Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
File: maW4vf7fXMZl0xiUSxszfKze1CA.mft (raw, json)
Hash identifier: g+eIge1qQWwdJdr4piKzSRJDd+jh4m7fQG00BmqQDoI=
Subject key identifier: 54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27
Authority key identifier: 99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20
Certificate issuer: /CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420
Certificate serial: 3718
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
Manifest number: 3718
Signing time: Sun 20 Jul 2025 06:44:12 +0000
Manifest this update: Sun 20 Jul 2025 06:44:12 +0000
Manifest next update: Sun 20 Jul 2025 12:44:12 +0000
Files and hashes: 1: maW4vf7fXMZl0xiUSxszfKze1CA.crl (hash: baeTCl+Vdh+/n3qT+uyWLIySuyA33LYOKmAXok6Efp4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14104 (0x3718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420
Validity
Not Before: Jul 20 06:44:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=543B0A2B5DEF06DFDD0E4008AD86D319CCA2F027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:8b:5a:c2:04:42:25:22:b5:09:56:5b:18:
c8:7d:be:9b:b6:05:ed:c7:f5:3e:04:0e:ee:02:b3:
d9:e0:40:0b:c1:50:59:35:35:bf:d8:2e:5f:f0:a6:
51:49:e6:55:b4:4f:c6:9b:80:10:27:d5:5c:52:6a:
32:8e:77:be:2a:50:c9:06:56:95:15:fd:dc:fa:93:
d8:f5:3e:27:e2:56:68:db:81:bd:62:c9:a7:d9:50:
5e:d1:5c:45:59:06:cd:f9:5a:f8:9d:11:ca:8f:58:
5f:53:75:7d:ba:be:3a:e7:b4:45:a6:04:6d:13:e3:
e6:71:be:3e:20:36:00:4a:d7:7e:53:31:3b:ff:24:
bc:9e:e9:d0:a1:5f:32:33:f7:0d:4e:e6:8c:2d:86:
bf:84:9a:41:7f:f8:1f:89:d9:c2:7c:e5:68:a0:3f:
4f:4f:24:3e:52:a0:c7:aa:77:0a:43:9a:55:76:5a:
06:d6:5c:b9:a2:17:5a:f1:bb:eb:4c:67:4b:fa:ed:
e4:35:31:82:f0:eb:86:ee:89:94:3f:3d:fe:cf:4a:
e9:bb:76:4d:8a:1c:ca:9c:1c:75:9d:05:6e:20:7f:
92:a3:61:5a:83:a4:32:b8:bc:b7:34:44:7f:2d:26:
07:39:46:fc:e9:59:ad:59:f5:dd:0f:ff:63:6c:52:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27
X509v3 Authority Key Identifier:
keyid:99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:e2:79:4a:01:ab:6d:82:0f:c4:92:01:aa:43:fb:2a:33:
08:d5:ea:06:c3:ea:88:de:d7:68:e4:4a:8a:78:0e:c0:14:a1:
29:66:59:e5:13:0f:4a:9f:34:3e:bc:be:03:d6:0d:56:4f:5f:
44:c5:54:5f:77:70:26:54:24:c4:92:c7:77:1b:f8:8e:a8:17:
57:d7:f9:d5:cc:77:d3:a9:29:45:48:14:b1:ce:a7:bf:dc:ea:
88:35:22:c9:52:fc:6e:4f:33:f4:6b:8e:46:84:4d:97:d0:ad:
0c:ea:7b:f1:32:b3:8f:72:2e:c2:12:97:f4:a5:98:e5:e5:bb:
bc:6b:fd:fe:50:f1:8d:14:49:c5:93:a9:63:3a:94:26:0a:d0:
e1:48:88:af:ad:34:a1:6e:ab:ec:92:91:78:99:b0:4f:82:f2:
a9:9d:2b:1c:28:ba:71:e1:af:d6:e0:8b:fe:33:19:54:17:4c:
1f:93:67:fa:20:04:bf:f6:65:8e:da:6a:77:4a:a8:3b:41:b1:
49:1a:fe:44:e9:c2:17:5d:10:c3:3a:01:43:2f:3c:df:0c:1f:
73:08:44:c0:e6:74:c0:57:21:0e:74:87:41:f2:9f:08:ec:e9:
47:0a:62:f3:19:61:ee:f3:c5:1b:9b:c8:93:a5:49:b0:13:7a:
f0:5e:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:51 2025 by rpki-client