Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json)
Hash identifier: l28zIImjpJDTapq2+bnl89DB0H44n7FM+0sg9IFznMQ=
Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5
Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B
Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B
Certificate serial: 1730
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
Manifest number: 1730
Signing time: Mon 08 Sep 2025 00:02:21 +0000
Manifest this update: Mon 08 Sep 2025 00:02:21 +0000
Manifest next update: Mon 08 Sep 2025 06:02:21 +0000
Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: RSwY/xetuHyqMH6duD2g7ulw43KQm9zYneIDNE6F0nE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5936 (0x1730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B
Validity
Not Before: Sep 8 00:02:21 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6:
23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27:
d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c:
2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d:
9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8:
d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d:
8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30:
cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74:
41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78:
87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc:
86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5:
36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29:
e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7:
68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75:
10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f:
4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a:
dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5
X509v3 Authority Key Identifier:
keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:fc:35:84:39:b6:30:19:83:bb:52:27:73:ba:8c:ea:2d:e6:
e4:55:06:9c:a0:10:e7:7b:5c:aa:9a:8e:6c:85:bb:8d:e6:ba:
30:b2:c5:9c:ac:01:a8:36:2b:d7:aa:c9:84:30:c1:36:4a:0b:
e7:ad:c7:f5:51:a6:91:88:1d:6c:2b:30:52:a3:f4:f5:fb:fe:
e3:c8:2d:95:bf:20:29:c1:66:51:c0:72:fd:6c:4a:69:33:01:
6c:8d:f9:d9:41:e8:bf:93:3c:0c:f0:a2:c7:a1:41:4f:c5:e3:
a8:5b:43:12:7c:7a:0c:f7:94:02:db:85:dd:d3:b5:b5:84:a2:
c3:23:c4:96:71:90:ce:a1:67:95:d5:f3:4c:61:a8:be:75:a7:
8d:25:75:0a:c4:92:b7:2b:c5:5f:b4:62:1e:31:d8:0b:8d:a9:
fa:88:de:d7:58:62:75:33:c3:f4:43:e6:7a:56:a8:ce:10:0a:
95:92:4f:75:d8:c2:bb:22:8a:9c:74:02:94:a1:ea:06:a7:54:
f1:b6:05:30:bb:ff:de:4a:44:00:c3:f9:89:e9:cb:99:01:6f:
6f:8f:d3:31:4c:5a:21:79:28:2c:a3:47:8b:14:a7:9c:f8:52:
37:39:d6:30:65:6b:67:d5:a3:5f:c7:3a:f3:1a:bd:fb:12:c0:
5c:64:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:05:28 2025 by rpki-client