Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json)
Hash identifier: DiEEscoxbiceablNH1iSE3EmFckS53HZO2AzzEWKWvs=
Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8
Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68
Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68
Certificate serial: 0247
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
Manifest number: 0247
Signing time: Wed 18 Mar 2026 01:01:29 +0000
Manifest this update: Wed 18 Mar 2026 01:01:29 +0000
Manifest next update: Wed 18 Mar 2026 07:01:29 +0000
Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: 0RUtcaQtQcAw2N19HuwzrmAV0n1TrQ0XLADaH3Kzz4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68
Validity
Not Before: Mar 18 01:01:29 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1:
ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad:
0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18:
5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9:
c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8:
ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d:
df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31:
59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33:
0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97:
68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22:
a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd:
ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29:
8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af:
ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98:
0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88:
bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a:
70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8
X509v3 Authority Key Identifier:
keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:f8:96:99:d2:cd:8f:25:21:4e:d2:fb:2f:c4:88:8b:78:
b7:83:2f:aa:30:0b:1e:a3:71:11:22:b2:0f:bc:2c:1e:93:ac:
5c:26:f5:12:82:45:6f:67:72:85:5c:a6:bc:8c:41:6f:02:60:
5a:4b:1e:2a:99:ac:aa:25:ba:7e:63:b1:c1:0a:ef:a0:2a:b1:
53:46:6f:db:38:9a:8c:d0:f4:ed:f0:a7:df:a2:ac:51:ac:33:
93:70:09:7d:9b:64:c5:9c:98:7a:3d:6e:14:3b:e0:2c:71:eb:
11:24:75:9c:30:da:e6:bb:af:df:78:46:06:0d:00:0e:04:53:
64:53:57:31:52:f2:c1:32:4a:48:e3:0e:28:f0:ab:6f:e1:4f:
43:73:0c:05:96:4e:b5:73:f6:0b:d7:8d:b1:a5:d7:bf:33:0f:
d0:54:fb:b0:cc:2d:a2:d8:25:86:a0:4a:15:e0:19:af:0d:a3:
cc:c9:fe:fd:74:b4:44:b4:2e:c9:6b:4c:df:b4:60:20:f4:a7:
cb:cc:81:c2:25:25:90:bf:b9:b5:61:7f:e9:fb:ea:56:46:f8:
98:e0:7f:bb:c7:40:01:af:14:ac:8f:61:c8:6b:01:35:c5:1c:
da:10:c6:a2:4b:f3:fe:06:81:6f:81:67:bd:55:76:c6:6c:3c:
5f:78:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:24:49 2026 by rpki-client