Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier: NqzfQCudMEy3Gu93T0SCOkl6CTprTHlpymtKzOCe4Ms=
Subject key identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial: 1C81
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number: 1C7A
Signing time: Thu 05 Mar 2026 19:01:05 +0000
Manifest this update: Thu 05 Mar 2026 19:01:05 +0000
Manifest next update: Fri 06 Mar 2026 01:01:05 +0000
Files and hashes: 1: 5H9xm8sFNjlauRfit6inw9B9qF8.roa (hash: ST519f8zju4XOEkqrxswQqviHUh35KmFlV/rOg2xuv4=)
2: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: 9C5z/ArO7J/4uzoXkOmI3kESQhDV+mmCUI7t9bn0AB0=)
3: G0OzAKp9H3qMTcdDSd383-EnaNY.roa (hash: 6M95qsHvHVz8pg7gOuht4QMpvYxmMeouys9XnZmlOoU=)
4: GFoY3c0huT5AcgeDD1txw4ZsUJY.roa (hash: S8dj+GBLsvU8XOwcrIiwuCkqZCbtLR2H2LVR4IXCQTs=)
5: ksV90rYgQGWCW_zswnSCo4Hhlas.roa (hash: Fx78asKV1L7Hm6uWNysmnMGruYE92gBLrzXEIF5SsAM=)
6: ljHKtUvHDkf9lBkanIoc-YuHVB4.roa (hash: yVBKihHdvHcmNN6jWu6AQcR8iBGZilDk4RxvxP/Hxu8=)
7: x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa (hash: KKLN3wj6w6+GZPg4mWY+9cSane2EnXX2A3ZYmL8Aiyg=)
8: zAB7KdB3MZHXTnVzdqED51EalUg.roa (hash: +ZdEVksBWwEhvnmdhugXRzR69tGG2HocpA/7R2PVt7U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7297 (0x1c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Validity
Not Before: Mar 5 19:01:05 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
X509v3 Authority Key Identifier:
keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:ba:88:ea:7d:78:13:14:d8:f9:2d:28:fb:8f:e6:4e:2d:
6a:e3:22:2a:9c:49:a3:13:08:50:5b:71:5b:ec:21:4e:ef:72:
9e:62:cb:b1:0d:bf:c4:1c:d0:b8:d1:38:bd:93:68:07:3a:e7:
0b:0b:c3:60:33:93:f7:3f:89:a5:54:57:75:6f:96:ae:a8:9d:
1b:7d:2a:a8:6b:e5:37:c8:58:aa:bc:ad:60:dc:94:a5:70:af:
96:e9:53:87:68:93:f7:fb:4f:af:40:34:14:fb:27:cc:9e:22:
aa:0f:ef:b8:d8:db:7d:06:64:f2:17:d4:79:f2:24:cc:39:9f:
11:b9:bc:86:7c:1c:7f:8e:fc:70:49:2b:2d:7a:66:b8:5d:09:
68:d0:57:4b:13:90:31:23:e0:50:0f:24:f4:57:78:46:9b:73:
47:ee:48:13:94:21:2e:07:e3:54:e5:b8:77:4a:5c:37:8c:48:
d9:c6:21:9a:14:ce:d7:cb:c3:6b:3d:18:b9:3f:f4:87:2a:3a:
00:23:0d:31:f1:e6:cc:d3:cc:a3:43:c6:48:63:f1:8a:b2:7d:
29:56:54:0c:b5:2f:b8:64:5b:e4:cf:d8:89:53:d2:77:d8:41:
30:ae:30:7f:43:ee:55:95:ef:14:23:6b:d8:42:3f:49:4d:47:
31:61:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:51 2026 by rpki-client