Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
File: iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft (raw, json)
Hash identifier: LtV5IZ43M+fMx9Dgk4hPp+MVe5tH42BWP+95Z91hqZU=
Subject key identifier: 0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC
Authority key identifier: 88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
Certificate issuer: /CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
Certificate serial: 02E5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
Manifest number: 02E1
Signing time: Wed 18 Mar 2026 03:28:59 +0000
Manifest this update: Wed 18 Mar 2026 03:28:59 +0000
Manifest next update: Wed 18 Mar 2026 09:28:59 +0000
Files and hashes: 1: 0tXJhjrShCOZ_hSYp5KXxrxILYg.roa (hash: P4zzpwHv35P8/ZqKhNk96zu1Bs0VO0U5hO26cVsDcxA=)
2: 99HRwhw6tal7rDmw-PFDo59JioM.roa (hash: T7qj9RdduCmFelHSSIKeK8dbeOUk57gZ9sZGu20s13s=)
3: SZVv0d8wmaj2M9td0BSd4841GMs.roa (hash: WIihbieqLoWkrNlubEmmUEkPBvTK3qRwJxS+f+cCACY=)
4: UXY-RYaZHgTYhXJhGXXf96toWwE.roa (hash: m8GqULFjpNYHqvAai/zNQGo0eznqvOaJ5lpdYuPHNIE=)
5: iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl (hash: Sw+QKM3SiITQxNMN+L/g52Nz/xL/coQvXIRnkeVJz/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
Validity
Not Before: Mar 18 03:28:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0CCE83A62E1F1DA81CE249FC3FC4BF44372AFFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:c5:ba:fd:1a:8b:17:a4:7c:81:9d:e5:b8:
ab:85:f0:6e:ee:31:c7:86:ee:67:17:09:de:b7:93:
58:90:43:ce:02:73:6b:99:05:ea:0a:69:10:50:8d:
9f:ae:6e:2d:7c:ab:a4:84:7c:e3:0b:59:99:61:e0:
63:6f:fc:54:5d:04:e8:b2:cc:9e:03:05:1c:8a:e2:
70:da:13:33:da:9d:f9:e3:0d:52:3d:75:76:6c:8a:
50:eb:2c:ca:c9:e2:31:18:eb:ab:40:9f:60:32:02:
84:31:a2:e0:62:c0:79:ba:a6:77:7a:de:9d:b1:0d:
a8:8b:3a:36:78:32:51:6b:c0:3e:1d:4d:3a:61:2c:
9b:ed:3a:49:ed:06:99:5c:4a:5b:63:01:a3:ad:1f:
1e:56:21:8c:b2:4f:d3:86:6e:b2:1c:42:31:51:42:
56:15:b8:be:2b:db:e1:16:f0:89:f5:0a:37:14:08:
20:09:d6:17:79:6e:3b:78:bc:ab:e1:ba:5a:af:71:
59:f4:d4:39:6c:e1:8c:34:1d:fa:b3:00:cf:c0:71:
d0:71:10:b2:fc:47:20:46:70:c3:d8:3b:a3:4a:fe:
f1:cf:6a:6a:75:3d:96:d9:03:b0:e0:ee:6c:be:62:
54:b7:81:9a:82:f5:f5:b2:a4:d6:0d:a8:20:14:a6:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC
X509v3 Authority Key Identifier:
keyid:88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:79:b8:33:ae:c6:23:cd:83:de:ac:a0:df:69:7e:92:a2:2b:
d1:b3:48:8b:00:0e:e9:41:54:33:ce:66:25:7a:96:f0:c5:28:
51:30:5d:e1:96:06:67:d6:3f:19:16:bc:80:32:5c:53:67:93:
eb:e6:49:82:07:0b:48:42:b9:ed:e9:07:eb:29:6d:df:ea:17:
5e:7d:07:ed:43:64:30:8c:d5:4e:73:80:96:2b:ca:36:1a:81:
34:99:a9:27:63:3f:4d:2e:7c:d5:fd:c9:fc:22:56:04:04:99:
61:d6:cc:f0:88:3a:23:35:62:b3:11:58:2f:1a:9d:26:65:77:
c8:ae:dc:cd:14:38:75:e3:c4:02:35:fa:0c:4d:55:08:a7:d0:
a8:d5:ec:a0:e1:86:dc:e1:f2:f8:92:ed:15:9a:19:76:59:a3:
1c:55:e4:9b:1c:29:90:86:a1:0a:3b:5a:9f:83:86:af:df:ba:
f6:87:29:f9:fe:45:a5:20:ca:99:ed:31:f6:46:ca:29:fe:f9:
5d:37:3b:c0:45:de:62:b3:86:36:fe:6a:8d:c4:35:5f:6c:53:
ec:88:d0:f3:fc:3e:b0:a9:95:f3:77:86:e2:5c:a6:8b:35:1e:
5a:95:42:d5:39:55:75:ef:d3:4b:35:c3:bb:16:bc:2b:f4:fc:
48:18:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:27:12 2026 by rpki-client