3:ac:f0:39:d1:a7:
                    66:3b:0a:51:66:77:82:ed:52:08:c9:c5:08:9e:0c:
                    f4:9c:68:49:7b:ac:e8:e8:79:de:1a:1b:46:84:c0:
                    1d:ea:37:ff:41:d4:eb:46:03:f0:f8:5c:6a:bd:75:
                    d7:1f:0b:47:8a:da:1e:5d:b0:3c:c4:e1:56:3b:f5:
                    69:a1:dc:d5:0c:a3:5a:03:41:cf:f9:e5:81:3d:28:
                    d0:8b:9d:a5:41:9a:9f:32:43:93:71:bc:8f:7d:ef:
                    2a:65:2d:72:96:4e:ae:03:16:47:2b:91:b1:e3:62:
                    15:c0:f0:be:b4:a7:2b:d8:b4:8a:3d:44:02:1f:f0:
                    14:b0:8c:bc:69:6f:6d:41:1e:09:25:b0:df:40:c0:
                    bb:b8:37:90:f9:72:55:44:0f:24:5e:c4:57:03:4a:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:97:5D:2B:2B:7A:FF:2F:AC:85:0B:C0:F7:32:23:C6:43:CB:6F
            X509v3 Authority Key Identifier:
                keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cc:27:7b:75:41:ec:9c:5f:16:a3:19:1b:d1:19:d9:ee:c5:
         eb:d7:8f:25:63:11:08:ce:bd:f7:2d:26:ff:cf:76:70:07:6d:
         67:69:9f:0c:88:d5:b2:50:09:6c:19:f0:9a:28:4e:5d:32:c2:
         b0:1b:2f:a6:08:5f:49:8a:4f:3d:f9:57:bc:df:28:fc:24:ff:
         2a:5a:10:e5:5b:4a:7d:c8:6b:1a:fd:80:a4:f1:fb:09:0b:6e:
         e4:08:f9:85:7f:ad:dc:05:43:6c:6e:bb:04:95:97:bf:f3:3e:
         2f:d6:db:36:ab:fd:54:4c:a0:0d:9b:87:ab:b2:2c:a4:fb:a1:
         bf:21:b4:50:ac:b3:95:48:be:df:ef:76:af:54:85:f4:be:1b:
         1e:63:c9:88:6f:fb:1e:db:46:87:a6:07:ac:de:be:44:cb:4c:
         44:ed:82:ed:1c:2b:71:d9:b3:55:64:2e:2f:ed:89:d4:60:2f:
         c8:f9:23:43:5c:96:1e:30:ef:7d:8f:59:5a:ef:b2:98:d3:48:
         be:55:6a:da:7a:25:b1:90:2a:e4:e8:9f:27:3b:9f:56:58:87:
         30:4b:7a:40:85:88:e0:41:f5:bf:4e:21:ac:9b:10:fb:b1:94:
         d1:25:f5:73:1a:f4:36:5d:01:e7:24:5a:74:ed:5e:36:02:2d:
         af:fb:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----