Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/mg5E9kaa32neXCm8u0D5Ow4Ym5g.mft
File:                     mg5E9kaa32neXCm8u0D5Ow4Ym5g.mft (raw, json)
Hash identifier:          /GFXIdEF2tC78vp0glaOPfwjb6lZquxdRVgygdsG0S0=
Subject key identifier:   F2:76:1B:5C:BD:4C:66:41:48:53:71:CD:EF:17:C2:B3:74:11:67:20
Authority key identifier: 9A:0E:44:F6:46:9A:DF:69:DE:5C:29:BC:BB:40:F9:3B:0E:18:9B:98
Certificate issuer:       /CN=9A0E44F6469ADF69DE5C29BCBB40F93B0E189B98
Certificate serial:       63
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mg5E9kaa32neXCm8u0D5Ow4Ym5g.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/mg5E9kaa32neXCm8u0D5Ow4Ym5g.mft
Manifest number:          62
Signing time:             Wed 18 Mar 2026 00:58:52 +0000
Manifest this update:     Wed 18 Mar 2026 00:58:52 +0000
Manifest next update:     Wed 18 Mar 2026 06:58:52 +0000
Files and hashes:         1: b9RARCs_NF4MtPgqifPaVSE3iFM.roa (hash: NSc817HVCF3sr6ZkfGksXSI+fFJjzhA4qWn+fa/222E=)
                          2: mg5E9kaa32neXCm8u0D5Ow4Ym5g.crl (hash: HTlSYS+6Rpss/mTeravcWUaHBpcKW6R+mjkn6P5b5zk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0E44F6469ADF69DE5C29BCBB40F93B0E189B98
        Validity
            Not Before: Mar 18 00:58:52 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=F2761B5CBD4C6641485371CDEF17C2B374116720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:bb:d7:88:15:1f:71:d1:98:e7:07:b6:85:
                    60:6b:7e:28:a5:ad:b0:f4:7f:19:2c:4d:61:10:4f:
                    14:4f:50:f2:4a:6f:89:56:e4:fd:a5:ca:cf:8a:9a:
                    8e:c7:e8:8f:e0:72:ad:a0:64:71:0a:67:d6:f2:81:
                    95:66:34:5d:49:1f:3f:1f:4e:73:18:e5:e0:ae:12:
                    b2:21:4c:f0:d9:14:5f:87:d4:8d:59:4f:69:50:80:
                    06:f4:9b:a4:5b:8f:d0:da:ee:98:bf:74:10:7c:3d:
                    03:cd:0f:ee:58:e0:1b:de:c0:dc:cd:e3:c4:30:f2:
                    b5:ce:f9:13:b2:5b:06:43:b8:b9:f1:ce:b4:d7:84:
                    65:cc:d5:c8:ff:e9:b7:81:74:48:a8:1c:fa:6a:86:
                    c5:59:4a:a3:72:ad:8a:a5:cd:e9:db:cf:46:62:85:
                    1a:8b:93:e6:fb:b3:ae:a2:10:7e:e4:e8:b2:fe:ae:
                    3c:71:46:a4:9e:4e:99:6e:9b:1b:cb:04:55:eb:07:
                    86:a3:2d:65:b6:ff:99:46:b7:14:72:d6:78:f7:2f:
                    ad:be:cd:f4:6c:03:56:cb:4a:e5:75:7b:ce:bb:78:
                    f5:cd:6a:31:c0:5b:91:84:cb:77:68:a0:5b:4b:95:
                    31:0b:fd:81:69:21:51:6c:38:15:28:9a:97:d7:4c:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:1B:5C:BD:4C:66:41:48:53:71:CD:EF:17:C2:B3:74:11:67:20
            X509v3 Authority Key Identifier:
                keyid:9A:0E:44:F6:46:9A:DF:69:DE:5C:29:BC:BB:40:F9:3B:0E:18:9B:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/mg5E9kaa32neXCm8u0D5Ow4Ym5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mg5E9kaa32neXCm8u0D5Ow4Ym5g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/mg5E9kaa32neXCm8u0D5Ow4Ym5g.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:95:5a:1a:82:81:6a:4c:26:9f:c8:59:c1:2b:87:5c:7f:
         8c:1a:6a:77:aa:1b:01:9e:72:ab:a3:2a:dd:6f:97:54:16:8d:
         93:9a:f4:6a:c4:63:58:3d:ac:1e:1c:70:16:c3:13:27:ee:12:
         f1:75:2c:4f:72:55:f4:05:35:db:04:f2:eb:f1:fb:a7:7d:83:
         06:72:28:50:2c:62:09:d4:53:c4:3f:9b:df:8d:00:8b:b3:54:
         07:44:3c:3b:55:d0:67:8a:2c:c0:21:d2:4d:0c:47:66:87:a3:
         e8:88:b6:4f:1d:9d:8f:92:96:d1:4e:7c:d9:e6:a5:d0:33:a4:
         ff:61:86:a8:b3:3a:8e:21:07:40:c0:37:4a:78:16:5a:e7:83:
         43:1e:cd:62:7d:3b:63:3e:6a:da:68:e7:12:ad:0e:13:60:d4:
         7c:d8:ed:1b:f3:cc:90:c3:00:49:21:9b:bb:7c:c4:a4:af:f2:
         e5:28:5b:f0:9c:cd:8c:03:87:56:b5:48:10:6b:59:06:14:46:
         2d:ab:ea:56:b4:5e:9d:03:df:4d:d5:f1:08:cc:57:39:00:2e:
         d3:3b:ff:4a:65:f1:6f:f8:b7:e1:55:48:cf:e7:4c:16:fa:b6:
         d2:5a:c2:6b:20:be:b8:6f:a1:bc:dc:2c:c7:4d:15:99:bc:1d:
         47:52:57:d0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QTBF
NDRGNjQ2OUFERjY5REU1QzI5QkNCQjQwRjkzQjBFMTg5Qjk4MB4XDTI2MDMxODAw
NTg1MloXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoRjI3NjFCNUNCRDRDNjY0
MTQ4NTM3MUNERUYxN0MyQjM3NDExNjcyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ3+u9eIFR9x0ZjnB7aFYGt+KKWtsPR/GSxNYRBPFE9Q8kpviVbk
/aXKz4qajsfoj+ByraBkcQpn1vKBlWY0XUkfPx9Ocxjl4K4SsiFM8NkUX4fUjVlP
aVCABvSbpFuP0NrumL90EHw9A80P7ljgG97A3M3jxDDytc75E7JbBkO4ufHOtNeE
ZczVyP/pt4F0SKgc+mqGxVlKo3KtiqXN6dvPRmKFGouT5vuzrqIQfuTosv6uPHFG
pJ5OmW6bG8sEVesHhqMtZbb/mUa3FHLWePcvrb7N9GwDVstK5XV7zrt49c1qMcBb
kYTLd2igW0uVMQv9gWkhUWw4FSial9dMbBMCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBTydhtcvUxmQUhTcc3vF8KzdBFnIDAfBgNVHSMEGDAWgBSaDkT2Rprfad5cKby7
QPk7DhibmDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE4
L21nNUU5a2FhMzJuZVhDbTh1MEQ1T3c0WW01Zy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbWc1RTlrYWEzMm5lWENtOHUwRDVPdzRZbTVnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxOC9tZzVFOWthYTMybmVY
Q204dTBENU93NFltNWcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWvGVWhqCgWpMJp/IWcErh1x/jBpqd6obAZ5yq6Mq3W+XVBaNk5r0asRjWD2s
HhxwFsMTJ+4S8XUsT3JV9AU12wTy6/H7p32DBnIoUCxiCdRTxD+b340Ai7NUB0Q8
O1XQZ4oswCHSTQxHZoej6Ii2Tx2dj5KW0U582eal0DOk/2GGqLM6jiEHQMA3SngW
WueDQx7NYn07Yz5q2mjnEq0OE2DUfNjtG/PMkMMASSGbu3zEpK/y5Shb8JzNjAOH
VrVIEGtZBhRGLavqVrRenQPfTdXxCMxXOQAu0zv/SmXxb/i34VVIz+dMFvq20lrC
ayC+uG+hvNwsx00VmbwdR1JX0A==
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:35:02 2026 by rpki-client