Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft
File: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft (raw, json)
Hash identifier: NWIr6VYxOg460xUv9im7MJuzaWMC9neAxATnwyMQE/M=
Subject key identifier: 43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6
Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Certificate serial: 0202
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft
Manifest number: 01FE
Signing time: Mon 02 Mar 2026 05:00:27 +0000
Manifest this update: Mon 02 Mar 2026 05:00:27 +0000
Manifest next update: Mon 02 Mar 2026 11:00:27 +0000
Files and hashes: 1: Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl (hash: /q2Vxa8AeMqGbmpTkfhoxGddRRRD5hPHDItUvgmkYuY=)
2: RaawOuDDYFp9jGPJIVM5tLlWjyk.roa (hash: WWfDSgavDPugQlvWIeOHbTfRUr6gg9vMY9vNrAQH45g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Validity
Not Before: Mar 2 05:00:27 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=43E925307994DFE7309275A70C6D6BE70D2316C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:11:c3:9a:e1:ba:87:84:f2:ca:8c:21:f8:
a2:73:ab:76:29:29:dd:f4:98:8a:f3:6b:1d:94:f2:
0d:d4:a2:ff:a2:c9:c3:ad:23:db:29:aa:35:72:3d:
de:25:98:df:99:64:a4:c4:44:40:a5:ee:76:b3:bb:
85:df:d4:6f:73:00:b7:d1:e0:7a:e5:9b:12:89:f3:
0d:45:dc:f7:37:84:ce:e8:53:b3:7e:64:f3:ca:40:
38:47:77:c7:54:55:db:70:e2:d2:a6:cf:a6:c3:a9:
af:63:62:aa:48:24:1c:c6:b4:a9:8f:59:f4:15:69:
79:f5:fa:9c:7b:5e:f3:de:54:f6:58:f8:03:9f:f3:
c2:ba:08:91:14:17:70:9d:5f:28:58:42:08:9b:bd:
65:8b:f5:de:1c:c6:26:ad:98:20:09:47:14:10:24:
95:5d:0c:88:bf:6b:f6:b5:03:ea:07:99:ee:95:6a:
0c:aa:d6:28:9e:1f:a7:2b:aa:9c:34:cd:51:79:41:
bb:46:a7:b1:80:28:3c:f0:d4:c0:a1:db:eb:33:6c:
0f:56:43:f2:d2:5a:d1:ac:78:d7:c5:b0:9b:db:35:
9a:3e:1f:4c:97:c7:7b:ca:ca:04:7f:57:ee:4c:3c:
9a:a5:d1:3d:de:2e:72:5e:55:82:f1:3c:f2:9d:5b:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E9:25:30:79:94:DF:E7:30:92:75:A7:0C:6D:6B:E7:0D:23:16:C6
X509v3 Authority Key Identifier:
keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:52:54:a9:51:b1:61:82:5c:6d:2e:c0:88:76:c7:0b:88:8b:
4b:19:af:a8:59:b5:5e:19:5c:36:dd:dd:eb:af:0c:dd:4f:8b:
51:94:78:12:b9:2f:27:eb:d6:44:9e:aa:22:6c:50:5b:59:02:
14:c4:b5:5d:0f:fe:d4:e9:fe:98:6e:88:6c:c7:31:f5:d5:11:
ab:61:78:ca:4a:e0:be:6b:b1:2c:2c:96:5a:37:b2:db:5a:04:
84:f1:f8:aa:de:63:56:e6:56:02:34:0c:c3:41:e1:50:30:56:
b4:45:42:7a:2b:a3:92:d4:33:e1:f2:44:75:ef:60:26:cd:f7:
41:18:d4:65:b6:0f:9c:f9:4c:e6:a8:08:c6:6d:ba:b2:db:e9:
d3:d8:9a:5b:e3:07:04:d7:45:1b:7b:56:0c:68:ac:c0:bc:78:
a0:75:90:47:70:9f:25:cf:52:2c:e6:97:66:36:59:f1:59:70:
c1:a4:8e:44:c1:33:b3:41:e3:88:3e:10:48:72:3b:15:a0:27:
1d:cf:c3:68:58:4a:8f:47:4a:e5:b4:9a:1f:79:ad:b8:a6:2c:
6a:51:e8:53:b5:fd:4e:12:9b:2f:85:a6:7a:fa:8b:f5:b9:14:
d8:5e:e8:b6:65:28:6b:fa:61:b5:b6:29:48:b0:31:a2:24:fa:
70:ff:fc:00
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNB
QTdGMjAxMzMxRDcxMEEzRjA2ODIyQkU0RDQ3MkE1MjA3RUIwOTAeFw0yNjAzMDIw
NTAwMjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzRTkyNTMwNzk5NERG
RTczMDkyNzVBNzBDNkQ2QkU3MEQyMzE2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnQRHDmuG6h4Tyyowh+KJzq3YpKd30mIrzax2U8g3Uov+iycOt
I9spqjVyPd4lmN+ZZKTERECl7nazu4Xf1G9zALfR4HrlmxKJ8w1F3Pc3hM7oU7N+
ZPPKQDhHd8dUVdtw4tKmz6bDqa9jYqpIJBzGtKmPWfQVaXn1+px7XvPeVPZY+AOf
88K6CJEUF3CdXyhYQgibvWWL9d4cxiatmCAJRxQQJJVdDIi/a/a1A+oHme6Vagyq
1iieH6crqpw0zVF5QbtGp7GAKDzw1MCh2+szbA9WQ/LSWtGseNfFsJvbNZo+H0yX
x3vKygR/V+5MPJql0T3eLnJeVYLxPPKdW6WFAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUQ+klMHmU3+cwknWnDG1r5w0jFsYwHwYDVR0jBBgwFoAUQ6p/IBMx1xCj8Ggi
vk1HKlIH6wkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx
MS9RNnBfSUJNeDF4Q2o4R2dpdmsxSEtsSUg2d2suY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvUTZwX0lCTXgxeENq
OEdnaXZrMUhLbElINndrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAL9SVKlRsWGCXG0uwIh2xwuIi0sZr6hZtV4ZXDbd3euvDN1Pi1GUeBK5Lyfr
1kSeqiJsUFtZAhTEtV0P/tTp/phuiGzHMfXVEatheMpK4L5rsSwsllo3sttaBITx
+KreY1bmVgI0DMNB4VAwVrRFQnoro5LUM+HyRHXvYCbN90EY1GW2D5z5TOaoCMZt
urLb6dPYmlvjBwTXRRt7VgxorMC8eKB1kEdwnyXPUizml2Y2WfFZcMGkjkTBM7NB
44g+EEhyOxWgJx3Pw2hYSo9HSuW0mh95rbimLGpR6FO1/U4Smy+Fpnr6i/W5FNhe
6LZlKGv6YbW2KUiwMaIk+nD//AA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:52 2026 by rpki-client