Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft
File: m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft (raw, json)
Hash identifier: RB3QSRo9cTs6MVBixbt3Bpl9VbqGbJyVf0+OIKEeDLE=
Subject key identifier: 42:CA:EE:A6:60:60:CA:33:38:7B:50:1B:B1:26:DC:FB:B8:C4:4E:4E
Authority key identifier: 9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
Certificate issuer: /CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Certificate serial: 1EA4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft
Manifest number: 1E9D
Signing time: Tue 17 Mar 2026 23:59:52 +0000
Manifest this update: Tue 17 Mar 2026 23:59:52 +0000
Manifest next update: Wed 18 Mar 2026 05:59:52 +0000
Files and hashes: 1: U8G90-YYRgh6k3HDnDRzn22nZOU.roa (hash: 1ypHTYDNhHGShZNbyXb5EDdy2PfInXRHSiQUuVslDdQ=)
2: gcv3IRtBMP0g_QP2HXkJ4IuRlKU.roa (hash: W4N2kLS/TBnU7hLEU2XcWlrf1fkrk2tPC5ARdXrekA0=)
3: m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl (hash: t9yZIB2Ck30VQJ7uXWl6osmQ3kpXkVqnISbztNJ/TNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7844 (0x1ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Validity
Not Before: Mar 17 23:59:52 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=42CAEEA66060CA33387B501BB126DCFBB8C44E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:e9:fb:c8:37:26:30:8e:a9:73:91:eb:0d:
d3:a8:4b:94:58:77:f2:a5:18:d1:24:94:c9:4f:84:
16:5f:19:49:15:da:ef:5e:46:93:09:48:dc:21:2c:
d6:38:6e:8c:9f:77:57:5a:af:4b:1a:53:6b:a1:32:
77:5c:75:26:c5:51:ab:17:75:bb:8c:26:74:b9:60:
a0:77:e6:e7:14:62:f8:98:12:6f:35:59:62:2b:d5:
56:2d:e1:58:51:dc:35:6b:0f:ed:38:ac:0f:ee:24:
37:8e:94:8a:4d:81:d5:49:03:f1:af:58:e6:ac:dd:
33:3d:a6:ab:5d:64:4f:6c:78:8f:0e:7c:91:09:6d:
a5:b9:9f:23:ee:d3:d9:86:81:84:20:f7:2a:94:9a:
a0:25:0f:f5:5c:1c:8d:b3:2c:e2:9a:65:e5:8e:ef:
85:ec:ee:e0:2a:ce:77:5c:30:7a:0a:6b:66:38:c7:
58:60:8e:49:9a:c9:90:12:99:73:35:b4:ac:e4:85:
ab:30:0d:a7:fa:ef:97:8c:64:c1:cc:93:a0:dc:0d:
e6:18:f4:6d:f3:e3:2b:78:3c:4e:ba:97:98:c5:1b:
bf:46:10:5f:f0:ef:cd:13:be:9c:a8:39:68:90:65:
51:b5:2f:20:8e:20:42:06:5d:58:4b:33:2b:a1:fb:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:EE:A6:60:60:CA:33:38:7B:50:1B:B1:26:DC:FB:B8:C4:4E:4E
X509v3 Authority Key Identifier:
keyid:9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:93:2e:e8:8c:d9:44:36:eb:b0:78:a9:a1:33:a3:40:90:2f:
19:aa:bf:27:55:14:01:ce:33:bd:ea:3a:86:21:95:a6:19:a8:
8f:f8:1d:75:9e:fb:18:dc:81:ba:9e:89:83:90:31:2e:32:b1:
e5:af:9c:70:87:93:9d:7f:a6:89:7c:ed:54:0e:b7:b7:67:bf:
a1:62:de:ed:73:4c:da:5b:ff:e2:2c:4f:2b:84:f7:8e:2d:86:
47:6d:63:6d:98:a2:31:3a:48:06:0c:44:3c:a2:33:ec:ba:cc:
29:48:69:08:db:82:b5:86:e4:6f:74:87:3c:95:eb:72:8c:b8:
4b:6a:31:d2:7b:c8:eb:b3:51:3f:36:9c:be:96:b8:81:c2:ec:
98:1e:a1:1d:bb:14:88:b3:5a:38:af:99:f2:e8:bd:09:b3:c9:
1b:d2:89:bc:b3:89:93:df:c9:d8:f8:bc:7e:81:9a:0b:40:00:
ac:eb:86:8d:13:9d:3c:b2:97:a9:78:1f:04:07:21:96:17:a4:
98:f2:6c:c8:3c:52:18:30:74:5c:14:f0:b8:fd:39:59:6c:60:
57:8c:df:6b:af:a1:2d:63:85:26:24:f7:8b:b6:b5:1f:3a:1c:
3e:73:bf:a7:99:fe:74:ed:c3:57:4d:d7:7f:aa:6b:55:9c:bb:
da:70:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:35:00 2026 by rpki-client