Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json)
Hash identifier: PxqS9whNmSnEDezMFW4191w8h4+NcLGikuVhnlZ+HII=
Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 52EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
Manifest number: 5233
Signing time: Thu 05 Mar 2026 18:58:31 +0000
Manifest this update: Thu 05 Mar 2026 18:58:31 +0000
Manifest next update: Fri 06 Mar 2026 00:58:31 +0000
Files and hashes: 1: 2ZNG3G15upo8DORIFiVyLWoui78.roa (hash: /g1ANhvVUUwRjtioqGKC6HhkujrV1TiAQQd00tluKNY=)
2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: ve8wUDWpfWPbdKdouPsOk6A37bRszui3J7B/gFQuxvc=)
3: DV9YoxqGdTNaNkV_dYo-cE56LG8.roa (hash: F7xF65w7NyXs1wwERCI4GYlXmPQAH0vs9sPxouOySIM=)
4: J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa (hash: JZqbb7i6bVnvHtRzZU32RSdzBfvZIDA6IYjDqF9aNjc=)
5: LRJECCnX55OdUvyz3ONAzIkv5nI.roa (hash: 3zSjtIJYi9xVkXkHnSqHSf/dmCG1ykp7G9yOBv7E9MM=)
6: Rps_aascbWKVxn-HDX6jbtslKTA.roa (hash: u5Q1UZLIxQetQhf2YB+ch/nEGtvCZ6oy7BTHV/FKJlA=)
7: fTnsAq-nYxMPC2yJwoC13w2UuLk.roa (hash: jFmHe4BkqyRGfRC3sFzmFBQojOAoAG2h4AXZKCXK/MQ=)
8: mfehLdMxOl0f-IZiSB9uOhDcYeY.roa (hash: n6lU7gobMpe3yBX3oBWMDem6twM0TGI2lZ6jEGt5qbc=)
9: nbUssdIHSjWfeIh8L_-mJVYgAZA.roa (hash: zmncN5W9l/SLW+y/pIfUzhguaT/pe9S0Xfsqg1Y0LbY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21231 (0x52ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 5 18:58:31 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84:
da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea:
da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08:
02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8:
25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7:
59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61:
a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc:
fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a:
7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1:
67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72:
5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c:
a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33:
02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da:
93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e:
17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98:
98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a:
cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:32:7e:41:4e:69:34:8f:f0:f5:0f:e6:5c:42:d0:5f:fb:
11:75:c5:79:14:86:9d:04:71:1a:51:d4:a1:88:33:db:1c:93:
99:49:c0:fc:24:66:dc:8f:24:b0:84:91:7e:a5:bd:16:53:39:
ca:ff:a0:f8:00:b5:51:80:57:a5:d0:00:d6:0b:88:01:8c:87:
a6:ab:14:d8:82:bf:6a:c6:0b:16:b9:56:a3:5f:b2:93:54:76:
a3:f8:6c:f8:4c:10:8c:c4:2f:da:96:d3:53:5e:d7:86:22:be:
68:49:8c:9f:44:4e:84:ef:70:4e:62:29:d4:e5:3c:42:48:d2:
1c:46:48:6b:0a:f8:79:f3:91:fe:b8:f7:84:ab:7e:65:d4:dc:
96:37:ef:88:ed:c2:28:22:81:ed:bb:18:39:00:88:d1:e5:3f:
2a:2c:12:55:a8:37:6e:4f:c8:24:16:ca:7c:b9:a6:ed:48:41:
6a:fc:79:e7:d6:73:48:99:17:de:ac:9b:a5:70:0f:42:18:b7:
b4:99:47:c5:e9:4d:32:a6:e3:94:1b:82:bc:78:04:55:a6:31:
1a:83:f9:49:59:72:f7:7c:6c:76:fd:9c:3e:9c:69:15:3f:b6:
54:6a:be:8a:67:e1:ef:38:25:61:c2:86:8c:b8:c4:0e:cf:4f:
82:e9:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:52 2026 by rpki-client