Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
File: Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft (raw, json)
Hash identifier: LBZBf1opwzwzQeOIytAHCAOojc8ujctZYEFKMXeRetg=
Subject key identifier: CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
Authority key identifier: 67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2
Certificate issuer: /CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
Certificate serial: 01C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
Manifest number: 01C8
Signing time: Tue 15 Apr 2025 23:10:54 +0000
Manifest this update: Tue 15 Apr 2025 23:10:54 +0000
Manifest next update: Wed 16 Apr 2025 05:10:54 +0000
Files and hashes: 1: Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl (hash: hRxx+aHUvCPCUsbUEt3hdTMJABS5GpOe4g7hTor58/w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
Validity
Not Before: Apr 15 23:10:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CC89F50C62CD7DA153A019DDCEF4FC2C12C0BDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:97:d7:85:73:b4:03:b3:98:d0:f3:24:a5:
cd:91:aa:28:98:f8:5a:15:d0:96:54:3a:c1:1a:17:
e1:5b:a3:79:c0:51:c9:2f:0a:43:12:ab:1b:56:fd:
64:eb:1b:ef:d7:2a:2a:95:23:65:bf:2e:5d:6c:c9:
e5:ae:2c:e9:b7:05:b5:f7:22:43:8b:ab:d9:1e:d1:
a4:d4:ed:6c:99:5d:c0:71:4e:7f:63:39:c0:65:66:
72:57:0e:10:95:80:d5:c9:fb:87:5c:c6:2c:3f:07:
95:31:f8:5d:aa:28:87:59:77:0e:f5:d7:49:0c:82:
83:6a:1c:94:a0:ea:c7:87:1e:7b:eb:e8:b9:56:90:
9a:b3:df:16:e4:e0:aa:42:6a:00:5a:d2:dc:89:43:
af:9f:0d:ba:2b:ad:ac:62:5c:57:0f:c8:15:ff:81:
b8:72:77:0e:fd:ae:d0:24:71:1f:e1:0c:87:00:f5:
a8:9f:db:f5:95:aa:6c:12:76:e5:2b:90:d9:96:c4:
f6:ba:37:a9:1c:6a:47:d2:4f:50:49:01:99:2d:3a:
74:37:97:a3:75:56:db:5c:37:9a:33:77:a7:9b:42:
a1:ef:9a:39:37:65:0d:75:73:cf:13:14:41:56:5c:
ed:dc:cb:60:92:1d:29:a7:53:cb:97:61:dc:db:18:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
X509v3 Authority Key Identifier:
keyid:67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:e1:8a:dd:70:a7:19:fc:71:27:f2:43:09:0d:44:27:af:
16:1f:f9:36:cc:b8:69:16:e2:22:43:c7:87:46:cb:b1:55:68:
73:ff:67:77:ff:1c:b6:59:6e:0b:d5:6c:62:0c:0c:1b:d5:de:
dd:ff:b7:1f:ea:dd:eb:ae:b1:5e:ad:9e:09:a3:0d:99:89:80:
83:f5:24:e5:ef:f5:8f:6f:e6:7b:c0:a3:1a:47:07:c1:7c:b4:
6e:10:48:e8:a7:1c:a0:4e:e8:ba:90:e1:f7:3b:91:23:94:94:
df:17:35:7f:44:3b:75:fe:1f:ae:a9:0a:af:26:04:0c:82:c5:
8b:0a:ea:32:99:e5:8e:b9:1e:b5:eb:77:87:a0:f7:a5:05:bd:
66:73:98:ed:ee:8a:23:56:f0:c7:d6:30:f2:2b:7d:2b:61:f5:
f6:39:80:da:64:84:07:f4:2b:0f:1e:80:f4:08:ec:e0:c7:4a:
7a:ee:8f:b7:f3:52:e5:54:96:b7:25:7c:26:43:67:f2:db:ee:
5f:43:ad:be:29:c7:ca:10:73:fc:e1:f1:b8:f3:49:8c:55:89:
96:35:ad:8f:05:d1:2f:00:7c:01:17:e4:ce:b9:78:07:36:5d:
c2:a4:07:a3:f6:b7:98:14:89:76:3e:2e:1c:5b:ac:25:86:dc:
f4:2f:b2:2a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc5
QjNCMDFBNDgwNjIwMjBCQTBBMEMxOEJDN0REMEVERTFDQkJEMjAeFw0yNTA0MTUy
MzEwNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENDODlGNTBDNjJDRDdE
QTE1M0EwMTlERENFRjRGQzJDMTJDMEJEQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr9ZfXhXO0A7OY0PMkpc2RqiiY+FoV0JZUOsEaF+Fbo3nAUckv
CkMSqxtW/WTrG+/XKiqVI2W/Ll1syeWuLOm3BbX3IkOLq9ke0aTU7WyZXcBxTn9j
OcBlZnJXDhCVgNXJ+4dcxiw/B5Ux+F2qKIdZdw7110kMgoNqHJSg6seHHnvr6LlW
kJqz3xbk4KpCagBa0tyJQ6+fDborraxiXFcPyBX/gbhydw79rtAkcR/hDIcA9aif
2/WVqmwSduUrkNmWxPa6N6kcakfST1BJAZktOnQ3l6N1VttcN5ozd6ebQqHvmjk3
ZQ11c88TFEFWXO3cy2CSHSmnU8uXYdzbGOg3AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUzIn1DGLNfaFToBndzvT8LBLAvbowHwYDVR0jBBgwFoAUZ5s7AaSAYgILoKDB
i8fdDt4cu9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx
L1o1czdBYVNBWWdJTG9LREJpOGZkRHQ0Y3U5SS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWjVzN0FhU0FZZ0lMb0tEQmk4ZmREdDRjdTlJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYxL1o1czdBYVNBWWdJTG9L
REJpOGZkRHQ0Y3U5SS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAycuGK3XCnGfxxJ/JDCQ1EJ68WH/k2zLhpFuIiQ8eHRsuxVWhz/2d3/xy2WW4L
1WxiDAwb1d7d/7cf6t3rrrFerZ4Jow2ZiYCD9STl7/WPb+Z7wKMaRwfBfLRuEEjo
pxygTui6kOH3O5EjlJTfFzV/RDt1/h+uqQqvJgQMgsWLCuoymeWOuR6163eHoPel
Bb1mc5jt7oojVvDH1jDyK30rYfX2OYDaZIQH9CsPHoD0COzgx0p67o+381LlVJa3
JXwmQ2fy2+5fQ62+KcfKEHP84fG480mMVYmWNa2PBdEvAHwBF+TOuXgHNl3CpAej
9reYFIl2Pi4cW6wlhtz0L7Iq
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:18:11 2025 by rpki-client