Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
File: 9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft (raw, json)
Hash identifier: CUVKd31qAswtKYoquT6wOKsJk9Z9w7wxDGtbOqO1zw8=
Subject key identifier: DB:BB:05:95:FF:E4:2F:BD:86:48:C7:C4:65:64:87:01:14:9E:20:3D
Authority key identifier: F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B
Certificate issuer: /CN=F4729CAF435D698D27C7387914801EFDB8478B8B
Certificate serial: 03AC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
Manifest number: 03AA
Signing time: Thu 05 Mar 2026 18:58:42 +0000
Manifest this update: Thu 05 Mar 2026 18:58:42 +0000
Manifest next update: Fri 06 Mar 2026 00:58:42 +0000
Files and hashes: 1: 9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl (hash: Pq/OXczGiJudNPOREgkYBHmYaexr2VXm/wVF1GYxag8=)
2: mzEqRGt0VvtSsWPhPBXfjucZFo8.roa (hash: tTxxdHg09ks37JVOcdjBMNEqFSmbff56kqtenIT2bzQ=)
3: xwNLPe_StZMG1iv5jjnMb3WeiqY.roa (hash: T6hWSlRGulCuF3HHzGqvyeRktxl6HgxezfKP3kslbP4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4729CAF435D698D27C7387914801EFDB8478B8B
Validity
Not Before: Mar 5 18:58:42 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=DBBB0595FFE42FBD8648C7C465648701149E203D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:71:6c:8b:14:48:16:68:7d:3a:3f:2e:7a:
ce:c4:98:ad:d2:cf:91:60:c8:01:ab:84:02:e6:04:
eb:7a:d6:2b:be:1f:6e:57:4f:c5:63:a0:47:cd:1b:
7c:95:40:bb:cf:f8:28:58:86:20:e5:05:c3:fd:59:
1e:a9:b6:61:50:64:12:10:47:ef:5e:f0:7b:32:1e:
f5:fc:4a:0f:3f:66:53:e4:fd:b8:00:93:c6:76:dc:
f6:6b:e9:bd:71:f1:3e:a4:09:58:af:40:dd:4e:54:
37:21:37:4e:59:a9:51:b6:0b:00:b8:32:16:48:24:
d0:b1:bb:23:9c:1e:9e:26:88:99:3c:2f:c8:82:9a:
3c:5d:67:36:d1:0d:dd:1f:57:60:d3:60:d3:f4:a5:
2a:37:f9:9d:49:9b:f5:2f:7e:9a:dd:c1:8f:be:4c:
b9:ab:59:42:93:0a:52:c6:c2:c4:80:e9:0a:18:84:
ae:57:53:16:db:7a:90:a4:41:e5:a6:4b:3d:81:5e:
e5:19:50:98:6b:db:49:4d:90:9a:8d:21:26:c3:d9:
51:5b:25:e2:6b:03:d9:e4:ef:81:b2:1d:06:0b:af:
ef:7a:85:58:17:2c:d0:0e:67:ee:6b:b1:7a:d1:0d:
c9:10:31:1c:e7:ea:23:8f:0a:dd:fb:ce:92:8a:63:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:05:95:FF:E4:2F:BD:86:48:C7:C4:65:64:87:01:14:9E:20:3D
X509v3 Authority Key Identifier:
keyid:F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:86:db:a6:3e:cb:91:7c:ce:06:b2:31:d4:08:0d:9e:7a:6a:
1e:83:ac:4b:83:30:61:99:9b:c6:60:87:37:99:7b:59:04:5d:
46:f1:47:85:31:a0:a6:ea:58:ca:ff:d6:8d:8a:cd:05:4e:0f:
d6:05:5d:3a:3b:9f:25:2d:b4:fc:82:0a:2c:d4:e4:e2:87:1a:
c1:6d:09:6d:63:ce:07:e3:86:d0:7a:ea:84:54:19:4c:8c:d4:
ad:eb:f3:8b:a9:ca:61:f6:6c:3b:12:19:8a:c4:35:e1:24:e4:
e5:89:c3:65:ae:d6:0d:55:c8:43:e9:9e:0a:2a:d1:6c:3f:78:
60:e4:d3:d6:c1:17:ff:8e:5d:c4:d6:69:36:ca:8a:09:ad:8e:
58:98:01:9b:6d:1d:6c:d8:69:f4:1d:66:94:89:2b:06:c2:b4:
dd:18:47:b0:c1:30:a2:3b:03:2a:37:ef:75:0a:07:24:ae:fa:
5c:f4:fa:3a:20:6a:3b:59:97:04:dc:51:1e:7d:ca:d5:bd:89:
ff:36:71:92:31:41:a1:6c:29:33:a4:33:f1:e0:10:21:33:d2:
27:3f:2f:d0:82:5b:64:ae:42:37:78:77:0a:34:ae:90:af:f8:
ff:79:9b:93:1b:7f:01:4c:63:c7:30:5d:4e:66:53:71:dd:fc:
7e:b7:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:50 2026 by rpki-client