Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
File: -2U7JndQQWh9Ni1M73aOWPmewHU.mft (raw, json)
Hash identifier: fAfOC5LfrHETVcrXIUGJgKx/R4Y+A/ORYxL+Y+RUhE0=
Subject key identifier: 7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48
Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75
Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075
Certificate serial: 0F93
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
Manifest number: 0F76
Signing time: Mon 02 Mar 2026 02:29:17 +0000
Manifest this update: Mon 02 Mar 2026 02:29:17 +0000
Manifest next update: Mon 02 Mar 2026 08:29:17 +0000
Files and hashes: 1: -2U7JndQQWh9Ni1M73aOWPmewHU.crl (hash: 5J0TN9vDkeRM9AdBlMEDobS1W21X5MyhGxzcx5AJiAo=)
2: 3yimESiLtQka2lMiwqoyFKOTxMk.roa (hash: b5MumePz6dpZV/wDo4ougHaQ9UB/PgwFbcHPXE73tqs=)
3: E5rrpTcp4QpOr2uPHGEhn1Hlmbs.roa (hash: Y+H659Wn505VmvMUt+ex0RXKT191zw2X4BeCi4C38jo=)
4: Hej6-QkA0-Bc3AMZshH55XxLv5g.roa (hash: toY3udwdmFT7/lG+ovmT8LUgSdJFIVPtqGAure8mJls=)
5: J74ldNmvqRxQIMTZx3mbHDpgnIU.roa (hash: z9qRtGRNFpYYP5bZ63rGud5OxSDPD32UJ7z2JXOgqb4=)
6: Rt0v6zl0kzLCcol4ZR8v0LMCkno.roa (hash: PbkXFoHR+aS5YRRjAvu1t4Iy2C5pWM5kvwPlR8tBHUA=)
7: ZRUMq2XKB7l7ycDZxJnpbGaBp5U.roa (hash: f6CucrNgeu6+CB+Eesntki3GVQ2c4rgaIWV7h+kv8Uo=)
8: ZVKE3Uxg3bK7Gf6UpasZe7Fr2Sc.roa (hash: +dWkvqATq27PEleFxlDiO5RRLTFoyzZSDj6fv+cli/Q=)
9: avvWMYng5fTdfEgsiaIZn_e_yqk.roa (hash: FB+MJJkXBdkh4FY3vIAbyKd8mKFnr6wwpQuKP6RZHpg=)
10: oLL6KeWw16knhlj2YO0Nxb-9ygY.roa (hash: cAaBcqqgpqfxa+HfGQPjp+t0dxXxkD03jamgoC/gJ3g=)
11: slSQvZ_vT-7MFK6AEIdarZvldGQ.roa (hash: xyOMLIVs2Ycxh9N6HTJ12oK0Awee+5TbAbrH/ATVLko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3987 (0xf93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075
Validity
Not Before: Mar 2 02:29:17 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=7A187849D4D3D8FB1F0A302A8D928683257FBD48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:90:5e:2e:ac:88:57:c7:1a:14:18:a5:65:
61:27:d4:ed:3e:c1:87:f4:b6:02:90:8a:c9:ce:e9:
f8:dd:c2:8b:ae:b7:fd:1d:af:fe:d2:53:e9:0a:b7:
30:e5:df:e4:db:dd:97:80:5a:6e:68:d9:b6:57:75:
d9:d3:04:45:3f:9e:81:31:1b:1b:15:70:a4:f0:01:
30:ee:62:02:d4:c6:51:9f:37:dd:22:65:33:43:4a:
36:14:7b:c9:4d:2f:04:da:5c:b7:ab:5e:66:e6:c5:
05:38:79:a0:3f:0f:ee:a5:86:34:a5:d1:65:57:f5:
76:e7:1a:6e:d5:a0:22:bc:5b:30:9d:f8:8a:44:78:
69:e5:61:b5:20:10:b0:e5:34:bf:54:12:7f:7c:ef:
f8:53:50:96:d3:94:83:7f:28:02:5d:e9:a5:91:55:
3a:28:b0:79:7e:6a:2f:d6:c7:38:79:f5:c6:c3:fb:
86:17:d1:ad:73:a6:b9:e0:d4:9e:71:a0:12:2b:81:
95:0f:8b:14:f1:c4:b6:33:af:b1:a2:bc:b0:4f:d4:
eb:0f:46:74:6b:78:7f:c3:22:44:6e:0e:a2:2a:d8:
77:6c:77:71:97:ab:22:43:1d:9f:c3:72:f4:95:30:
e8:28:00:04:e5:1a:f9:80:97:f5:77:25:e1:9d:ac:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48
X509v3 Authority Key Identifier:
keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:c9:84:f9:fe:7d:b1:fe:11:36:bf:42:10:3e:c0:67:db:1b:
96:22:78:af:0f:c8:90:a2:7a:12:c7:0d:09:27:b2:20:e6:6f:
a5:45:02:80:a3:ec:9f:07:ae:54:0d:c1:d2:ff:b5:20:a3:b1:
3f:69:80:b2:17:1e:9c:d6:c5:80:9f:10:c2:17:19:98:ce:03:
f2:b9:76:37:37:3c:16:d3:71:38:49:2b:df:1b:d5:37:02:da:
2e:cb:db:d8:14:05:d6:da:94:cf:ed:22:64:79:3a:14:00:3f:
73:e3:27:24:bd:85:3b:d9:34:85:ca:f9:98:14:78:84:ee:4c:
8e:aa:36:86:6f:ea:cc:79:3e:5b:c1:16:e4:dd:a6:eb:ba:7f:
a1:f8:83:67:29:d6:e7:d7:e7:a7:73:b9:52:57:cc:f6:3c:1b:
cd:e4:ca:23:e2:a4:61:0f:8d:1c:3a:a5:fd:51:73:f3:d5:57:
c9:84:ec:d9:b2:64:2e:b6:57:55:74:aa:d8:30:8c:a1:ec:f2:
05:78:fc:7c:2e:9d:1f:4b:9c:11:97:a2:80:16:80:d8:15:1e:
ee:9d:aa:48:16:14:1c:d8:fc:1f:e1:00:db:09:b9:b1:04:4a:
ce:23:4e:8d:9b:dd:bf:8a:44:e5:a9:3c:db:f3:0d:d6:6a:82:
c5:e4:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:43 2026 by rpki-client