Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json)
Hash identifier: 3+mAn9H3inySr7wyH7lktvuClioaL8rlBHQFe6/wCEg=
Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C
Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Certificate serial: 0602
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
Manifest number: 05FF
Signing time: Tue 17 Mar 2026 23:59:48 +0000
Manifest this update: Tue 17 Mar 2026 23:59:48 +0000
Manifest next update: Wed 18 Mar 2026 05:59:48 +0000
Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=)
2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=)
3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: 4hatcIud1sdMdpq6vwqAi0N3VCqZGeTAC24tj+A+T3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Validity
Not Before: Mar 17 23:59:48 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d:
45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b:
7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08:
35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1:
5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46:
86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c:
c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8:
1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d:
b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6:
6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31:
7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07:
01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31:
15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76:
d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5:
c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41:
77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4:
f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C
X509v3 Authority Key Identifier:
keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:fe:5c:64:34:d6:96:ad:df:f6:94:21:8f:23:8f:3c:11:
44:6c:f1:0f:d4:e1:25:dd:d3:b9:73:f2:95:8a:2d:29:de:ae:
1c:8e:8e:de:be:da:ff:22:ad:d3:ca:7b:a3:5e:2d:4d:4f:76:
62:87:9b:d6:83:f0:4c:38:f5:03:2e:c7:d7:e6:41:f2:74:a4:
31:27:54:50:8b:3c:a9:07:7e:fa:73:dd:de:28:1a:72:64:74:
25:56:43:f0:12:ae:0b:c4:07:9d:01:c5:47:f3:01:67:e4:79:
e7:8c:e4:4a:8a:33:74:1d:b2:c6:15:7c:b0:91:3a:54:d7:71:
8a:c4:62:d1:cd:58:5a:3f:a0:f7:cd:19:47:1c:80:19:4e:e3:
29:b3:19:6b:7d:d9:e4:05:16:b2:e4:d9:7e:28:8b:b2:91:1d:
19:2b:fe:a1:93:63:bd:8d:e6:a9:1a:2e:ec:1a:84:f7:a0:7b:
3e:c9:47:ba:c3:cb:1e:4d:3c:8b:9a:e2:5d:bd:fa:94:4c:25:
d1:36:48:ea:ab:3c:ff:a6:6f:fe:33:08:00:1d:d8:6e:d6:e0:
7a:7f:ae:ef:30:41:17:0d:32:43:7a:f6:00:2f:a7:d4:dd:94:
d7:89:b6:f7:97:b6:06:2a:af:90:45:e2:92:26:54:b2:bd:bb:
e7:db:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:33:04 2026 by rpki-client