Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft
File:                     L-CZDiHmrELt9vl6EYfoLsddYJE.mft (raw, json)
Hash identifier:          yj2X2E0ygzLwPLeuw1Ue1ZH87XhvfBfPYw9r27MuBp4=
Subject key identifier:   9D:6B:46:DB:EE:30:43:A5:73:D7:82:80:6D:0B:C2:FC:21:1B:CA:2E
Authority key identifier: 2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91
Certificate issuer:       /CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091
Certificate serial:       015F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft
Manifest number:          015E
Signing time:             Wed 18 Mar 2026 04:59:04 +0000
Manifest this update:     Wed 18 Mar 2026 04:59:04 +0000
Manifest next update:     Wed 18 Mar 2026 10:59:04 +0000
Files and hashes:         1: L-CZDiHmrELt9vl6EYfoLsddYJE.crl (hash: 2x/oPEoeG2llyVXGqRTsKVenfN8cPIKnLz/XAkG5NJQ=)
                          2: nwZJ_Z76f5nrAbhm-z61UMpWNLE.roa (hash: YBEQOFqdadnyvGrPq0MmizNCd9b0uYhx6GQloEdvXrY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091
        Validity
            Not Before: Mar 18 04:59:04 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9D6B46DBEE3043A573D782806D0BC2FC211BCA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:3f:b1:6b:c0:a4:c9:7d:c1:94:c2:14:82:
                    f1:32:29:76:95:4c:c7:0b:34:23:a1:31:3e:8f:c1:
                    05:0c:69:61:b6:2f:93:2e:4d:a0:6a:da:82:fe:05:
                    a8:b1:6c:2b:07:d9:d3:56:0e:6a:a9:a8:ed:d0:3e:
                    1d:63:6f:4b:89:c4:82:7d:e0:f4:6b:2f:3c:be:95:
                    09:81:cc:9e:e0:3e:26:0c:ac:ba:4d:8c:6e:de:33:
                    43:ce:a8:44:1c:10:ee:ca:07:b8:5b:51:14:69:7a:
                    aa:04:0c:44:4a:08:37:83:ca:6a:52:55:e6:a9:eb:
                    43:52:25:0e:68:fb:58:9e:69:0c:c9:1c:00:3e:08:
                    ce:05:35:70:3a:67:d8:ce:c8:52:3e:31:8f:5e:63:
                    24:c0:b0:06:59:65:3e:e4:ab:07:37:21:19:41:08:
                    e8:43:a7:f0:d2:8c:e9:d7:db:0f:8e:81:be:c3:eb:
                    b3:bc:4e:87:61:0e:24:96:5e:55:9c:93:9e:71:a1:
                    92:47:f5:c1:ac:75:06:df:fe:04:00:e9:79:16:c0:
                    3d:c8:d1:7d:09:77:2d:82:f3:2e:38:51:6b:6f:fa:
                    4b:33:8b:d3:75:f1:12:66:f9:68:4c:0a:b1:e7:0f:
                    b0:d2:00:c7:02:46:b6:2f:4c:0a:63:be:7e:3a:ca:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6B:46:DB:EE:30:43:A5:73:D7:82:80:6D:0B:C2:FC:21:1B:CA:2E
            X509v3 Authority Key Identifier:
                keyid:2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:5a:3f:1d:29:00:ba:d5:36:93:8f:d9:0d:21:f6:86:6b:
         b2:1f:c7:2d:ef:49:83:12:08:dd:8d:37:ce:58:d8:07:e8:8b:
         f9:37:87:cb:29:cf:e9:40:de:13:05:cc:6b:07:0d:44:fb:89:
         a7:f7:a4:1a:8b:a0:5f:8e:21:e5:61:b2:69:fd:56:4b:3a:2f:
         b0:6a:55:f1:98:50:8b:2b:2c:d2:34:42:90:ff:4e:dc:69:f3:
         ed:e9:b4:d4:a2:ef:d0:c7:f3:85:26:9b:4f:ad:35:4e:4e:6a:
         86:aa:8d:3d:b1:10:96:71:e2:56:8b:bf:71:49:a7:fa:46:e7:
         86:3a:32:a0:17:de:68:9f:e1:bb:a6:00:d0:6b:79:cc:3b:67:
         a0:3d:18:bd:00:fc:f9:f2:1c:e9:27:94:e1:17:1e:e5:20:5e:
         42:ee:53:a6:c6:f8:6d:8a:66:3d:13:a5:a2:f3:ec:91:6f:27:
         8e:7b:4a:d5:1b:c0:00:72:1a:8d:be:43:46:e2:97:9c:89:49:
         00:e1:7e:98:35:46:20:52:f1:f7:6d:ae:90:66:80:c2:6c:06:
         f5:84:65:0f:50:97:0a:85:da:5d:32:20:78:55:ce:39:2a:55:
         f0:21:6e:70:dc:c9:e3:32:b2:73:0f:ef:0a:ee:78:f3:6b:91:
         f3:1b:ad:b2
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZF
MDk5MEUyMUU2QUM0MkVERjZGOTdBMTE4N0U4MkVDNzVENjA5MTAeFw0yNjAzMTgw
NDU5MDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDlENkI0NkRCRUUzMDQz
QTU3M0Q3ODI4MDZEMEJDMkZDMjExQkNBMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClUz+xa8CkyX3BlMIUgvEyKXaVTMcLNCOhMT6PwQUMaWG2L5Mu
TaBq2oL+BaixbCsH2dNWDmqpqO3QPh1jb0uJxIJ94PRrLzy+lQmBzJ7gPiYMrLpN
jG7eM0POqEQcEO7KB7hbURRpeqoEDERKCDeDympSVeap60NSJQ5o+1ieaQzJHAA+
CM4FNXA6Z9jOyFI+MY9eYyTAsAZZZT7kqwc3IRlBCOhDp/DSjOnX2w+Ogb7D67O8
TodhDiSWXlWck55xoZJH9cGsdQbf/gQA6XkWwD3I0X0Jdy2C8y44UWtv+kszi9N1
8RJm+WhMCrHnD7DSAMcCRrYvTApjvn46ys2ZAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUnWtG2+4wQ6Vz14KAbQvC/CEbyi4wHwYDVR0jBBgwFoAUL+CZDiHmrELt9vl6
EYfoLsddYJEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU2
L0wtQ1pEaUhtckVMdDl2bDZFWWZvTHNkZFlKRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTC1DWkRpSG1yRUx0OXZsNkVZZm9Mc2RkWUpFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU2L0wtQ1pEaUhtckVMdDl2
bDZFWWZvTHNkZFlKRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC411o/HSkAutU2k4/ZDSH2hmuyH8ct70mDEgjdjTfOWNgH6Iv5N4fLKc/pQN4T
BcxrBw1E+4mn96Qai6BfjiHlYbJp/VZLOi+walXxmFCLKyzSNEKQ/07cafPt6bTU
ou/Qx/OFJptPrTVOTmqGqo09sRCWceJWi79xSaf6RueGOjKgF95on+G7pgDQa3nM
O2egPRi9APz58hzpJ5ThFx7lIF5C7lOmxvhtimY9E6Wi8+yRbyeOe0rVG8AAchqN
vkNG4peciUkA4X6YNUYgUvH3ba6QZoDCbAb1hGUPUJcKhdpdMiB4Vc45KlXwIW5w
3MnjMrJzD+8K7njza5HzG62y
-----END CERTIFICATE-----
Generated at Mon Jun 22 06:26:29 2026 by rpki-client