Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft
File: sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft (raw, json)
Hash identifier: UGx1s/2SGSalAFKKn6JaewRcOrPe1ihsm/Azdd8QzMc=
Subject key identifier: ED:18:D3:4B:41:CA:28:EB:8D:E0:C1:2B:4B:F8:A8:1C:AC:10:0E:59
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 1652
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft
Manifest number: 1641
Signing time: Mon 21 Jul 2025 07:11:59 +0000
Manifest this update: Mon 21 Jul 2025 07:11:59 +0000
Manifest next update: Mon 21 Jul 2025 13:11:59 +0000
Files and hashes: 1: sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl (hash: 38TK0WyjAaftM2VtjGkq0rnkPoxY6YxTEOPDlnOI5kM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5714 (0x1652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Jul 21 07:11:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ED18D34B41CA28EB8DE0C12B4BF8A81CAC100E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:1d:b3:c9:b1:4e:46:05:ae:d3:80:8a:a9:
c8:4a:d7:f8:28:ab:c5:7a:8f:b7:15:d0:22:b5:e3:
52:3d:10:ae:56:36:17:81:a5:f9:f8:76:b0:8c:d7:
50:a3:8f:10:ee:44:de:94:6c:43:2a:2d:8b:02:f1:
57:e9:62:a6:dd:69:18:69:61:92:ba:58:af:78:d3:
3d:d1:06:ee:5f:01:2a:ae:11:bd:42:c3:a3:20:8b:
68:22:69:d3:d6:85:8b:71:b4:a9:82:c5:58:8b:f3:
93:93:8d:c5:f2:59:2e:b7:55:d8:af:29:8e:81:08:
ac:eb:7b:2b:3e:b3:2f:2b:c0:de:53:2b:be:98:a0:
8d:39:df:74:25:9a:18:27:bb:93:ba:d8:20:97:4c:
5d:77:fb:23:fe:e5:52:26:d0:0c:d5:a2:90:00:f4:
98:87:ca:fe:cb:e9:e4:30:9d:0d:df:59:08:ac:f9:
9e:fc:95:50:95:a5:76:c7:b2:c4:dd:51:e3:f3:cf:
ff:03:95:54:57:ef:6a:9c:fb:dd:a6:ff:2c:02:d9:
85:09:08:a6:0b:e8:ba:ed:9a:58:5d:98:42:00:f4:
28:a1:6f:21:3b:65:2b:ba:b7:d7:da:ac:1f:c0:da:
3b:e8:98:21:81:16:1b:64:55:6a:fb:b0:4d:17:b8:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:D3:4B:41:CA:28:EB:8D:E0:C1:2B:4B:F8:A8:1C:AC:10:0E:59
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:71:4f:55:85:b7:81:21:be:64:ca:66:5c:7e:b9:a7:6c:4f:
44:b2:46:21:0a:00:23:8a:f5:51:49:0b:93:7b:2d:6a:95:91:
26:25:9a:d7:f3:92:eb:51:69:ee:2d:21:08:a4:cd:01:f8:f2:
c0:b0:69:b7:67:8f:4d:14:5a:2c:4c:58:ec:e2:4c:24:a1:91:
11:75:c4:ef:2b:ec:65:cb:5b:e3:97:26:1a:cc:9c:df:ff:ca:
f5:a3:4f:54:0a:ba:fa:58:49:cd:d6:da:53:7b:79:48:17:23:
03:85:f7:16:ea:54:df:4b:26:1b:f5:e5:6a:82:ae:32:b5:e8:
2c:63:7c:54:84:32:a4:5f:51:6f:be:4b:0e:09:43:c1:9a:84:
5f:78:ff:22:09:53:ca:4a:05:51:31:0c:cc:87:6e:21:61:ba:
d5:8e:79:ef:ff:47:85:55:55:b4:b3:08:c8:38:23:1e:1e:4a:
92:7b:38:37:ac:0e:7d:d0:9a:90:68:cd:94:33:5f:60:29:cd:
37:5f:7c:e1:97:f8:16:27:d6:e9:a7:98:05:ab:fb:a9:6d:69:
00:13:99:88:d8:02:a9:71:ba:ab:c8:d0:3b:6b:6f:7a:db:d1:
fb:82:ad:fe:71:d0:e3:22:3f:7e:7a:f8:a9:9f:a8:55:da:8c:
0a:c4:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:24:46 2025 by rpki-client