Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
File: KiJnreDthkvp9oLDpe2qFRu6hmQ.mft (raw, json)
Hash identifier: hZunrQ1QokPUt3k7cOjRRueDW1sKHfmol8Ak1J7OExo=
Subject key identifier: 9D:B8:B3:1D:70:A0:9D:50:14:14:79:71:2B:74:C8:29:C7:59:61:89
Authority key identifier: 2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64
Certificate issuer: /CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664
Certificate serial: 09AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
Manifest number: 09AE
Signing time: Sun 20 Jul 2025 06:42:29 +0000
Manifest this update: Sun 20 Jul 2025 06:42:29 +0000
Manifest next update: Sun 20 Jul 2025 12:42:29 +0000
Files and hashes: 1: KiJnreDthkvp9oLDpe2qFRu6hmQ.crl (hash: f7pIDBjCZczC+ZFl6J61mAjh/4YSOHGciAwTOHRFKxg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664
Validity
Not Before: Jul 20 06:42:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9DB8B31D70A09D50141479712B74C829C7596189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:f4:b4:fc:14:06:23:af:c2:7f:14:0d:38:
0c:fa:8f:a1:9f:f8:90:2d:50:98:3c:36:e2:7a:9e:
07:98:0c:ec:e3:4b:b0:7c:f6:62:11:04:69:1b:2b:
39:07:4d:56:32:8f:78:5c:53:35:eb:b1:24:d1:cd:
74:3f:1c:33:ec:0e:b5:1c:f2:ea:24:02:65:29:54:
9a:20:01:8e:25:a7:90:a0:1d:dc:6c:9c:b5:71:fd:
af:cf:07:dd:0e:5d:13:d1:7b:cd:5d:f0:d5:aa:67:
82:8e:db:33:c0:b2:99:6a:93:53:e4:da:7e:2c:a5:
5b:05:94:38:51:fc:96:7c:2b:6f:c9:3a:9e:95:05:
ef:90:9d:13:de:47:31:13:cf:dc:dd:bb:02:a1:f4:
6a:93:a8:67:3b:da:05:ba:6b:e5:b7:09:54:c8:10:
04:80:59:11:39:be:fb:d9:51:cf:d5:b4:bb:1e:3a:
f4:8d:ba:02:7b:9d:a9:93:6e:8d:ed:a9:f3:dc:97:
ef:ac:17:ad:e0:17:be:22:24:b8:0a:60:e7:8c:f9:
e0:ab:58:cf:be:b3:fd:c8:b7:04:8b:df:3b:26:bf:
7e:79:78:e0:fd:f6:e0:fb:79:ee:88:52:dc:aa:23:
1c:53:f2:83:a0:a9:7b:ca:10:00:1a:5b:72:e9:09:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:B3:1D:70:A0:9D:50:14:14:79:71:2B:74:C8:29:C7:59:61:89
X509v3 Authority Key Identifier:
keyid:2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:3c:e2:49:08:be:93:26:4b:4f:65:b1:77:53:60:62:f0:
d8:96:67:8c:76:6d:9d:09:ca:3d:a9:2e:8e:88:f9:a2:25:8f:
60:81:1f:60:5d:0b:55:82:b5:34:39:2c:f8:d7:69:66:50:b3:
82:44:eb:5e:7c:de:fe:c5:17:75:0f:ee:f3:08:4d:88:11:e7:
f1:5a:68:5f:82:e0:d3:4f:0a:c9:51:d1:36:9c:63:68:81:f6:
f0:05:ab:2b:a5:1b:39:28:1a:92:e9:d4:35:11:c6:53:d2:6e:
ce:2e:4b:f6:80:35:64:d5:af:e8:96:9a:af:a4:d0:9d:a2:50:
7e:64:02:0e:68:f4:22:ae:fe:c7:26:44:3e:af:9c:70:44:6d:
94:de:1f:25:a9:d3:f0:03:6a:6c:6d:6a:06:8e:58:42:df:f6:
66:5f:f3:b5:d4:70:a4:55:09:fd:49:79:36:6b:48:b6:9b:08:
76:4c:70:d4:59:2b:e9:41:d5:35:d6:63:21:1b:a8:cd:8e:3e:
ad:32:85:ce:73:99:27:3d:e4:21:18:88:e5:f0:ba:f6:e5:ee:
c4:b2:fd:7c:ad:80:3e:c4:48:9c:25:4e:ae:c4:b9:7d:a4:04:
1e:a4:15:ea:4b:e6:fa:ec:46:8c:75:00:af:9e:e1:5e:1c:42:
3d:6e:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:43 2025 by rpki-client