Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
File: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft (raw, json)
Hash identifier: PdOSG9tRZgBVFWKHT/BpjXLeFIAHkjSp3j3kgBXn4PU=
Subject key identifier: EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
Authority key identifier: EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
Certificate issuer: /CN=EE593FAC53D34320576D880F645706CFB797C231
Certificate serial: 163B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
Manifest number: 163B
Signing time: Sun 20 Jul 2025 06:44:05 +0000
Manifest this update: Sun 20 Jul 2025 06:44:05 +0000
Manifest next update: Sun 20 Jul 2025 12:44:05 +0000
Files and hashes: 1: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl (hash: HgtsggSM/7QX9MGMtFCarb0AqgBz7ic2cuwBc45s7SQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5691 (0x163b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE593FAC53D34320576D880F645706CFB797C231
Validity
Not Before: Jul 20 06:44:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EF377035CD4828EB97F29B5135BD5E32058FA8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:bf:77:ad:54:e0:34:e4:4e:36:af:14:ce:
08:ce:e3:b2:8a:ad:69:d2:f0:a8:3c:ae:ce:04:40:
03:34:23:74:f8:0f:af:be:01:1f:81:09:34:89:c3:
41:92:4d:4f:da:c8:d6:11:e3:9d:8a:f8:0e:df:d4:
7a:7e:25:4e:1e:72:d4:dc:e2:09:f6:87:8b:d6:58:
5a:7e:ff:5a:ff:f0:87:0b:bc:6d:ae:16:13:f0:47:
8b:63:2d:1f:22:96:01:d9:2f:d4:85:9b:4a:a7:83:
82:4c:36:99:00:2a:e3:7f:fa:f1:c9:25:8a:70:36:
4e:a1:35:1c:c4:69:fe:f5:98:19:9d:f1:59:d2:a4:
ff:59:fa:08:2a:b7:1b:18:6e:90:1d:5c:d7:5e:ab:
ea:59:9b:1e:49:47:f8:76:b2:1a:86:63:0d:b7:7c:
3e:05:bd:ef:f8:fd:f3:12:c9:5a:7c:ed:a7:2e:a4:
d5:2c:fd:09:41:57:3b:70:53:f7:07:63:a7:f8:26:
59:0f:25:dc:79:3f:1d:32:b7:8a:a0:eb:ca:1c:e9:
8a:62:6b:de:9a:71:cb:36:33:7e:4f:a7:f8:c8:c7:
3a:f9:12:11:cd:9d:d6:59:65:33:c4:31:f7:f3:b0:
50:4c:8e:b0:cd:1a:d2:c1:cd:0b:fe:53:08:3a:ea:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
X509v3 Authority Key Identifier:
keyid:EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:b7:58:f7:e5:e5:65:e2:78:d7:15:9e:39:aa:2a:c2:ad:
54:8d:50:ad:57:3b:c7:40:bd:d9:a1:a3:df:b3:2c:89:02:52:
b6:ea:0d:b3:60:4a:9c:01:fe:b5:40:bb:29:c6:06:41:db:74:
48:65:9a:39:06:d3:3d:45:91:b6:3c:af:d3:60:ae:66:34:93:
e7:1b:c3:e2:e1:a8:9e:f4:ba:89:ef:d9:67:2b:2c:3c:9c:72:
6c:20:91:1e:2d:83:1c:4d:cd:fe:65:e7:12:52:d1:44:29:ad:
f1:3a:5b:b4:b0:03:3c:27:b8:ae:4a:f9:94:cf:a7:68:8d:a6:
ca:de:0b:d1:9d:e3:1f:bd:6c:a5:6e:28:0d:bb:84:1f:64:e5:
55:4c:ab:bd:60:8f:b1:c5:53:53:0a:a9:91:14:44:1b:90:77:
05:d4:7e:65:28:ec:ce:0e:27:32:bf:a3:8f:5b:d5:0d:03:dd:
36:38:48:7c:02:89:2e:3b:1a:41:05:67:33:34:58:2d:0b:52:
85:66:6c:08:71:83:36:df:de:a1:75:1c:ee:9e:bb:be:b1:59:
43:c6:bd:01:2a:e0:27:57:5c:06:89:38:c9:67:61:d5:f0:49:
e0:81:f0:de:9d:e6:5c:b7:cd:af:5b:ac:a9:fe:70:06:76:0e:
d6:be:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:33 2025 by rpki-client