Error: rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Error: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer: certificate revoked on Wed 18 Mar 2026 05:22:16 +0000

Manifest

$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft
File:                     YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft (raw, json)
Hash identifier:          28+nXjb2QoyfY2Ps1LZlcoRzn7D++kJskY4g7ooxwlY=
Subject key identifier:   ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39
Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
Certificate issuer:       /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Certificate serial:       1BC5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft
Manifest number:          1BB8
Signing time:             Tue 17 Mar 2026 23:59:09 +0000
Manifest this update:     Tue 17 Mar 2026 23:59:09 +0000
Manifest next update:     Wed 18 Mar 2026 05:59:09 +0000
Files and hashes:         1: OBSIJudzuJf6E5wc9KiuVnPwtO8.roa (hash: OrMamXPOBn3LQsd70PUtZHIukdL36650IQqdOG8XKms=)
                          2: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl (hash: 0CCnUI4h5MtBxJ8NrIYOHUTShoIm9zBnDhxiAXHYSHM=)
                          3: gvqgf9X3F5lAkpyP9pMBz7_Af_s.roa (hash: dbjoFl3negX/Dh4v0U17o5gnK9+/dHfkN3BeOndRto4=)
                          4: ke-FN3rYTvgxO6_ePBmWuPrd8pM.roa (hash: SR1aaHQlQsTyy8wGvj/fzSjiYMsOF9jnGeWQew2ZpQ4=)
                          5: m_ku9b95rIZvTjlyKpvktiE2mmU.roa (hash: YCQPNj+dQ0XjKbvOY82q9utZ7Q/OXrj8oy8Hb+gPrIY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7109 (0x1bc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
        Validity
            Not Before: Mar 17 23:59:09 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=ED237B7959A27F5BDFB8CE978EE2B55034038039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:a0:22:5a:c4:f8:55:eb:26:40:78:97:1a:
                    25:53:eb:52:1f:70:45:64:cd:44:4d:14:15:83:e3:
                    8b:d3:48:e9:a9:e1:dd:2c:7b:d5:ae:6e:2f:9d:09:
                    4c:45:f1:7f:45:fd:89:62:a4:11:52:c5:cc:87:28:
                    f6:50:9a:a8:67:87:90:c5:11:d7:05:b2:49:4f:cd:
                    70:52:63:4b:d3:88:b6:71:56:18:0d:eb:2b:ad:62:
                    49:00:2e:95:8d:99:37:16:bd:fb:71:ad:db:f4:0b:
                    ca:80:ae:7e:15:0e:82:b5:0d:f9:ce:e2:3d:81:aa:
                    a1:f4:10:f1:b9:2b:1c:cd:bc:a0:22:6a:65:2a:66:
                    82:86:09:85:2c:83:3d:a4:ce:57:49:c4:26:5e:25:
                    dc:13:c9:08:6d:af:c8:6a:e5:41:55:57:1e:32:c2:
                    47:db:5b:1d:36:f4:8a:90:5f:86:b6:63:44:60:cd:
                    4f:5e:3a:00:6b:c3:8c:8d:98:5a:ae:5b:ad:82:6d:
                    b2:99:32:3e:04:28:4a:d9:0c:3f:97:c2:0d:43:9e:
                    61:dc:c6:c0:71:82:5a:d7:b1:bc:6f:a1:46:08:b5:
                    b1:c8:06:f9:1f:6c:48:32:d2:0b:d7:1b:96:39:62:
                    91:70:8b:00:10:2d:0e:e9:de:de:b1:e7:a0:b9:8b:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39
            X509v3 Authority Key Identifier:
                keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:da:1e:fe:90:14:4a:a8:4f:08:4b:bb:b9:33:74:d2:c0:
         63:93:6a:61:67:82:8b:b9:b5:a7:5c:0a:ee:fa:d5:8a:c8:82:
         e0:7d:82:5f:d2:ac:7c:a0:27:bf:e6:0e:52:18:bc:e1:1b:6a:
         22:35:77:01:de:73:14:95:86:aa:cc:05:97:1e:03:0a:8d:66:
         df:24:96:60:b0:a3:9c:4b:c3:9a:6d:c1:bd:33:e5:81:d9:3d:
         b4:37:96:50:d3:fa:17:cc:c8:3a:e2:15:50:2c:d4:07:71:3b:
         0f:c0:c1:c7:70:61:58:57:63:0a:cb:09:9a:01:36:78:9b:88:
         17:b4:dc:15:eb:79:fe:16:44:f9:1b:b3:93:4e:7d:4b:54:1e:
         d0:0d:90:1c:23:91:1a:0c:bf:33:9d:c5:8f:3a:2e:86:80:32:
         12:70:3d:bc:6f:3f:81:1e:b9:38:7a:e6:d0:f2:9c:a1:57:f5:
         b7:d8:57:9d:2b:b5:80:7f:62:48:7d:37:a0:a2:fe:e1:1a:20:
         ab:b9:01:47:98:dc:56:8d:ee:3f:77:26:36:aa:e2:eb:4e:86:
         d0:89:32:e2:94:c9:d4:f7:b3:93:f4:d1:74:6f:d8:6c:88:84:
         13:64:2a:18:7c:96:c2:d9:7a:a8:86:92:4e:65:24:cc:68:ac:
         8c:bf:2a:11
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICG8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNjAzMTcy
MzU5MDlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEVEMjM3Qjc5NTlBMjdG
NUJERkI4Q0U5NzhFRTJCNTUwMzQwMzgwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSbqAiWsT4VesmQHiXGiVT61IfcEVkzURNFBWD44vTSOmp4d0s
e9Wubi+dCUxF8X9F/YlipBFSxcyHKPZQmqhnh5DFEdcFsklPzXBSY0vTiLZxVhgN
6yutYkkALpWNmTcWvftxrdv0C8qArn4VDoK1DfnO4j2BqqH0EPG5KxzNvKAiamUq
ZoKGCYUsgz2kzldJxCZeJdwTyQhtr8hq5UFVVx4ywkfbWx029IqQX4a2Y0RgzU9e
OgBrw4yNmFquW62CbbKZMj4EKErZDD+Xwg1DnmHcxsBxglrXsbxvoUYItbHIBvkf
bEgy0gvXG5Y5YpFwiwAQLQ7p3t6x56C5izFbAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU7SN7eVmif1vfuM6XjuK1UDQDgDkwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0
L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx
L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL1lWdk9qMy1LZzl1VG11
RDBMNkJVRTdLRkdCNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCOTNoe/pAUSqhPCEu7uTN00sBjk2phZ4KLubWnXAru+tWKyILgfYJf0qx8oCe/
5g5SGLzhG2oiNXcB3nMUlYaqzAWXHgMKjWbfJJZgsKOcS8OabcG9M+WB2T20N5ZQ
0/oXzMg64hVQLNQHcTsPwMHHcGFYV2MKywmaATZ4m4gXtNwV63n+FkT5G7OTTn1L
VB7QDZAcI5EaDL8zncWPOi6GgDIScD28bz+BHrk4eubQ8pyhV/W32FedK7WAf2JI
fTegov7hGiCruQFHmNxWje4/dyY2quLrTobQiTLilMnU97OT9NF0b9hsiIQTZCoY
fJbC2XqohpJOZSTMaKyMvyoR
-----END CERTIFICATE-----
Generated at Thu Sep 10 00:07:30 2026 by rpki-client