Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft
File: 3MTV8l8-ospnw9i-tmvzCTPlkWo.mft (raw, json)
Hash identifier: yifUPjcGODiIl5dVfQPMpxrZnkVJnfYFakIx/RjFcI0=
Subject key identifier: 91:A5:20:C0:CA:F5:59:4B:54:50:3E:1A:F9:B3:37:B9:2A:50:B3:E0
Authority key identifier: DC:C4:D5:F2:5F:3E:A2:CA:67:C3:D8:BE:B6:6B:F3:09:33:E5:91:6A
Certificate issuer: /CN=DCC4D5F25F3EA2CA67C3D8BEB66BF30933E5916A
Certificate serial: 0EB6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft
Manifest number: 0EB3
Signing time: Mon 02 Mar 2026 04:58:23 +0000
Manifest this update: Mon 02 Mar 2026 04:58:23 +0000
Manifest next update: Mon 02 Mar 2026 10:58:23 +0000
Files and hashes: 1: 3MTV8l8-ospnw9i-tmvzCTPlkWo.crl (hash: KvVwzs0wQMaLHhlKM/NLBT44//fPRAvfNhrcXL23bq8=)
2: P7uWjXjonyWWDUrUE1VsBjgamkk.roa (hash: jhYkTgyRVhWCnlzsLbr8rLzp25f785WwAe+V21SuVA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3766 (0xeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCC4D5F25F3EA2CA67C3D8BEB66BF30933E5916A
Validity
Not Before: Mar 2 04:58:23 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=91A520C0CAF5594B54503E1AF9B337B92A50B3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:16:81:d4:29:dd:a6:37:0c:c1:46:98:1d:
4e:df:ca:de:f1:b0:9c:67:99:92:a6:fa:14:6f:f4:
1d:2d:ea:8a:6a:fc:33:d8:77:6d:9b:0b:fa:eb:ba:
b9:a5:22:b9:fa:4f:17:49:4a:51:84:51:51:aa:7f:
45:a1:ef:b3:e3:61:42:07:04:21:c8:a4:42:d4:7b:
6a:68:d1:2d:de:92:5d:89:8c:40:8c:71:84:6d:28:
95:74:ca:09:99:6e:61:f1:c4:3a:86:ef:04:c1:67:
3f:e2:bb:59:c0:50:16:66:6d:22:87:42:78:8d:d6:
75:6a:0e:8d:b2:c5:aa:09:57:9f:58:99:66:63:6a:
82:07:5c:60:2a:ff:63:53:2f:db:d3:ba:4b:8c:69:
d3:44:49:05:c1:85:ec:3e:bc:4b:9a:42:96:87:ae:
72:fd:ca:53:e3:78:bf:9e:f1:d7:ac:3a:2c:c8:17:
a0:82:70:75:7e:99:79:00:7c:73:78:70:d1:6f:11:
63:fb:0f:f7:10:75:9c:e2:a0:b1:85:a7:3f:e4:a1:
9f:e5:74:86:ab:2c:24:89:0c:29:02:9d:11:06:27:
c8:37:84:77:54:86:34:06:41:5e:a2:59:26:ce:35:
5c:68:77:2e:30:0f:95:2a:e8:79:c0:95:c5:8d:09:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:20:C0:CA:F5:59:4B:54:50:3E:1A:F9:B3:37:B9:2A:50:B3:E0
X509v3 Authority Key Identifier:
keyid:DC:C4:D5:F2:5F:3E:A2:CA:67:C3:D8:BE:B6:6B:F3:09:33:E5:91:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:bb:36:9e:2d:b7:bf:aa:07:cc:52:ea:5d:aa:41:ff:3f:8f:
69:ab:1b:f7:f8:c8:fa:f7:c6:20:9b:e3:c9:3b:ba:ba:4d:46:
f5:9b:f0:32:d1:40:17:1c:e2:9b:07:62:aa:41:c9:e4:e4:2f:
05:07:42:d5:59:e6:85:6b:0f:4f:a8:bf:23:9d:51:b9:85:e1:
3d:b8:11:90:e4:97:51:88:c3:ae:8f:fe:dd:ea:3c:05:23:2b:
23:08:c2:24:6c:e1:60:23:a0:ec:7d:cc:f3:2a:88:c5:cf:4e:
3f:c3:ab:7c:83:8e:ed:8c:54:8d:35:65:fe:cf:fe:ad:89:09:
96:f5:14:41:0e:9b:a5:0d:4d:0d:c8:3f:ed:78:26:1b:4e:4e:
1f:1e:85:49:63:12:bf:4c:83:9f:be:b6:01:8f:1e:b5:af:dd:
92:de:1e:1a:f9:f5:b1:6c:21:19:68:2a:b4:8f:99:a3:7c:50:
94:7c:cb:07:c9:02:e7:f7:48:59:7a:e5:ad:03:32:0b:44:35:
cd:6b:64:7b:8e:73:af:74:58:b3:83:59:c4:f8:4d:48:47:7d:
9e:58:3f:fd:14:67:86:be:dd:20:67:c5:e9:e9:5f:fb:dd:b7:
a7:5f:55:3b:e4:fb:8c:5a:7d:77:fa:69:c6:51:c9:cc:4a:b7:
3a:75:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:08 2026 by rpki-client