Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier: hZXDmT6WquHBWcZGYpMNbz9VeC31zGfWyY79VvhiGTk=
Subject key identifier: 9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 080E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number: 0804
Signing time: Thu 05 Mar 2026 18:59:51 +0000
Manifest this update: Thu 05 Mar 2026 18:59:51 +0000
Manifest next update: Fri 06 Mar 2026 00:59:51 +0000
Files and hashes: 1: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: uKIXK4k/+sumzZ4tgnq+st2/wTWqhy+sIpOaFOYayfE=)
2: SC6m8P0q6p7ntOCpRRKCLD07IV4.roa (hash: F3LkbRuTsF/ZxSWkX81y3jRWbGla7q1/rRTJ2pXLLBQ=)
3: Udu4Y2VVSfSvAsDnVgr4ywyw784.roa (hash: b+votEcUwTvuXUiyb8agRXfAYHbNT531+XZyEUMsCjo=)
4: esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa (hash: uyPmbNzEpeAABBZYgbGkveGl7ynOz33DLToGYNoP7hg=)
5: fotDNxN_sQREMyU_nWg8lpAAvIY.roa (hash: jD3/6TF1DTlEAMRgojNykbybNyv7ZOor/AQZnLJhVXY=)
6: nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa (hash: 8DlphKnOC+OQmVIxd6QvTWzWu9l+65jBnGINNbqNneA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Mar 5 18:59:51 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f1:81:40:c9:c3:dd:7a:6a:13:80:f6:53:30:3f:0d:6b:5e:
29:59:a5:5a:62:2a:43:f2:b4:85:78:28:19:2b:33:10:93:80:
84:61:3a:e9:03:7a:ab:a5:b9:43:b4:a2:58:f3:12:b2:0d:e3:
df:87:70:c3:29:44:e9:46:48:16:15:6a:15:74:41:5d:0a:b3:
a8:35:22:41:b0:d4:01:3b:8e:fa:d2:65:7c:96:61:14:62:46:
2d:bc:e7:49:4d:d2:e1:7f:b6:69:dc:99:6e:ce:6b:a0:7b:14:
00:72:23:02:fe:63:65:4d:07:79:ee:a9:87:8d:0d:65:9e:4b:
e8:ef:8c:d4:24:2c:ce:3f:1e:43:9e:00:9e:5f:ee:9e:af:4d:
5a:26:c7:59:aa:0c:ac:18:64:3f:8d:90:bd:d1:59:bc:5c:65:
8c:e5:5b:f2:5f:81:39:02:68:34:d6:1d:85:0e:01:c3:d8:60:
80:fa:4b:d1:58:ae:35:1a:2b:9e:c3:f9:2b:7e:a6:1d:3e:79:
b5:2c:8b:88:92:74:cd:48:6b:da:80:7e:7d:8a:35:81:5b:c3:
20:e1:5b:8d:57:e1:5a:49:d4:2f:c3:a3:e7:ca:28:0a:db:2b:
d5:44:77:88:a6:86:7b:d1:b4:da:53:8b:87:10:f0:a9:44:25:
c8:46:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:35 2026 by rpki-client