Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft
File: _TQehBwYN3f4-R30_NoLue-gYb8.mft (raw, json)
Hash identifier: 8xfzOU0qZbAk/tU17N82/Cux2VuCvvRNzxJct2gD3bk=
Subject key identifier: FC:F0:60:5C:20:83:E9:63:AA:CA:33:38:93:D0:E2:AF:79:B1:F0:F4
Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF
Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF
Certificate serial: 0DAB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft
Manifest number: 0D94
Signing time: Sun 01 Mar 2026 21:29:01 +0000
Manifest this update: Sun 01 Mar 2026 21:29:01 +0000
Manifest next update: Mon 02 Mar 2026 03:29:01 +0000
Files and hashes: 1: 7qZob3AujTc2jeu0nynofAHKNs4.roa (hash: r2Ki2IK8JfHSEpefyS/xJssFfIE/T47fC3oxXtHqm/s=)
2: GMo8tkwBdZTPbrQQkiUBAdJk5ZQ.roa (hash: GdrPtNcWf4QmlrWLcgF9ri4AGhzt8ZM3bX9EIKp1oGQ=)
3: T3HWexZM2f7vnqdd_FK90-cF1fY.roa (hash: JPKm2IFylXpc0ZweqBp70pbPsTJjgRO0KZtPaFD6MtE=)
4: _TQehBwYN3f4-R30_NoLue-gYb8.crl (hash: pj9C1TKxOc5+6/ZycHG6eJVZwqyjcCrlLTLA4PfmH0I=)
5: _nvmeXPbSzL7-Y-DR-1TBImsJBs.roa (hash: mrWV6Vs8RrVBH5vgGrWSkBEJjtA9y7bPBKUQHqKeRLg=)
6: hRhoO-39chtxs16Yx6jA12myuV4.roa (hash: lbmvoC+sCx0UWTj8p0iqVe/VY2Et3fnyZTHeEdpEHuE=)
7: lEgQ59xyscOjBK92hV-PzIREb3Q.roa (hash: dobMUUj8I1ijNGOPgGAOsFSIwqoDZFCEitDSKML7Kqo=)
8: sJSUiMpH4Z1WN6mdCubWgDorjXY.roa (hash: fpNiWBDBvWgxRhgPfNcZhJbnrL81qpDF+708K4TPJ9g=)
9: uA1LTwixkfJG9KBPCCFok0-vlYw.roa (hash: io24LioFehn5fxNt/teIFW6VsNYeZHFHG8A5PNqvZVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3499 (0xdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF
Validity
Not Before: Mar 1 21:29:01 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=FCF0605C2083E963AACA333893D0E2AF79B1F0F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:83:a8:6f:0c:d6:15:9b:54:af:5d:d3:72:
b1:3b:f3:83:0c:83:10:c4:2b:4e:3a:74:69:52:b9:
78:d9:0f:8a:6a:ff:e4:5d:4e:63:0c:7c:72:1e:74:
3d:2d:37:c4:67:c3:b8:0d:b8:54:69:dd:32:1c:0b:
51:9c:f6:ae:57:36:eb:0f:6f:a0:21:ce:05:e1:d7:
39:bf:88:81:93:4c:96:a8:cb:32:1f:94:15:4b:f4:
da:70:12:be:0d:59:7e:08:d2:80:b8:4b:61:8d:81:
d2:b2:57:f6:9e:38:d4:dc:4c:7b:d2:a3:b5:b0:bf:
2e:81:53:6d:71:13:a0:5e:97:c4:c6:69:f2:84:e0:
16:48:2a:c9:d2:fd:c9:55:53:d7:52:df:cc:d4:62:
b8:2a:4f:03:10:9f:58:12:ee:6c:6e:e6:f4:ce:e9:
43:c8:6c:d2:41:e3:d5:48:aa:eb:1d:23:02:21:bb:
5d:a6:82:9e:e6:8a:3b:b6:74:26:31:5e:33:26:9a:
d3:c1:9e:a7:86:69:e5:34:2e:ca:e4:bb:55:cb:aa:
fa:9c:33:44:1c:1c:47:21:de:33:73:95:53:49:e5:
5a:33:ac:07:5b:6e:f9:9e:57:57:50:a5:6b:93:db:
76:d7:66:f1:94:a3:86:c9:1f:e3:fb:91:92:cd:6c:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:60:5C:20:83:E9:63:AA:CA:33:38:93:D0:E2:AF:79:B1:F0:F4
X509v3 Authority Key Identifier:
keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f1:6b:96:fc:0c:2d:ea:85:8e:6d:69:c1:a6:54:24:36:cf:
49:bd:f8:56:8f:79:d8:1d:63:95:d2:60:38:2f:6d:ca:88:6b:
ab:8a:3b:ee:28:14:01:cd:5e:1d:72:1b:dd:82:1c:c9:fe:af:
9d:fc:52:93:39:e2:07:52:0d:da:44:67:84:bd:3e:0e:b8:2a:
11:8f:b4:44:4e:e4:92:c8:b9:46:a8:14:50:7a:84:e6:c1:b4:
5f:3b:7f:d6:14:d9:51:08:b5:3c:7d:4f:81:b6:f7:ac:b5:87:
d9:95:0b:70:47:89:41:1a:73:03:59:f4:c2:45:39:6e:ed:4e:
d4:41:7c:68:86:ac:c6:29:98:b3:b8:52:8b:34:b6:2d:27:75:
89:2e:df:d6:19:de:02:35:65:a3:3f:36:49:6c:5d:d8:c1:40:
1c:a7:c5:51:e3:71:59:ea:13:49:e8:ce:f0:1d:a5:cb:d3:74:
5d:d6:e8:fa:12:42:82:da:41:69:7a:b3:a8:5f:ad:46:af:7e:
36:51:82:af:49:cb:a8:69:1c:24:7c:d5:f8:f9:79:c6:79:08:
07:b6:5f:0b:09:44:3e:d6:07:02:25:35:84:74:77:1c:34:19:
28:d2:5f:dc:b5:c3:b6:bb:16:d4:86:7d:54:a5:32:de:74:42:
75:a3:82:48
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQz
NDFFODQxQzE4Mzc3N0Y4RjkxREY0RkNEQTBCQjlFRkEwNjFCRjAeFw0yNjAzMDEy
MTI5MDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZDRjA2MDVDMjA4M0U5
NjNBQUNBMzMzODkzRDBFMkFGNzlCMUYwRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVD4OobwzWFZtUr13TcrE784MMgxDEK046dGlSuXjZD4pq/+Rd
TmMMfHIedD0tN8Rnw7gNuFRp3TIcC1Gc9q5XNusPb6AhzgXh1zm/iIGTTJaoyzIf
lBVL9NpwEr4NWX4I0oC4S2GNgdKyV/aeONTcTHvSo7Wwvy6BU21xE6Bel8TGafKE
4BZIKsnS/clVU9dS38zUYrgqTwMQn1gS7mxu5vTO6UPIbNJB49VIqusdIwIhu12m
gp7miju2dCYxXjMmmtPBnqeGaeU0Lsrku1XLqvqcM0QcHEch3jNzlVNJ5VozrAdb
bvmeV1dQpWuT23bXZvGUo4bJH+P7kZLNbC/rAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU/PBgXCCD6WOqyjM4k9Dir3mx8PQwHwYDVR0jBBgwFoAU/TQehBwYN3f4+R30
/NoLue+gYb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
Mi9fVFFlaEJ3WU4zZjQtUjMwX05vTHVlLWdZYjguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL19UUWVoQndZTjNmNC1SMzBfTm9MdWUtZ1liOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvX1RRZWhCd1lOM2Y0
LVIzMF9Ob0x1ZS1nWWI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAH3xa5b8DC3qhY5tacGmVCQ2z0m9+FaPedgdY5XSYDgvbcqIa6uKO+4oFAHN
Xh1yG92CHMn+r538UpM54gdSDdpEZ4S9Pg64KhGPtERO5JLIuUaoFFB6hObBtF87
f9YU2VEItTx9T4G296y1h9mVC3BHiUEacwNZ9MJFOW7tTtRBfGiGrMYpmLO4Uos0
ti0ndYku39YZ3gI1ZaM/NklsXdjBQBynxVHjcVnqE0nozvAdpcvTdF3W6PoSQoLa
QWl6s6hfrUavfjZRgq9Jy6hpHCR81fj5ecZ5CAe2XwsJRD7WBwIlNYR0dxw0GSjS
X9y1w7a7FtSGfVSlMt50QnWjgkg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:40:08 2026 by rpki-client