Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json)
Hash identifier: LoR3bF2DqwG+4xsNg3YtAhUt08EtuiSEyFxJ5UAItxE=
Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 1B01
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
Manifest number: 1AF5
Signing time: Wed 18 Mar 2026 00:59:58 +0000
Manifest this update: Wed 18 Mar 2026 00:59:58 +0000
Manifest next update: Wed 18 Mar 2026 06:59:58 +0000
Files and hashes: 1: CN2uS-8nq9U4RrNe_xAiqcQFGpU.roa (hash: zH43f17It56l7IeGs4N1AYvuOB5tOr3N0fEsJd+YYJE=)
2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: 57JHPg1wNnx6m4tE6ALfRv2UyFzHbBkErCCmVZ62+Do=)
3: i5k4dsu4Ee6y_1thTrrwOxxblkw.roa (hash: tVZ41ygxhW/2mUCfo20a5PYPTrIAl2k96+fse3GzsHw=)
4: zrdD_ibX2-w6XAn0s6cABhr2d38.roa (hash: H+BkElafe5f3qf5w5U8YW5dPMJAcWgDXqMqD706ZET8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6913 (0x1b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Mar 18 00:59:58 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95:
9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c:
12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a:
fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72:
dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db:
6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5:
76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78:
ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92:
f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e:
e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79:
96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26:
db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87:
5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3:
1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b:
df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48:
1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df:
45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6c:fd:2f:2d:d2:91:fc:e2:6f:f1:5a:c2:2b:aa:96:14:ab:
51:bd:fd:60:e6:36:b7:72:e6:e7:3d:dd:7c:df:c0:48:f7:38:
a7:24:67:49:48:a8:da:e2:f0:65:30:9d:df:9c:76:5b:8a:1e:
85:8f:29:1d:4f:63:91:69:02:3f:21:24:d0:7f:07:2f:96:a1:
e2:ab:cb:6c:12:3d:6f:66:38:4a:93:1c:99:a9:21:91:29:3f:
41:2d:1d:b0:4e:46:81:51:15:86:82:09:22:18:e9:e7:dc:ba:
94:38:eb:d2:3e:c5:ce:43:d5:db:0d:d3:33:29:3b:fd:e8:e0:
37:3e:47:30:fb:b0:7c:94:81:f5:fb:fb:95:0a:5f:6d:22:8f:
fe:77:ad:f8:3b:2d:c4:50:d1:5e:8a:28:1b:93:c8:28:03:b6:
41:ab:00:07:fd:e9:40:13:55:0d:86:56:35:06:0b:02:c2:df:
d3:1c:59:6f:13:c2:f5:53:2f:7b:78:9b:4e:82:6a:e8:c3:ac:
c4:64:51:7b:0a:75:4e:0c:c1:7f:87:9f:10:d5:60:99:3f:93:
24:df:58:4a:23:c3:8f:a6:d8:80:2c:53:63:1c:6b:0c:0e:24:
2f:5d:34:e3:5f:07:9e:66:ef:d2:a5:5b:3f:16:36:f0:75:ea:
b5:4b:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:35:47 2026 by rpki-client