Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier: d+uJMNGSRdd6ukxK53ZvWEYdMyGBsHYdh3DsjBRqMdQ=
Subject key identifier: 9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 03A8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number: 03A3
Signing time: Sun 20 Jul 2025 21:14:02 +0000
Manifest this update: Sun 20 Jul 2025 21:14:01 +0000
Manifest next update: Mon 21 Jul 2025 03:14:01 +0000
Files and hashes: 1: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (hash: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU=)
2: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: C5lcJw24cbkUJy5KmhuOtjBIZTslW2NwK5ABbPE4aoU=)
3: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (hash: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow=)
4: LW8ZY2UtSYeujZ532V0CQrYeABA.roa (hash: F4Bh2cqcnHVRx++IenMMdugPp5fWZpfnO1OTNFONqyY=)
5: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (hash: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY=)
6: si24gGFg-sQtUpvK4DZtlqNS05c.roa (hash: /h7TLGBM959FC9Cv5rtuoN4A205gm+8xj8hpkkz0h/c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Jul 20 21:14:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:9f:53:0d:be:e6:dc:0a:53:76:69:cc:ae:b1:37:dc:4a:09:
75:16:e9:6e:28:51:06:70:4b:b8:ef:ae:ed:7f:33:33:de:32:
d8:02:6f:f2:10:77:00:33:1c:3b:77:06:ff:ea:b3:59:1f:ad:
7a:f8:69:8c:13:6e:91:db:55:8e:48:63:93:4f:c3:cb:0f:a1:
d2:b7:58:4c:df:f0:81:60:f9:57:06:e7:9d:70:fb:0d:ba:3e:
69:36:22:17:74:05:3b:a8:a5:7f:b0:82:e0:0c:78:87:2e:40:
c2:84:a4:93:a0:75:b5:5d:40:48:28:74:61:ab:1f:b6:f0:c3:
ea:6d:03:84:51:f2:3c:99:fe:23:8a:e7:0f:cd:f8:7c:15:0d:
27:60:df:60:28:4e:ed:8f:ea:a8:bc:c1:de:99:7d:50:d2:94:
1a:69:b7:71:cb:3f:e3:4c:eb:09:8e:f8:78:d5:4d:e1:60:2d:
9a:39:1b:c7:47:8e:53:81:60:f0:a9:b0:44:db:c1:25:3a:88:
d5:d9:e7:66:41:87:27:58:15:5c:f4:07:b4:02:6d:73:3f:52:
92:e0:b7:b1:f2:cf:c9:e9:67:cb:38:da:67:27:2e:1c:b9:44:
45:68:95:dc:e6:ec:18:18:38:fe:62:f1:80:9e:61:f0:46:bb:
72:7f:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:42:41 2025 by rpki-client