Manifest

$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
File:                     2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft (raw, json)
Hash identifier:          m6qbq9hCuRAZwaEG5finmiQ2g/xVpTJSeLLJ719REFs=
Subject key identifier:   DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50
Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1
Certificate issuer:       /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
Certificate serial:       08BC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
Manifest number:          08A5
Signing time:             Wed 18 Mar 2026 04:59:56 +0000
Manifest this update:     Wed 18 Mar 2026 04:59:56 +0000
Manifest next update:     Wed 18 Mar 2026 10:59:56 +0000
Files and hashes:         1: 0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa (hash: OyqTw7UdQe7wf3n+Uzbs30m7FnEu/Oyfl7FMQebch84=)
                          2: 1QD9kVjRPFCJatRIwWROIBy8kVA.roa (hash: 8yUL/WPq3yLWhpQ6U2I4iSZV3rfZD+tNqromWAbFU2A=)
                          3: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl (hash: qXSzwkzuzNaFi2xj4qLvQPVjvRnPlztsSY9BAiy/RQo=)
                          4: 4h8nPy8hJOHOAa-6OIJFbGy0Y3s.roa (hash: DB7h2YUI+Oio0qI5Nqa3BL07cl+qYyI5JCXOvTAAIKA=)
                          5: C6K3jC5XM9ASI6FKufijhi7adTg.roa (hash: u3XsDQJkYk2HyM52oU60Q0OQDYgDvEqy89GCu9/wm1o=)
                          6: DJTGjsyfob-daem2cuBLKXMPXu4.roa (hash: M4E1GeUXPpycDhV5NP95GP5xj7vcM1t0QAwwd9IHOtA=)
                          7: F9-agplvYbReLwEVvLXqsxs3-aE.roa (hash: wWH2qISgzTmkfxLxaoXYzF2y6aKSWvCtcm+iTvXKCgI=)
                          8: FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa (hash: 6r4baApbFlPunzlUjPwIrxGY8Ee79UnFpHBGgAOA+To=)
                          9: HRTwxgISQAmHmdsgldlFy9VsDfE.roa (hash: g6WGfqvUj1zzde8Rhwh8PepCNVDdY2F4smGEucl/PgY=)
                          10: HVWLPpvTveXfFw_tmXwJ2SYZ4Y4.roa (hash: qdU4Yq4NVuIp5c9Pca8DjLQ7oTJyTbwH9SDB0ouV5VU=)
                          11: I2TJPU72SpSJBAm_wQfPP-piEeg.roa (hash: 6pXkzBsFD6PhVp7wOtmgLqSyacRrKRLWCWMnHXBLGW8=)
                          12: UgW99oa8FvERx8BX7lrm-6FWEOE.roa (hash: w1HTgwfnTWC81wVgKs+vXq8ga2BzDZ9rHWI5XJm9mvk=)
                          13: Y8kgU48kiNGqzq2nK5O5WiksDSk.roa (hash: 07wZbAajdfbJQDwAmVTQXXjUMgif2AwVmPfdEekWRyA=)
                          14: aV7Ri-lUYzB8dhFblTd71eGtEEg.roa (hash: CFuKIxDGpbjtt0HUmXbA/K6k/ZpYa3Z3aMgKu5AtAPY=)
                          15: ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa (hash: 5queQWpVBXn7exbHvpky1MLt+h9a11+sZq2dFGFxGkw=)
                          16: nbePnKzqWYXckdwHzmenc50MYCw.roa (hash: C7r8zvcAPxto9wXb2DRqahJYPDZzJ5zBLJ1sGPIzvcA=)
                          17: qW6Bv7uoL_195H1MB_jChMWMSvo.roa (hash: AnbkRBuOTQcpm4hcUi0EemyrsDvNd2UATJd1hS1A14Q=)
                          18: tKqDxDPGtgTgElv65DlcSr-X_T4.roa (hash: cHCd9pprNMNd8KhcFuXBWl+YG4k0Bv7a9xzKCVTOqlg=)
                          19: wAnT0H3Exwuh0puPOa84PkUo7jw.roa (hash: 9bqRSUm0pia4VbU9iB77Hvh6P5hej4AYTWlO3ngwdEw=)
                          20: zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa (hash: rkNIbIaIMcy8iXZo7RC1Aj8Owgsiv0QiyLgPgoyEC/k=)
                          21: zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa (hash: ACjLAHtSQnr5lM2TkMPAk5riK/6jJk80g1efX+v02Dw=)
                          22: zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa (hash: PVklNp9GSoeIuS+Ad4ZbIw0p9RPoglbHk2bAgL58PbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236 (0x8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
        Validity
            Not Before: Mar 18 04:59:56 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=DB95FB8737A881A696B5CDC72CC288908BE41D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:7d:c0:59:21:5f:82:8b:b4:e8:c7:3a:d8:
                    ad:f4:27:ab:b2:5e:43:7d:45:18:3d:70:51:e1:fc:
                    6c:0e:7d:48:91:30:42:39:d5:ce:a6:ff:f9:8f:60:
                    b1:49:8d:39:1e:f1:4e:54:f5:2c:ee:3c:bb:8d:11:
                    17:af:8f:ce:09:4c:47:59:d5:a6:35:73:48:c7:5e:
                    33:39:dc:c0:64:58:a1:eb:5f:d5:67:6a:58:9e:37:
                    34:57:4d:d8:ec:a3:a4:51:85:f4:ba:18:f6:0d:98:
                    bf:0e:d3:2a:22:ed:ce:5d:ee:71:18:80:ae:9d:a2:
                    9c:dc:58:bc:a9:2f:83:e5:b6:b7:3e:aa:ad:db:85:
                    2a:c2:f6:a6:b7:98:11:91:e4:6e:9b:ea:02:52:10:
                    e7:f8:4a:cd:91:9b:47:0f:3c:aa:88:25:be:d2:12:
                    90:3f:ce:f8:a1:cd:d4:0c:a0:54:0b:71:59:1b:88:
                    b3:91:84:2c:2a:67:68:5d:7b:4f:dd:5f:05:bc:74:
                    42:b9:73:00:90:c5:44:0e:c9:66:4b:90:75:50:6c:
                    d2:29:c5:48:85:ff:bf:87:81:fb:6f:ac:61:cc:e1:
                    b4:5e:a4:1d:a4:d6:57:55:9b:68:0b:67:8a:05:e6:
                    ac:19:ec:7d:9b:51:c9:52:1d:aa:e3:54:71:23:61:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50
            X509v3 Authority Key Identifier:
                keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:02:2a:cc:68:fd:7e:62:a8:0a:ee:5a:48:19:24:29:8b:
         ed:f8:91:06:c4:9a:91:7d:ec:90:d1:ca:91:12:89:0d:13:a5:
         3e:bb:76:36:40:74:0c:08:2c:66:b6:a7:e8:20:77:28:e2:21:
         f8:92:aa:15:d4:76:77:f1:c0:87:df:e4:e0:be:48:7d:99:66:
         b1:92:e1:94:d5:6b:da:45:67:c8:64:a8:19:57:83:40:fa:fc:
         a9:87:f5:c0:0d:06:a6:f8:5c:41:e0:ad:d0:81:f8:5e:ed:4d:
         4a:93:72:84:52:d2:d1:67:91:19:18:c3:17:9e:51:81:a0:bf:
         83:80:7b:23:d0:5e:8b:27:13:b8:35:7e:0a:8b:1c:63:76:a1:
         6c:1c:44:65:35:a9:60:c0:72:fc:94:23:10:24:e0:5a:54:7e:
         c5:6c:9e:f5:86:b5:d7:21:f8:99:e5:23:04:1b:1e:c8:20:5a:
         40:6c:e8:02:97:7b:9a:85:37:2f:0d:9c:c2:e0:43:2e:0e:4e:
         c4:88:2d:46:e8:fb:ff:76:20:8c:79:ec:d5:ce:3d:88:79:b1:
         bc:14:c4:a8:ad:fa:d8:b7:3b:2d:ce:37:83:13:60:e8:71:72:
         44:ec:17:fb:c1:3b:78:0d:6e:f5:3a:95:24:ac:7d:08:bb:0b:
         54:6b:98:d3
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICCLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx
REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNjAzMTgw
NDU5NTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERCOTVGQjg3MzdBODgx
QTY5NkI1Q0RDNzJDQzI4ODkwOEJFNDFENTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH6X3AWSFfgou06Mc62K30J6uyXkN9RRg9cFHh/GwOfUiRMEI5
1c6m//mPYLFJjTke8U5U9SzuPLuNERevj84JTEdZ1aY1c0jHXjM53MBkWKHrX9Vn
alieNzRXTdjso6RRhfS6GPYNmL8O0yoi7c5d7nEYgK6dopzcWLypL4Pltrc+qq3b
hSrC9qa3mBGR5G6b6gJSEOf4Ss2Rm0cPPKqIJb7SEpA/zvihzdQMoFQLcVkbiLOR
hCwqZ2hde0/dXwW8dEK5cwCQxUQOyWZLkHVQbNIpxUiF/7+HgftvrGHM4bRepB2k
1ldVm2gLZ4oF5qwZ7H2bUclSHarjVHEjYUm7AgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQU25X7hzeogaaWtc3HLMKIkIvkHVAwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg
tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv
MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi8yaDJyN1BHVVhmOVR0aURn
dHNRUTZSNUVjYkUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
mPQCKsxo/X5iqAruWkgZJCmL7fiRBsSakX3skNHKkRKJDROlPrt2NkB0DAgsZran
6CB3KOIh+JKqFdR2d/HAh9/k4L5IfZlmsZLhlNVr2kVnyGSoGVeDQPr8qYf1wA0G
pvhcQeCt0IH4Xu1NSpNyhFLS0WeRGRjDF55RgaC/g4B7I9BeiycTuDV+CoscY3ah
bBxEZTWpYMBy/JQjECTgWlR+xWye9Ya11yH4meUjBBseyCBaQGzoApd7moU3Lw2c
wuBDLg5OxIgtRuj7/3YgjHns1c49iHmxvBTEqK362Lc7Lc43gxNg6HFyROwX+8E7
eA1u9TqVJKx9CLsLVGuY0w==
-----END CERTIFICATE-----