Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
File: rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json)
Hash identifier: Ff1kaeolkty5xkdkQ+BOf8Byx3zdySbXZ7QnTBolDIk=
Subject key identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 2080
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
Manifest number: 2077
Signing time: Wed 18 Mar 2026 05:00:01 +0000
Manifest this update: Wed 18 Mar 2026 05:00:01 +0000
Manifest next update: Wed 18 Mar 2026 11:00:01 +0000
Files and hashes: 1: 3bPM0E9E-YvPCpRumCwgHuoVd7Y.roa (hash: 5Xe7buIekzESyvD5O72oL4yGa325tDms4nLYtZz27LQ=)
2: KSm2-9EZTyNgvEP3G65pF3u9LVI.roa (hash: jSmiBLmcELBvFO/kvXg7C5gquFptamvPRqMELMyUxNU=)
3: aDJMSli9BvYR-TM2eJeLBMHxuRg.roa (hash: 7l9/6ahCOvmnNA/ml3z5Ycx20i9RV3+76YATC6eBUR0=)
4: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: S9ue4jkXR1N78VvX85Q5VAfzfohdOcrqwZGCtdIouKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8320 (0x2080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: Mar 18 05:00:01 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15:
e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b:
5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4:
db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa:
36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb:
5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1:
05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65:
01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49:
86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b:
02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75:
bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86:
3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7:
34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c:
72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff:
8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77:
12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06:
ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:d0:ad:7e:20:77:e8:f1:e7:36:df:41:95:39:9b:04:41:
2d:0d:12:09:16:26:a3:17:6e:cf:41:88:c0:19:dc:c0:0d:e5:
80:b2:60:06:5f:be:1e:68:c5:e5:58:55:51:8c:e3:6a:cb:77:
74:87:e5:00:a8:30:43:21:28:ba:45:b3:24:9c:7e:52:d8:79:
25:0f:bb:30:d3:a6:11:22:20:69:59:9f:dd:2d:c0:2e:ea:fd:
76:75:19:08:93:a2:a9:47:17:ca:de:00:fb:a3:3c:26:38:d6:
2c:b6:f7:5b:6e:91:e9:e9:a1:a4:9d:49:8e:6f:ae:22:96:26:
61:18:a6:98:a2:cf:1a:36:eb:19:09:29:6d:a2:00:1b:60:51:
2f:58:a2:93:ae:de:27:56:61:4c:ae:2d:67:78:73:21:fb:0d:
82:c0:88:c5:d3:e1:45:f1:92:49:1b:72:12:81:d2:ef:d5:f1:
77:31:45:79:46:5c:69:58:8a:cc:08:f4:f3:37:c2:14:a7:1e:
8c:54:aa:74:30:9e:b0:2c:e5:b6:a1:7f:d6:9f:a1:dc:de:e2:
dd:db:ca:5e:12:ae:99:d5:78:6d:55:99:64:03:03:73:11:a9:
5c:52:36:39:b2:75:31:08:fe:40:f7:da:3b:10:91:ba:de:0c:
d8:75:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:35:00 2026 by rpki-client