Manifest

$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft
File:                     LiZtw-rYDrJdSYWKZNwe8cihuUI.mft (raw, json)
Hash identifier:          fvPSHncqB1Ok/U1XradF9sb0vPnWDggfCBvk+N/Hupw=
Subject key identifier:   3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       553A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft
Manifest number:          2341
Signing time:             Tue 17 Mar 2026 23:59:24 +0000
Manifest this update:     Tue 17 Mar 2026 23:59:23 +0000
Manifest next update:     Wed 18 Mar 2026 05:59:23 +0000
Files and hashes:         1: -GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa (hash: XMRU4RMulafL9ykW2oShRAn56DaYEZ2ldVuJ0Q69omY=)
                          2: LiZtw-rYDrJdSYWKZNwe8cihuUI.crl (hash: dCqA2OBbzsOeeMUz651caZymUbKFR9HoAb34O9d/cmY=)
                          3: N068Movxhd0HY-G9IlBTH0wcH-o.roa (hash: 52PacQFpyIpw+nFdeX2RQwEMG/bZk45cRChsSeSXizk=)
                          4: OjvJeSo6lsEg9uLCdozMhBG1wpM.roa (hash: o11AaYnXnEfRHY+f+c5bRhxX0vq/1+fUyNDi4psENWI=)
                          5: ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa (hash: FvWAWdHlZfe8cZsITf2/A06d9VsOp6LGA7o/YZd8tAI=)
                          6: kHETLM6cygeGpKKoqih1EPU7gmI.roa (hash: +LQA3OraGUIU6wW3F0A+ePFfIqnRqwHWcGXQxQ6FNG4=)
                          7: nHfB2GHYBmc8bX5DxbEirv_IKF0.roa (hash: 6zuNH+NuLOtHpcZwmZyV/YBPSvVE39rWVdrUOXiD83g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21818 (0x553a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Mar 17 23:59:23 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=3DAB334DEF9EC09F697BE2E8AA96126637E5FE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:1a:85:4f:41:aa:4f:1d:ad:88:bd:9e:28:
                    1f:ee:13:f9:de:f9:37:ac:78:ea:a9:b3:6d:4b:31:
                    54:0f:be:48:75:53:a3:bb:f9:eb:19:27:3a:cd:ad:
                    bd:a9:d6:82:d8:76:ca:7c:31:80:53:db:5c:e5:b1:
                    f6:b9:9b:5a:3d:24:8f:1c:9a:f4:2d:16:d4:8a:6f:
                    66:0a:db:b7:ec:fd:e8:9c:5f:5f:78:0c:ca:42:91:
                    f4:9f:96:45:b8:19:f0:b7:90:92:8a:39:fc:85:bd:
                    15:1f:8a:72:49:91:41:25:30:2c:7a:c1:44:a5:98:
                    bb:93:62:25:87:cf:11:46:0e:ec:f6:29:fd:8c:01:
                    40:d9:3b:5a:a4:53:d1:57:72:bd:85:81:3e:63:88:
                    9d:a0:cf:31:3e:50:6d:94:81:6e:96:bb:ba:09:e9:
                    32:3b:87:3e:2b:03:b4:36:c8:14:1a:45:4d:11:2c:
                    18:53:66:c7:b7:6b:7f:12:68:3e:e7:f6:e8:09:c6:
                    c8:da:61:14:e1:8a:8a:37:bd:73:91:1e:83:1d:47:
                    77:e4:3c:59:07:32:ad:4c:47:e3:5a:ab:27:81:a8:
                    f9:02:67:a1:4a:5b:cf:a9:de:68:a4:31:94:d8:be:
                    e9:da:1f:83:f7:d2:26:6a:5f:cc:99:ba:40:62:01:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:91:51:b0:34:0f:a5:67:a0:17:99:21:0b:18:27:c5:65:
         f1:55:b4:dc:47:86:1f:b4:b1:b6:a9:95:c0:7a:d5:5c:b6:5b:
         ef:ae:be:87:53:b7:b3:7c:66:23:b1:d0:87:3d:c0:ff:53:11:
         7a:11:a2:63:3f:0d:6a:93:ef:90:cd:93:31:1e:60:ad:c2:d6:
         b1:a7:4c:45:b5:e2:f0:e2:56:9e:c3:a4:bd:bd:d4:98:f3:ca:
         09:e1:83:8f:75:e2:b0:29:c3:52:ef:32:d2:ae:a7:3f:15:a2:
         1a:86:db:5b:14:e0:5f:d6:ab:2a:e4:e8:45:c6:5e:0f:fe:a0:
         e7:c7:78:c0:eb:18:a8:6a:1b:17:3e:bc:0f:05:97:43:6a:5e:
         64:7b:c5:c7:96:2f:0e:22:5a:bf:dc:75:16:91:a2:69:3c:66:
         84:3d:46:72:32:29:18:42:f6:7c:5a:ca:4a:19:37:5f:65:0a:
         93:1d:66:2a:fd:17:a1:b5:25:1d:3b:35:97:f9:1f:a8:53:d2:
         86:13:bd:82:10:30:79:98:4b:3b:a3:a3:a1:d5:fa:3c:21:dd:
         eb:e0:5c:0b:93:8d:67:bc:f8:b6:5e:e8:8a:5c:df:00:e3:d0:
         67:79:57:2c:fd:3c:15:3c:80:85:f8:31:47:c3:ca:22:99:3d:
         f1:ad:21:ce
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICVTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNjAzMTcy
MzU5MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNEQUIzMzRERUY5RUMw
OUY2OTdCRTJFOEFBOTYxMjY2MzdFNUZFMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+BBqFT0GqTx2tiL2eKB/uE/ne+TeseOqps21LMVQPvkh1U6O7
+esZJzrNrb2p1oLYdsp8MYBT21zlsfa5m1o9JI8cmvQtFtSKb2YK27fs/eicX194
DMpCkfSflkW4GfC3kJKKOfyFvRUfinJJkUElMCx6wUSlmLuTYiWHzxFGDuz2Kf2M
AUDZO1qkU9FXcr2FgT5jiJ2gzzE+UG2UgW6Wu7oJ6TI7hz4rA7Q2yBQaRU0RLBhT
Zse3a38SaD7n9ugJxsjaYRThioo3vXORHoMdR3fkPFkHMq1MR+NaqyeBqPkCZ6FK
W8+p3mikMZTYvunaH4P30iZqX8yZukBiAZJZAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUPaszTe+ewJ9pe+LoqpYSZjfl/i0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9MaVp0dy1yWURySmRTWVdL
Wk53ZThjaWh1VUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
hN2RUbA0D6VnoBeZIQsYJ8Vl8VW03EeGH7SxtqmVwHrVXLZb766+h1O3s3xmI7HQ
hz3A/1MRehGiYz8NapPvkM2TMR5grcLWsadMRbXi8OJWnsOkvb3UmPPKCeGDj3Xi
sCnDUu8y0q6nPxWiGobbWxTgX9arKuToRcZeD/6g58d4wOsYqGobFz68DwWXQ2pe
ZHvFx5YvDiJav9x1FpGiaTxmhD1GcjIpGEL2fFrKShk3X2UKkx1mKv0XobUlHTs1
l/kfqFPShhO9ghAweZhLO6OjodX6PCHd6+BcC5ONZ7z4tl7oilzfAOPQZ3lXLP08
FTyAhfgxR8PKIpk98a0hzg==
-----END CERTIFICATE-----