Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
File: IGM8jmnuaH1MQSPQwJea0UTlXrc.mft (raw, json)
Hash identifier: yNREK8U98f1q3ae2w0MCo/FvcKvSNc7B7yywz2DKyL4=
Subject key identifier: 8A:73:24:BA:58:30:A5:5C:DA:6E:BE:7C:2F:41:0F:BC:89:0A:40:04
Authority key identifier: 20:63:3C:8E:69:EE:68:7D:4C:41:23:D0:C0:97:9A:D1:44:E5:5E:B7
Certificate issuer: /CN=20633C8E69EE687D4C4123D0C0979AD144E55EB7
Certificate serial: 5401
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IGM8jmnuaH1MQSPQwJea0UTlXrc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
Manifest number: 5401
Signing time: Sun 20 Jul 2025 06:39:34 +0000
Manifest this update: Sun 20 Jul 2025 06:39:34 +0000
Manifest next update: Sun 20 Jul 2025 12:39:34 +0000
Files and hashes: 1: IGM8jmnuaH1MQSPQwJea0UTlXrc.crl (hash: x7XzZYtR7Y1/KoHV5qfR7aPYjk0/9XszVG8AK2iFrrA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21505 (0x5401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20633C8E69EE687D4C4123D0C0979AD144E55EB7
Validity
Not Before: Jul 20 06:39:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8A7324BA5830A55CDA6EBE7C2F410FBC890A4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:60:9d:02:16:1f:62:3c:eb:5a:2b:b6:b8:
f7:29:bc:cd:7e:af:3c:eb:15:1c:b0:23:41:af:c5:
a1:d6:bd:a2:51:84:8e:75:24:28:c9:8b:dd:10:55:
35:51:72:b6:86:35:dc:47:8c:55:85:96:be:e2:fd:
92:d3:8f:b8:ed:f7:23:02:ec:f3:6c:d0:12:fa:26:
b0:59:a5:a4:43:33:f9:1a:39:42:0b:97:62:9a:27:
bf:42:79:32:2e:9e:8c:d8:09:45:03:93:4a:6e:93:
07:69:53:64:bc:61:96:2b:44:51:5b:39:ef:45:97:
ec:47:cd:4c:55:99:99:1c:c0:b7:00:9f:0b:a2:80:
d7:da:2d:b8:f6:05:6c:ac:40:f9:fb:13:31:27:65:
99:a6:29:19:4e:50:8e:e3:87:01:9e:ea:2f:5f:12:
58:39:0e:95:61:f3:27:52:7a:a6:27:0c:c9:16:46:
53:d9:de:02:b1:93:64:46:17:37:f6:06:10:e0:a7:
94:6a:75:78:62:a3:fa:5b:41:e7:35:8d:53:a9:5b:
14:0f:cc:44:2f:09:4b:fc:2c:ac:c5:77:33:78:10:
c3:06:ed:f9:ef:e9:c0:ef:b4:9e:4f:82:f9:66:e4:
2d:37:53:91:e5:d4:0b:2c:14:74:0b:84:15:03:94:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:24:BA:58:30:A5:5C:DA:6E:BE:7C:2F:41:0F:BC:89:0A:40:04
X509v3 Authority Key Identifier:
keyid:20:63:3C:8E:69:EE:68:7D:4C:41:23:D0:C0:97:9A:D1:44:E5:5E:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IGM8jmnuaH1MQSPQwJea0UTlXrc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ae:8c:31:b4:59:04:0c:3f:94:a8:76:c1:60:f1:03:a7:3f:
dd:8f:e7:e0:84:47:b6:0e:01:94:c7:5b:ff:4d:79:75:5a:06:
24:9d:52:d3:f0:bf:31:c8:6f:a9:82:d5:20:04:21:bc:8f:d3:
a6:d5:97:53:e9:2f:d6:02:e7:11:16:d7:6f:d4:cd:7e:a5:5c:
09:71:24:0f:f9:2e:74:6e:60:ab:7d:71:c7:02:7f:06:06:bf:
94:e7:6d:dd:3d:4c:fb:8c:5a:c3:55:9f:06:f1:d1:74:ef:26:
1c:17:9d:f1:8a:b7:9c:2b:5c:5c:2b:a6:74:e0:9b:03:b3:7d:
d4:dd:86:aa:28:09:e2:2a:cc:4c:21:57:8e:16:a0:02:72:28:
c6:fb:51:be:2b:ef:2c:f5:6d:0a:15:37:b5:13:10:c7:0c:9f:
d8:0d:31:a4:ce:c9:84:d4:cf:ea:8a:9f:7c:8b:17:08:41:4f:
0d:31:ff:1b:d9:e4:d3:1a:52:05:fe:81:bd:1e:7c:d9:d1:49:
e5:0c:49:af:d4:9d:77:21:7e:ce:08:00:cb:cf:ed:71:53:02:
56:cf:b7:02:3f:08:ff:25:1f:7a:b3:ba:5a:9b:5c:ff:3f:a9:
07:39:91:76:fa:fa:85:7b:0b:81:35:59:0a:48:35:c4:e8:3b:
79:7d:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:29 2025 by rpki-client