Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft
File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json)
Hash identifier: shT5oAw0XWugugl6ibUl7lMCdC02V6n+435xo/QMsu8=
Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6
Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Certificate serial: 0234
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft
Manifest number: 0230
Signing time: Thu 12 Mar 2026 09:01:22 +0000
Manifest this update: Thu 12 Mar 2026 09:01:22 +0000
Manifest next update: Thu 12 Mar 2026 15:01:22 +0000
Files and hashes: 1: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: pBC6KGcAK8tnWhd+s+78KSjGPomIT6zfjnN649dRYbU=)
2: RaawOuDDYFp9jGPJIVM5tLlWjyk.roa (hash: WWfDSgavDPugQlvWIeOHbTfRUr6gg9vMY9vNrAQH45g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Validity
Not Before: Mar 12 09:01:22 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8:
a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2:
0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d:
de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb:
85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3:
0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40:
38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9:
af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69:
79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3:
c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd:
65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24:
95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a:
0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41:
bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c:
0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35:
9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c:
9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6
X509v3 Authority Key Identifier:
keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b6:ba:08:6d:9b:98:66:37:69:ea:3e:a9:2c:27:30:2d:72:
27:e4:31:70:0f:8f:de:58:2d:98:dc:86:c6:6f:ab:74:f1:40:
ef:50:27:80:7e:99:a0:a4:66:b5:a2:fc:b5:d6:11:10:ec:89:
59:4d:8d:9f:bb:41:32:36:67:8e:b3:1d:52:f8:eb:4b:ea:72:
96:b4:68:5f:87:80:f1:87:64:36:e8:63:05:b0:bc:b1:1b:98:
a4:04:9c:06:b3:2a:e3:b1:0a:6b:f0:3f:47:63:88:db:34:0a:
33:b0:cd:f3:46:fe:85:b3:08:b5:7c:c7:08:49:fa:79:bd:f9:
b2:e9:49:49:80:3c:2c:05:bf:b7:43:9d:d6:f7:83:6b:d2:3a:
32:09:1a:9f:d4:80:0f:08:a9:c1:ba:39:4e:01:b3:f7:dc:da:
75:8a:2f:e5:64:10:4d:a8:6b:35:30:1e:59:66:46:55:9d:61:
47:c8:25:88:c9:93:cc:f1:be:9b:5e:38:21:54:60:6f:f5:5e:
5f:fa:49:84:ee:34:2d:cc:e6:1e:5a:65:14:4f:2d:38:da:d2:
88:95:6f:91:06:eb:c5:69:c8:4c:74:d3:f6:e2:03:1e:4a:a4:
5b:e0:b0:c3:e8:67:e4:a7:c1:b4:38:63:df:a9:06:e2:db:6b:
bb:40:c2:af
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNB
QTdGMjAxMzMxRDcxMEEzRjA2ODIyQkU0RDQ3MkE1MjA3RUIwOTAeFw0yNjAzMTIw
OTAxMjJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzRTkyNTMwNzk5NERG
RTczMDkyNzVBNzBDNkQ2QkU3MEQyMzE2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnQRHDmuG6h4Tyyowh+KJzq3YpKd30mIrzax2U8g3Uov+iycOt
I9spqjVyPd4lmN+ZZKTERECl7nazu4Xf1G9zALfR4HrlmxKJ8w1F3Pc3hM7oU7N+
ZPPKQDhHd8dUVdtw4tKmz6bDqa9jYqpIJBzGtKmPWfQVaXn1+px7XvPeVPZY+AOf
88K6CJEUF3CdXyhYQgibvWWL9d4cxiatmCAJRxQQJJVdDIi/a/a1A+oHme6Vagyq
1iieH6crqpw0zVF5QbtGp7GAKDzw1MCh2+szbA9WQ/LSWtGseNfFsJvbNZo+H0yX
x3vKygR/V+5MPJql0T3eLnJeVYLxPPKdW6WFAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUQ+klMHmU3+cwknWnDG1r5w0jFsYwHwYDVR0jBBgwFoAUQ6p/IBMx1xCj8Ggi
vk1HKlIH6wkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx
MS9RNnBfSUJNeDF4Q2o4R2dpdmsxSEtsSUg2d2suY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvUTZwX0lCTXgxeENq
OEdnaXZrMUhLbElINndrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALi2ughtm5hmN2nqPqksJzAtcifkMXAPj95YLZjchsZvq3TxQO9QJ4B+maCk
ZrWi/LXWERDsiVlNjZ+7QTI2Z46zHVL460vqcpa0aF+HgPGHZDboYwWwvLEbmKQE
nAazKuOxCmvwP0djiNs0CjOwzfNG/oWzCLV8xwhJ+nm9+bLpSUmAPCwFv7dDndb3
g2vSOjIJGp/UgA8IqcG6OU4Bs/fc2nWKL+VkEE2oazUwHllmRlWdYUfIJYjJk8zx
vpteOCFUYG/1Xl/6SYTuNC3M5h5aZRRPLTja0oiVb5EG68VpyEx00/biAx5KpFvg
sMPoZ+SnwbQ4Y9+pBuLba7tAwq8=
-----END CERTIFICATE-----
Generated at Thu Mar 12 12:26:35 2026 by rpki-client