Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
File: fOXOA9K0n058QIor97wEpeqCTms.mft (raw, json)
Hash identifier: nuJwJxr8Cql3emrIF1JcGaocXXc8mRFJFqeyGB3tB8g=
Subject key identifier: AE:28:37:93:FA:DB:95:28:EA:3C:C6:C2:61:60:29:0B:88:0A:92:E5
Authority key identifier: 7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
Certificate issuer: /CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Certificate serial: 91
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
Manifest number: 8F
Signing time: Mon 02 Mar 2026 04:58:15 +0000
Manifest this update: Mon 02 Mar 2026 04:58:15 +0000
Manifest next update: Mon 02 Mar 2026 10:58:15 +0000
Files and hashes: 1: VUqIDMTtELKIYrxAqK_hUi9wDww.roa (hash: f4A4tnRN0eQ8pw+ILPCNER3LHOoKHgYuaz681BtdDus=)
2: fOXOA9K0n058QIor97wEpeqCTms.crl (hash: rI4fzGcz40kRffcV1E3J+nYki6+PLUyjWZXKjrhdwYk=)
3: vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa (hash: Ez3G/6FV77f1KQ1yizzdm8rRAToXRUstPgobHTnrtdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Validity
Not Before: Mar 2 04:58:15 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=AE283793FADB9528EA3CC6C26160290B880A92E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:53:9a:c9:2a:61:03:15:ce:39:94:a9:e5:
8b:97:15:ae:c2:bc:37:8e:5a:5e:95:ac:78:b2:b9:
a8:09:28:7c:da:96:18:d9:4c:71:a5:00:5e:a1:e6:
1f:da:82:0d:c1:40:e2:3b:03:f8:1f:77:97:27:5b:
77:c0:52:e0:f8:07:70:75:3f:22:21:60:ee:2c:f6:
c0:b6:72:6b:67:1a:f1:70:64:3c:af:cf:23:7c:65:
5c:ba:e1:f0:77:43:d8:01:6a:ee:25:f2:07:6f:0c:
36:e1:9f:87:8b:9f:e1:b5:db:52:31:39:7b:6e:c4:
f9:5f:10:6c:fb:38:e7:66:9c:2c:8e:06:e3:28:5b:
8c:fa:83:30:4f:f3:a0:18:c6:24:a0:6d:b6:dd:b8:
39:73:e1:b4:4f:f4:97:23:01:3d:6b:05:20:eb:3a:
20:a9:f7:a6:2c:e1:2a:24:4d:ac:86:c8:ab:d0:8e:
a0:2e:67:32:d8:88:c8:d1:c6:8d:0f:b1:69:6b:f5:
ca:b6:0b:69:ae:1a:53:a0:90:a7:51:cf:ad:23:2b:
8b:af:a5:44:88:ca:db:e9:30:0f:4f:09:90:42:51:
02:d4:95:2f:31:f6:78:1d:e1:b4:38:6f:c9:f5:6b:
38:79:5b:e9:ab:bc:66:c2:7a:39:b2:f1:36:4a:4e:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:37:93:FA:DB:95:28:EA:3C:C6:C2:61:60:29:0B:88:0A:92:E5
X509v3 Authority Key Identifier:
keyid:7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0f:11:e6:dc:37:e5:24:e3:11:24:95:0b:30:af:0d:e1:b2:
51:b3:93:18:43:55:7d:80:09:06:04:ff:0d:ad:d3:8b:48:a0:
9b:02:91:2b:e3:da:a8:fa:20:f3:a2:eb:f2:0c:f8:67:ef:55:
84:6f:31:c6:3a:45:06:1b:9f:5b:91:40:d4:c2:9a:85:a2:41:
e1:59:41:3b:c8:de:d7:b9:1d:1f:cb:2d:c4:fe:62:7f:19:08:
26:18:4d:cf:45:a8:fd:77:b3:cc:f5:b7:65:4e:b8:3e:b9:cf:
86:b7:4c:87:41:32:76:52:19:50:96:1d:9d:32:49:89:f9:f3:
ce:c6:99:fb:fd:85:21:b4:fd:f2:a9:d9:d8:38:d3:d4:b1:45:
38:f2:df:98:93:b0:60:fe:59:79:7e:21:02:38:0c:cb:fe:e2:
1b:25:20:fc:4c:25:02:cc:68:a2:d6:5d:b5:e8:f1:7d:ae:3a:
70:35:16:5a:77:82:c0:a1:1e:22:0d:47:22:07:57:3e:9d:75:
f7:86:c0:1d:19:62:d0:81:02:36:92:dd:fa:c9:b0:ab:41:46:
1f:b3:a3:47:99:f1:a5:3c:a7:24:aa:09:63:2a:b4:3f:a2:e4:
54:a5:f7:28:4a:72:ba:c0:2d:14:81:da:fc:a8:41:bc:0a:9e:
b0:c9:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:09 2026 by rpki-client