Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft
File:                     rfvoMVB70kEq-LhxELshC7RrLH4.mft (raw, json)
Hash identifier:          qR1yIJrlqN5pLZp92vF8Ox3hrZwweYY2Q7inNCz4qqo=
Subject key identifier:   8A:55:C8:D3:C2:FA:F9:F1:35:8C:44:B9:E9:40:DC:67:66:0B:B1:04
Authority key identifier: AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E
Certificate issuer:       /CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E
Certificate serial:       FD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft
Manifest number:          FD
Signing time:             Wed 18 Mar 2026 01:01:45 +0000
Manifest this update:     Wed 18 Mar 2026 01:01:45 +0000
Manifest next update:     Wed 18 Mar 2026 07:01:45 +0000
Files and hashes:         1: rfvoMVB70kEq-LhxELshC7RrLH4.crl (hash: ATD3pxPIy7Swt/PpyR6FMzHQXvN8JopHxPxjNPQTCxo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E
        Validity
            Not Before: Mar 18 01:01:45 2026 GMT
            Not After : Jan 19 07:29:19 2027 GMT
        Subject: CN=8A55C8D3C2FAF9F1358C44B9E940DC67660BB104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:31:31:7d:40:77:f2:65:22:fc:57:99:66:
                    02:8e:b1:ad:49:f3:a7:b4:c3:02:59:b6:00:03:6e:
                    e3:d9:72:e5:53:c5:3c:45:20:d5:92:dc:68:11:a2:
                    57:ac:ac:22:a5:c4:85:67:78:20:ca:d5:8a:3b:85:
                    84:b9:71:77:25:5b:a8:16:e3:1f:7f:0e:1b:58:cd:
                    26:31:46:9f:83:e4:1a:6c:ee:29:8b:8b:c8:51:cc:
                    5d:28:22:60:ed:4e:e5:f8:cc:de:6f:1f:2d:bd:a6:
                    36:14:9e:6b:de:a6:88:87:65:c2:bd:63:7a:83:c5:
                    d4:42:4c:2b:1c:ae:5d:6c:d0:2d:ce:9e:2a:cb:b5:
                    df:a0:87:8a:06:6b:de:1e:63:7e:76:58:f1:60:6f:
                    9d:04:a2:8f:b5:92:a5:4d:5e:e3:83:63:ad:94:e1:
                    95:d0:de:17:b8:c0:fb:e6:e0:f3:24:cb:10:aa:9a:
                    cd:eb:aa:a5:18:5a:98:78:5b:27:80:0b:79:f2:52:
                    47:cb:64:3f:f4:d0:24:b8:02:01:c1:5a:0d:f3:62:
                    03:b7:79:91:7e:9f:6a:3d:3f:cc:f1:85:2a:86:12:
                    a8:25:0f:fc:aa:76:bc:83:5c:25:82:ea:37:31:05:
                    ff:8e:2a:34:c2:09:67:ef:ab:ce:1e:f6:b3:43:6a:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:C8:D3:C2:FA:F9:F1:35:8C:44:B9:E9:40:DC:67:66:0B:B1:04
            X509v3 Authority Key Identifier:
                keyid:AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:80:49:85:56:79:1d:c7:39:ad:1a:52:dc:90:36:67:64:8f:
         61:60:33:ee:04:c9:2a:20:57:bb:c8:c5:04:ee:52:33:5f:cd:
         6f:44:1a:35:a6:41:fa:35:4a:2e:14:72:b7:12:e3:cc:79:2c:
         aa:e4:ce:0d:58:72:62:1e:63:c4:51:b1:03:bb:53:3f:86:5e:
         9c:af:e3:f5:56:f9:8c:07:d8:7b:a2:c9:3a:12:0b:e4:50:98:
         04:69:16:fd:96:3f:e9:64:b7:85:25:16:f7:55:00:70:44:8f:
         cc:ef:76:aa:2b:d9:e6:53:a3:c6:85:7b:a3:49:da:3c:eb:35:
         c6:91:f0:ab:7f:a7:4a:13:c8:ca:b6:04:de:1b:67:db:29:c3:
         41:a9:67:1d:e9:4f:d3:dc:49:39:b4:3a:e9:6d:40:d1:72:80:
         ac:68:4e:2b:7a:f5:b3:28:a1:d0:66:28:38:ad:a0:ba:8a:d0:
         83:e1:3f:af:f5:78:42:b4:f1:02:49:58:ba:68:b8:71:93:a2:
         59:1b:68:dd:53:05:b5:24:1b:24:94:46:d6:aa:7c:84:1b:c3:
         e8:65:18:ca:5a:71:5a:be:96:96:a1:ab:bd:48:fc:db:2c:8d:
         27:ba:f7:1b:d7:06:68:b3:96:8d:1f:23:3e:19:5f:03:c3:12:
         81:7e:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:29:39 2026 by rpki-client