Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft
File: 1JQPURo42VRNSLTFxsObBYH4kf4.mft (raw, json)
Hash identifier: yWAXYmn/t31du3+DBSUuU+wQs1Zq+C0CdcRVJsHyIeM=
Subject key identifier: 14:AB:6B:DC:F1:DE:B6:17:49:DD:01:29:29:6C:74:EC:90:D5:45:97
Authority key identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE
Certificate issuer: /CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE
Certificate serial: 0382
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft
Manifest number: 0380
Signing time: Sun 01 Mar 2026 21:30:20 +0000
Manifest this update: Sun 01 Mar 2026 21:30:20 +0000
Manifest next update: Mon 02 Mar 2026 03:30:20 +0000
Files and hashes: 1: 1JQPURo42VRNSLTFxsObBYH4kf4.crl (hash: wyUS29qH1TIWLDGypkY/VPv428zRvs23KwW9npuxjg4=)
2: XlNquY_uQ_6rZ2JhVM3vRqciRe8.roa (hash: i76OhCIwCGUrBdnZ6U6M1/woB4YGh0bDGaiEq4xZxAA=)
3: o0yhMvDIOHV-tmQVctXjhUcSRiI.roa (hash: SLL3IhXfo60djFS/eMKmcoL3aMmfcJgrvUvuHnpcZXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE
Validity
Not Before: Mar 1 21:30:20 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=14AB6BDCF1DEB61749DD0129296C74EC90D54597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:68:2c:b2:b8:bc:c5:b5:48:c0:a1:a5:53:
9f:cd:0b:3c:dc:35:37:92:98:86:ac:f8:a1:a5:c5:
4a:2c:d0:75:56:67:8b:bc:33:ed:9a:28:d5:16:83:
ef:b0:a5:10:c1:44:98:da:c5:c0:75:ec:ed:72:f2:
ce:1f:3f:23:0e:e6:a8:8e:88:ed:9a:62:30:f9:93:
4f:48:b2:8f:68:48:69:ad:c5:c8:f0:de:dd:60:19:
e5:26:c7:52:54:f9:1f:31:43:12:1f:25:0c:53:0a:
e8:16:c7:0b:30:67:70:d9:d0:a0:74:3e:df:fe:51:
1e:e9:1f:2b:20:a2:0e:89:18:ad:53:ec:08:0f:7f:
67:74:05:81:b5:11:8c:d3:8f:fa:d8:93:cb:61:5d:
f0:a5:47:44:4b:5a:b0:25:5e:93:63:79:3c:51:cd:
3d:54:2d:1e:c6:4c:f5:11:65:65:95:b1:7b:9d:c7:
63:bd:ae:ec:11:16:fd:8a:30:ed:3c:8d:6f:3b:69:
56:d4:a2:c0:5a:a9:a8:13:ef:c5:36:22:86:71:65:
31:16:9b:2d:a1:29:d0:9f:46:b4:1c:be:0b:8a:05:
d0:45:05:d4:52:62:a0:5d:96:af:ee:e6:e6:3d:51:
7d:b3:0e:67:82:3b:20:cc:ac:c2:fb:a8:36:36:2a:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:6B:DC:F1:DE:B6:17:49:DD:01:29:29:6C:74:EC:90:D5:45:97
X509v3 Authority Key Identifier:
keyid:D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:44:1c:35:92:31:73:bf:47:91:e9:2a:79:fc:59:17:20:9c:
ad:f9:0a:39:e1:36:13:4a:c2:e2:bf:ff:25:98:4f:16:2b:8e:
50:af:42:5f:65:a7:60:ba:1a:89:b0:89:3e:03:cf:b6:b3:4a:
d1:0c:ed:91:94:9f:fb:09:ac:88:5b:5d:5e:20:b9:f5:cf:02:
f8:11:22:7d:b2:1e:72:af:bf:a7:63:f2:3f:39:f2:86:97:91:
95:dc:4d:59:96:84:9f:4f:f2:2d:9c:38:ea:d6:74:6f:4b:7a:
e9:dc:ed:3a:a7:8c:46:44:7b:d2:5d:af:b6:df:a1:2f:d3:de:
8d:eb:12:8b:15:ab:a4:b1:68:79:47:6c:ba:03:e3:4a:43:e8:
f2:73:d5:3d:b2:f5:ec:d8:73:bd:72:34:62:f2:e0:91:85:07:
03:7a:b1:be:cc:8d:62:b2:4e:59:89:8b:95:1f:ad:f3:24:5f:
91:8c:af:a2:f4:4a:55:8f:ab:47:6d:d0:5e:32:00:c6:8d:77:
7e:7b:b0:51:8d:59:1e:03:4b:df:0e:ab:b8:27:86:11:8f:7d:
d3:f9:b8:2b:b0:63:09:39:02:c3:ae:1a:cd:90:fa:72:94:79:
c8:95:18:a8:f1:12:23:a8:2e:2a:ab:16:27:3c:a8:b4:ac:e8:
8d:2f:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:29 2026 by rpki-client