Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
File: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft (raw, json)
Hash identifier: ybW7BJLjHKO03v10zVpZrrCNRg+ZXHzIQHgck6eUy4o=
Subject key identifier: 21:81:9E:1E:53:59:62:B1:63:A6:CC:10:63:F1:91:C7:F6:C5:BE:0F
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 05E7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
Manifest number: 05CA
Signing time: Thu 05 Mar 2026 18:58:24 +0000
Manifest this update: Thu 05 Mar 2026 18:58:24 +0000
Manifest next update: Fri 06 Mar 2026 00:58:24 +0000
Files and hashes: 1: --5p3HNP_npcM9WwQGiJmHx5u0U.roa (hash: Rl9Es6qphuLb/+2nbxNbdm0tzkYUplAdlWLJexuDZlE=)
2: 22EffpS7GnnifhXrI4tAbrDDc-g.roa (hash: 4E/yKu43inQAr1L9cp/ACPCiEVmbOTFL687c79yRLyA=)
3: 5phZxr5Uhb3NSuw3CQS7G12n8Ms.roa (hash: TiBiBqmX2u+8+lnUT723Nkj/vXcdxQpMq2cHfeG1nv8=)
4: 8GxBtEjdWLiRUsEQxe8VKmjAxXM.roa (hash: 0tZPdUKxLUPOpljwCfdgtZKJbSyJ2wrfzcl03BIcSWI=)
5: PrzOu3HLgb_fDfFfMV2C3u7dgAY.roa (hash: nQaZQEHGizfw2JArT6RRleWiUXqFqGuwPW1JdBlvgps=)
6: hTYglcTaggz46zo2uGojdNR6CiA.roa (hash: oxjLkgxJ/ScFrDTY2HsVJ3eQj12roDmJFBgsJUYTwQE=)
7: p8dPCz1-DM8oZAbLKQI9W1S52aI.roa (hash: YlDx1ECxWXJtCx373KSdly7XOBerHvXGr5nQka2FgVk=)
8: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl (hash: dg2LQqroBxXd1xrK7ZqZ+Gx188aNXIJ7qQOkJdTYOdY=)
9: yGBgQ_Is6mtpS4o_kSNsUFhygtE.roa (hash: R7h8Ue7gUr/+0YK1fEjPAlu/UJh1hg66VPEfvazJVHs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: Mar 5 18:58:24 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=21819E1E535962B163A6CC1063F191C7F6C5BE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:55:37:25:4e:0d:99:c8:9f:f1:4c:70:36:
38:4c:9b:db:3c:e2:67:20:93:f7:68:8a:51:f2:86:
5f:49:1e:6b:cb:3a:a7:5e:fb:da:ac:fe:da:a4:6a:
79:79:90:f0:36:73:2b:f2:98:b2:43:46:28:ae:67:
b2:17:6a:8e:81:9e:27:95:97:e2:a5:9e:83:1d:0c:
e9:24:52:c4:ea:bb:32:f8:5f:8c:13:74:c4:63:05:
9f:4e:15:96:cb:c8:e0:42:69:7e:b1:e7:9a:ed:11:
ff:85:8e:96:c4:09:99:10:70:b0:29:71:51:71:30:
35:79:ce:c1:d8:7e:4f:a2:fa:02:b9:99:e4:a5:87:
21:e7:f4:7a:ab:c0:f2:07:02:06:20:8c:18:1b:4d:
e2:4c:fc:16:6b:ae:33:96:5d:1f:6e:dd:1d:5a:fa:
2d:52:44:e8:81:8b:5f:41:01:c0:21:fc:e5:d8:8f:
d9:53:81:3b:e2:2c:77:05:43:41:7c:ba:94:0b:1c:
67:f1:3c:b4:f7:06:20:0f:e8:9a:5e:92:b9:fc:47:
f4:4b:5f:ae:08:dd:8c:b4:e9:1e:e6:de:ce:d1:a5:
b0:e4:3c:84:5a:b1:3b:cc:c1:0c:98:db:a0:85:c8:
66:56:60:fa:dc:fe:64:46:5f:e0:f8:45:cf:e9:55:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:9E:1E:53:59:62:B1:63:A6:CC:10:63:F1:91:C7:F6:C5:BE:0F
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:20:e3:30:5a:b9:c4:e4:f0:98:9e:f2:1b:c1:24:8f:a2:41:
9f:46:b2:ba:49:21:9e:c2:13:33:77:f0:d8:d6:9d:f1:ef:da:
8c:27:3d:4e:16:2d:3a:8a:6d:0e:a9:e7:30:2b:a5:50:96:05:
d0:14:33:44:5d:5a:0f:44:d2:f0:11:ab:fb:8f:b0:df:78:d4:
c0:89:18:c6:29:9a:99:c4:d5:cf:5f:36:7d:35:57:9d:68:56:
9f:f6:96:c0:e3:1e:bf:5c:75:3b:51:5b:64:98:69:35:bc:7f:
d8:7d:5f:ad:f8:bb:70:ea:aa:71:25:97:78:56:07:c9:55:d0:
6c:b0:20:19:65:ee:9c:a2:9b:b5:c0:e1:d2:f0:1e:8f:1d:9e:
be:86:aa:43:9f:69:e0:dc:1d:f6:69:3b:5f:8c:f4:f5:5c:88:
61:1a:90:cd:87:11:18:3e:7c:83:63:b9:29:a0:bf:bd:3e:a2:
15:6b:a1:f0:a1:d6:bf:17:87:36:d5:c0:af:3b:59:11:4b:73:
34:d9:3f:7b:3f:53:07:41:de:bb:bb:5d:40:86:42:32:4c:f5:
a8:71:d3:8c:90:2d:6d:f9:ce:ae:91:28:a4:2d:f9:bf:a0:d1:
8d:40:30:35:f5:a6:55:fe:b1:8c:92:22:2b:5a:61:b3:62:31:
5e:08:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:52 2026 by rpki-client