Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/DaRKsNbqVGCDBJv5aVWb57PGQuo.mft
File: DaRKsNbqVGCDBJv5aVWb57PGQuo.mft (raw, json)
Hash identifier: z1WklWAgxrAA8QYdIEC/k6WfK38WysjdrIMqiTL9UzY=
Subject key identifier: E8:46:BA:C9:87:63:84:3B:33:8B:4A:BF:BF:46:D0:DC:A2:29:5E:8C
Authority key identifier: 0D:A4:4A:B0:D6:EA:54:60:83:04:9B:F9:69:55:9B:E7:B3:C6:42:EA
Certificate issuer: /CN=0DA44AB0D6EA546083049BF969559BE7B3C642EA
Certificate serial: 8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DaRKsNbqVGCDBJv5aVWb57PGQuo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/DaRKsNbqVGCDBJv5aVWb57PGQuo.mft
Manifest number: 8E
Signing time: Mon 02 Mar 2026 07:31:16 +0000
Manifest this update: Mon 02 Mar 2026 07:31:16 +0000
Manifest next update: Mon 02 Mar 2026 13:31:16 +0000
Files and hashes: 1: DaRKsNbqVGCDBJv5aVWb57PGQuo.crl (hash: WgH/Rp08h1LwwUD2wINaxv314UVKKyciHMA4IbmVSmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DA44AB0D6EA546083049BF969559BE7B3C642EA
Validity
Not Before: Mar 2 07:31:16 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E846BAC98763843B338B4ABFBF46D0DCA2295E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:4f:81:f4:5e:b9:35:e1:14:0f:67:b4:c1:
7d:53:e5:4a:89:06:7a:41:1b:de:a2:d5:57:29:a0:
ad:ce:f8:94:54:28:5c:a1:e1:1f:2f:77:60:dd:42:
23:1b:13:9d:d3:c9:d5:84:ac:6a:e3:c9:91:9e:84:
52:43:24:01:42:99:4d:e9:67:bb:ff:07:c0:cd:ec:
15:3e:93:cf:45:dd:3c:98:07:cd:ab:e1:74:c7:f0:
2d:6f:0a:5f:af:20:94:ef:c3:79:ac:b7:14:84:d6:
69:5d:54:c3:85:4b:d7:78:16:6b:6d:87:d3:e0:1f:
75:7f:c5:ba:e9:1b:d8:cb:40:de:8c:5f:da:3c:48:
88:6a:10:af:07:bc:75:64:8f:9e:ee:f7:c5:d1:d5:
cd:31:2f:dd:be:6e:8d:b6:93:91:6e:bb:40:c2:bf:
99:63:4e:6c:b6:12:11:71:8a:d7:ae:c0:56:57:e7:
8d:0c:a2:bd:93:e0:2c:9f:91:5a:69:54:28:3f:54:
16:cd:b4:e5:d5:96:61:90:cb:b6:7f:c0:15:2d:31:
90:10:40:90:ed:49:d4:de:65:f9:79:75:6e:0e:18:
42:d7:14:75:37:a9:27:d8:d3:cc:89:36:bb:ad:d4:
25:d4:1f:39:a9:3a:53:86:13:05:b8:8f:dc:ab:ea:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:BA:C9:87:63:84:3B:33:8B:4A:BF:BF:46:D0:DC:A2:29:5E:8C
X509v3 Authority Key Identifier:
keyid:0D:A4:4A:B0:D6:EA:54:60:83:04:9B:F9:69:55:9B:E7:B3:C6:42:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/DaRKsNbqVGCDBJv5aVWb57PGQuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DaRKsNbqVGCDBJv5aVWb57PGQuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/DaRKsNbqVGCDBJv5aVWb57PGQuo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:8d:f1:e5:97:ca:f5:ac:f6:87:18:14:bd:76:c2:a6:77:df:
57:3f:7f:49:28:9c:41:3d:b9:ca:64:7e:9a:91:1a:b8:64:00:
4c:f3:a4:59:37:0b:6e:6f:d3:a3:64:b8:08:77:02:41:33:6e:
22:62:1b:da:91:f2:68:10:81:e6:8a:d0:f3:60:d7:80:ae:9d:
ba:08:c4:61:7e:55:00:50:d4:18:74:51:c5:28:0c:66:ba:ac:
d4:71:6d:9e:e8:5a:88:ff:8b:0e:c9:61:70:59:9b:87:5a:9c:
7e:7f:b3:12:d9:9d:9c:25:ef:d2:aa:2f:ff:7a:2e:26:89:59:
b0:df:80:06:ae:e6:f8:c7:12:3c:2d:c0:5f:59:cd:5c:1d:13:
2d:7e:25:bf:91:96:72:dc:2d:74:14:d7:49:2e:b3:3b:9b:15:
3c:9b:f9:c9:32:ae:4f:ec:53:9b:a8:a6:d2:e1:fd:3f:ff:46:
7c:f9:bf:38:15:28:a1:03:06:6e:fe:26:04:f1:96:f1:a9:4c:
4c:07:c8:81:f9:26:1c:75:3f:a6:01:39:ee:7f:c4:ed:7a:ef:
d4:ff:c7:7a:8d:ba:f8:4c:3b:42:72:ba:e9:fc:66:5f:77:67:
15:3f:8d:d0:b2:d6:e1:5a:de:df:ee:d6:3b:60:16:97:05:fa:
f0:a0:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:37 2026 by rpki-client