Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.mft
File: kZiaAq0NE2kvy29vluo2LX3c-ks.mft (raw, json)
Hash identifier: 05aO6vDz/QySlNsnc16N6bbDH0r4C/xTb4cu2XwJ/jA=
Subject key identifier: 21:A1:AD:F1:7D:D3:07:4C:32:3E:47:4C:AF:59:99:72:A1:39:C0:C3
Authority key identifier: 91:98:9A:02:AD:0D:13:69:2F:CB:6F:6F:96:EA:36:2D:7D:DC:FA:4B
Certificate issuer: /CN=91989A02AD0D13692FCB6F6F96EA362D7DDCFA4B
Certificate serial: 92
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kZiaAq0NE2kvy29vluo2LX3c-ks.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.mft
Manifest number: 90
Signing time: Mon 02 Mar 2026 09:58:20 +0000
Manifest this update: Mon 02 Mar 2026 09:58:20 +0000
Manifest next update: Mon 02 Mar 2026 15:58:20 +0000
Files and hashes: 1: kZiaAq0NE2kvy29vluo2LX3c-ks.crl (hash: 0aOgYhv56T6afeqdbQPzyCLDULtMlOsohDUuWvi0N1k=)
2: r4ApDfaFdlnKaS2-FwXztqp4xcw.roa (hash: u0nhu3X/tvvx1t+8HCJa+r5wOjhNwq5HLFn3Gp4fR0c=)
3: yby75Yhz2kAq1cMvZ1uHmR3qXZo.roa (hash: OElGPcvv7JxSRuJ4J/Exx2xKwqcIQ/jbMHPNKhzIwvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91989A02AD0D13692FCB6F6F96EA362D7DDCFA4B
Validity
Not Before: Mar 2 09:58:20 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=21A1ADF17DD3074C323E474CAF599972A139C0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:0b:e0:88:c7:51:0b:07:c3:e7:48:25:9c:
a3:d6:e2:60:a4:b8:c5:46:61:30:bb:b9:55:07:39:
3a:77:86:c3:38:9f:6a:c7:2f:63:d2:c6:04:ca:d0:
62:1d:4a:40:41:f2:1a:3e:e6:a8:ce:61:07:bc:ec:
2c:c4:0d:e5:43:6d:4a:7e:62:1c:72:de:e4:96:7f:
c8:e3:37:9f:39:fd:6f:cd:27:bb:46:9e:75:15:51:
e6:71:66:ce:3f:38:47:be:e9:81:bf:ad:1f:6f:12:
03:90:69:28:53:12:44:38:e8:26:dc:40:fd:93:7d:
91:92:37:7c:c4:79:a1:8b:58:e7:ba:2c:4a:35:e9:
34:be:51:6c:ff:6c:30:42:f2:a8:bb:6d:c4:c8:57:
5d:b8:50:01:6a:5c:be:96:5d:a9:94:2f:14:c7:5d:
1d:aa:d0:c1:dd:98:dd:a1:6a:2c:37:3e:63:b5:be:
4a:f9:1e:77:05:8f:a0:71:5f:d3:fe:73:df:d2:84:
a4:cc:e1:62:d7:45:73:f3:fc:f3:6d:08:a8:37:43:
3d:40:74:48:f7:dc:bf:06:61:56:b3:ea:e4:10:2c:
25:5e:23:34:a5:69:a3:98:9e:22:5e:be:e5:08:6b:
e7:09:38:dc:bb:be:93:0e:17:e5:78:0d:4c:67:3a:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:AD:F1:7D:D3:07:4C:32:3E:47:4C:AF:59:99:72:A1:39:C0:C3
X509v3 Authority Key Identifier:
keyid:91:98:9A:02:AD:0D:13:69:2F:CB:6F:6F:96:EA:36:2D:7D:DC:FA:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kZiaAq0NE2kvy29vluo2LX3c-ks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:96:1a:06:8b:ae:69:41:78:f0:9c:14:6c:fd:71:2e:7d:
28:b4:80:bc:79:b5:5b:2e:ac:3e:24:b1:d0:66:b2:84:d9:20:
68:98:e7:f4:ca:3c:b4:39:70:47:0d:08:d3:25:42:d7:42:9c:
7d:b2:15:86:60:c4:a0:8a:3f:c3:22:14:68:d1:75:85:bc:58:
59:23:7e:96:b4:f3:64:6d:2b:23:69:77:8e:4f:99:67:e6:71:
81:9f:7f:ff:af:54:1a:f2:17:6f:e1:0a:dd:2b:c8:42:9e:a1:
8f:11:03:ef:a5:f5:36:40:74:68:1f:fc:88:20:93:9d:8b:98:
3f:5c:77:20:a4:77:f4:93:99:2a:05:d8:4d:4d:5c:92:fe:cc:
47:0f:f5:ec:e6:98:a5:c5:74:80:d1:98:d0:04:2c:f3:75:41:
b6:ec:4a:a3:05:57:6d:83:dc:b8:2c:a4:53:fa:84:3b:af:39:
29:bd:f5:c4:9c:de:19:03:35:47:48:6f:83:dd:ad:9d:df:09:
ba:f9:d5:c0:3d:ee:dc:bc:f3:65:49:34:6b:bf:6c:a6:f9:70:
02:47:32:a4:1c:0c:de:f7:47:2a:25:22:63:68:69:be:22:9f:
1e:4d:02:93:78:d6:0d:0b:52:18:34:86:65:6d:97:1a:7a:3a:
57:ca:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:37 2026 by rpki-client