Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier: gYT/nP6x85xMpODCvnx0W5lnVTqAzLti1a97d678a1U=
Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 1AB0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number: 1AA4
Signing time: Thu 05 Mar 2026 18:58:56 +0000
Manifest this update: Thu 05 Mar 2026 18:58:56 +0000
Manifest next update: Fri 06 Mar 2026 00:58:56 +0000
Files and hashes: 1: 97-7C3dDSirb66rQWLzjN8EVFeQ.roa (hash: aSwLkN0n0aTA4qY8RZgyH3sQrimuRFxnnD7txCNU8sw=)
2: LYlIwabI9y1aUm1iS6_deSSPdQ4.roa (hash: sMZ2ffWy01w7sJigLlIkp0LMbKutBmFWKnBXY1e2GyY=)
3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: 9jkCz9iDqqI2XsR/h/IZJ6ICu2Y9MWYK/13dTBbE0ZM=)
4: u6Ak-r7u8luLfAvXH-20LWPkKnc.roa (hash: TxLPFcmNBaJHMcJxiM8fkAKJG66sXfl9PccECAWbdoI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6832 (0x1ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: Mar 5 18:58:56 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:cc:b4:80:82:5e:dc:e9:ce:fc:38:9e:3c:c1:33:57:72:
a4:9d:a6:89:e3:38:e9:fe:35:1e:80:1e:42:1a:57:5f:02:b1:
68:5a:a4:b2:09:c5:76:30:23:73:a3:d1:62:44:3f:43:d7:78:
87:91:79:ac:24:d0:07:f4:27:69:b0:3f:11:02:1e:ea:b9:22:
0b:93:e6:34:75:46:24:f7:a8:23:dc:6f:4f:18:a5:ae:e1:95:
ba:d3:65:39:2d:ed:c7:0c:fb:f7:c5:dd:1b:46:36:bc:9a:8c:
21:95:7b:b4:ae:cb:62:d0:30:39:f0:32:d0:ac:a8:65:1e:ee:
dc:ad:e3:b8:34:f2:eb:97:ed:ee:06:06:28:f0:13:f1:d3:6d:
85:ee:b7:67:d8:08:d3:16:72:4e:0a:df:67:82:25:05:26:a8:
c6:b8:5e:fe:28:bf:03:6b:38:c0:30:6d:63:c9:cf:f6:7e:b5:
76:a7:3f:65:1a:65:87:3b:4b:e7:48:94:1c:c9:44:40:43:65:
c2:f1:cc:50:84:9d:bb:91:7e:28:7f:d5:00:c8:f4:d6:3b:84:
24:ea:47:bf:68:26:c7:67:8e:9b:4e:cf:32:68:3b:96:17:a5:
43:9a:be:1a:87:bb:15:a6:a3:53:0d:39:f1:4a:7d:d4:6d:a5:
72:4d:86:d2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICGrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5
MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNjAzMDUx
ODU4NTZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2
OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf
3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW
h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn
LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR
24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX
UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa
jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw
MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ
UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKkOzLSAgl7c6c78OJ48wTNXcqSdponjOOn+NR6AHkIaV18CsWhapLIJxXYw
I3Oj0WJEP0PXeIeReawk0Af0J2mwPxECHuq5IguT5jR1RiT3qCPcb08Ypa7hlbrT
ZTkt7ccM+/fF3RtGNryajCGVe7Suy2LQMDnwMtCsqGUe7tyt47g08uuX7e4GBijw
E/HTbYXut2fYCNMWck4K32eCJQUmqMa4Xv4ovwNrOMAwbWPJz/Z+tXanP2UaZYc7
S+dIlBzJREBDZcLxzFCEnbuRfih/1QDI9NY7hCTqR79oJsdnjptOzzJoO5YXpUOa
vhqHuxWmo1MNOfFKfdRtpXJNhtI=
-----END CERTIFICATE-----
Generated at Fri Mar 6 01:01:33 2026 by rpki-client