Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft
File:                     s7pq7zuPouXZteQ0OOACDUJqHso.mft (raw, json)
Hash identifier:          BtcJ6ttyPRbgyHb2gk9kKHnTOxTwYUXy1vRdXQri5mM=
Subject key identifier:   C7:40:47:DB:46:31:A4:74:E1:19:9E:E6:1A:2B:3A:FC:7A:1A:B9:54
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Certificate issuer:       /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial:       1CFA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft
Manifest number:          1CDC
Signing time:             Wed 18 Mar 2026 01:01:15 +0000
Manifest this update:     Wed 18 Mar 2026 01:01:15 +0000
Manifest next update:     Wed 18 Mar 2026 07:01:15 +0000
Files and hashes:         1: -o2ojTOqYYJIDpWfOiyLjZ31yxQ.roa (hash: MNolSCJVzDPmPWSVrY58xBA1Z6PwYrpG1yrKqcxt0ho=)
                          2: 9EagA56WVM6kpTQ8jadQG7pUMDE.roa (hash: L6JnTaYkliglaFxtnTSH80tKSo26V8tuLROJtvyDN5A=)
                          3: A7_TBOfWNcoCaZKhjBsM-eCbm1E.roa (hash: +dDBCkGwdU2tDXqTGw8aRO3YIU674YysRVfukmnjpWE=)
                          4: HjQoiWdSark1Vq_WBRravxkv_Pg.roa (hash: XBR6XXXcZGbdzil4gB51pnfrtY7dwGqHOJqSoNbHj+o=)
                          5: LiAQvuPyRcNAWaIePmmOLQCJB9M.roa (hash: D9nMEz0k907otUZV2bbM4LEH3tQm/EJJFBh3krolfHM=)
                          6: N0ykxOYRwjcbjGA-CRafyOh6b58.roa (hash: 5XKU2EuhR7yCyj5g6B5Az+R37tn+S+RHA0GT9i3eSVQ=)
                          7: TKyNWD1BkvQVJhcoExsJPNXZ8RA.roa (hash: tt1jtRoSM7ZcVuEJtyj2l/29W5SUIpR0xkxvDDm2Is4=)
                          8: UcTohbTQodAbEAI3lzS2aS5o8k8.roa (hash: Vd+P8Da+KkTKhV689IfBELIJGjeJR1MDlO/BU9VdRD0=)
                          9: gIpZp16RVJiyaukGncHAAp8v7Z4.roa (hash: KlFqfBhgn1zm+5r4EvNoSG+8QugbfpO1s1kFZ8Il0qU=)
                          10: mMFE8XbmKzkCukTu2c6-RlL6OVE.roa (hash: Zi/XHNT9Cksmx9bOlUksNhaZ8bRdvbMS+qgdAoQCgpI=)
                          11: q-9Ry7-1k_3djUpTgosZ8igSYDc.roa (hash: 6k801Xs8mnm7m8Hxv8JUH3LVMp3KISuyxt42Gy19gjk=)
                          12: s7pq7zuPouXZteQ0OOACDUJqHso.crl (hash: oLkmKLT3jOB5Ig4zWlzA2d3bhbHneJ68Kegss13GkoE=)
                          13: tEsvDAANOTtJFf8oaAsz7pMudq4.roa (hash: 7peBtdsiHI0wHp98ydqxlvhy96MGbeVHwjS5dAx0n4k=)
                          14: vkWmHQcT_WfmSt8gQcnOswgyK4o.roa (hash: x3N7xl+pzlyFbxXl0X4yw//BbVjll4FUrmQW5XSju64=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7418 (0x1cfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
        Validity
            Not Before: Mar 18 01:01:15 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C74047DB4631A474E1199EE61A2B3AFC7A1AB954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:b3:10:31:ca:b7:57:21:7d:b3:22:cc:ab:
                    67:13:04:00:35:46:88:7b:b5:52:d0:0d:61:b1:09:
                    f9:24:ce:3c:72:16:fe:d8:3d:4f:94:c7:94:47:c1:
                    58:bc:0a:cb:f8:68:bb:fd:2a:78:61:3e:da:11:1c:
                    fa:5c:bb:21:ab:6d:d3:1c:57:a0:2f:ba:aa:a8:bf:
                    19:1b:6c:cc:2d:6e:b2:af:17:92:11:a1:00:86:99:
                    12:8d:77:06:24:cd:a8:0d:ea:82:71:66:5b:7b:e2:
                    c7:34:44:1e:aa:59:6b:97:30:c5:f8:06:d3:a1:34:
                    90:4b:f4:f8:0e:a5:c2:e7:78:88:45:fd:aa:d2:d9:
                    46:93:1d:52:a2:15:b5:c8:f6:a8:75:e4:ee:23:18:
                    59:82:17:87:60:3f:63:1d:89:20:9a:7e:74:b8:a0:
                    04:13:9a:0c:b0:b4:a8:d8:d8:a0:4e:25:b2:9c:fb:
                    37:c4:23:43:07:a9:3e:24:7d:14:c5:af:07:33:84:
                    d1:dd:af:e2:72:fb:41:a0:a8:6a:b0:9a:80:b1:48:
                    1d:f4:71:6c:94:fb:7d:36:c4:c0:5e:1b:ee:bd:fc:
                    7a:03:dc:e4:5d:96:82:5c:2d:13:80:9d:ff:f3:85:
                    8b:04:d7:f0:0d:31:6b:e2:86:15:46:0b:dc:e4:ea:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:47:DB:46:31:A4:74:E1:19:9E:E6:1A:2B:3A:FC:7A:1A:B9:54
            X509v3 Authority Key Identifier:
                keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:40:a2:c5:b3:00:ee:ea:a9:f4:e1:3f:85:df:f1:56:04:
         86:04:b8:21:33:d9:7c:0c:23:8a:6c:26:dc:c9:5e:cb:55:c1:
         ff:89:73:26:ff:9e:0f:43:c1:b0:d0:ff:3f:8c:ef:b3:6c:14:
         b3:11:0e:68:73:32:ee:be:99:08:d7:08:c5:66:81:02:c0:74:
         43:78:d6:08:64:12:12:3e:1b:ed:2e:5a:a9:3f:e6:8d:20:43:
         9e:4d:f5:54:e8:0b:01:28:be:49:f1:db:38:93:d9:92:3f:73:
         18:fb:78:db:8d:cb:4d:df:23:d7:75:4e:64:6f:5a:e5:ed:b1:
         ee:6b:cc:20:1a:1c:cd:8d:d3:dd:e1:87:a2:58:6a:9f:b0:40:
         77:02:33:dc:f8:c2:2b:15:5f:02:b2:3f:ca:87:82:b7:7f:a2:
         0c:6a:57:34:ac:42:8a:ea:74:42:a3:e9:99:8c:30:43:a6:fb:
         db:90:1b:8b:6e:5f:87:63:df:dd:42:5c:04:4e:0b:c7:a7:88:
         f6:84:19:33:e0:65:28:99:a0:32:8c:f8:c1:1a:ae:ca:b2:51:
         b1:70:bd:6e:81:e4:3f:73:bd:f3:d8:f0:ff:8d:8c:60:c3:dd:
         25:3e:af:55:b4:0c:c6:d6:a6:16:4a:37:a7:72:b5:95:73:22:
         5b:fb:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:29:34 2026 by rpki-client