Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
File: xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft (raw, json)
Hash identifier: 46sBDzG3YpTaQV+IcomxdUDzalMQbOFMrCqSJsAI868=
Subject key identifier: 3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
Authority key identifier: C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2
Certificate issuer: /CN=C568390771763BB631484BB1BDDFAE48596F5CE2
Certificate serial: 07ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
Manifest number: 07ED
Signing time: Mon 21 Jul 2025 02:09:47 +0000
Manifest this update: Mon 21 Jul 2025 02:09:47 +0000
Manifest next update: Mon 21 Jul 2025 08:09:47 +0000
Files and hashes: 1: xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl (hash: gw2u2itjpsOWLL0C+mb58y2ZF8mUTbrSCGaH2Q1jYT0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C568390771763BB631484BB1BDDFAE48596F5CE2
Validity
Not Before: Jul 21 02:09:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3A6B64A2575FAD472E907F751CF018E797461F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:63:38:19:15:71:2a:01:f8:db:f8:41:8c:
70:db:35:07:d3:25:7a:d2:3b:a7:99:52:c3:81:06:
31:60:61:58:c0:40:62:21:80:8c:69:4b:1b:46:16:
b5:c6:3a:86:08:84:b0:2e:74:ad:d6:9b:ce:36:8a:
bb:de:8d:da:66:33:12:9a:e7:f3:a2:d0:15:8c:02:
52:26:ea:0a:c5:f0:ba:c7:ed:82:e1:20:39:67:73:
55:77:41:65:7c:73:79:77:f7:cc:c0:5d:e9:f0:c1:
00:ae:d3:4f:58:49:31:f3:3d:29:ff:c4:a5:eb:8f:
ec:65:13:74:6a:81:6a:ce:9b:ec:32:d4:b9:b2:02:
9f:ed:5d:69:43:0a:1f:1b:eb:ee:46:72:f7:ed:38:
7a:be:39:64:5a:9c:96:b5:13:98:ac:25:a4:a0:07:
0a:66:63:80:be:a3:10:df:39:4d:c7:95:f9:d0:68:
6e:a2:05:f6:82:f3:6b:46:7f:2c:91:60:99:23:71:
66:79:62:df:7c:27:d9:c8:ef:7a:f4:dd:de:81:d9:
2e:29:a9:d7:e8:76:22:7d:af:3c:63:e8:b1:05:42:
48:bd:8f:85:5a:a6:32:4c:d7:49:66:dd:7c:4e:a1:
70:09:90:8a:00:ef:e7:e2:c1:ce:a3:7c:03:7f:90:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
X509v3 Authority Key Identifier:
keyid:C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:41:32:3f:b9:99:8e:92:a1:bf:2d:52:5b:46:a0:81:fb:05:
e4:31:07:fc:96:ce:d7:de:0b:cd:5e:37:fc:13:53:65:9c:31:
a2:c8:8a:27:02:3c:50:ff:44:1f:04:ed:f3:d7:61:47:c4:bf:
a4:af:d9:0a:a6:4b:1d:28:15:09:28:5f:2e:7e:ec:9e:07:a2:
1b:78:8a:51:ea:38:16:bb:61:fa:28:5e:d1:9e:db:7a:74:2b:
21:8a:6f:f2:27:36:56:69:2e:7b:33:a6:9c:3c:a7:89:d7:5a:
b6:59:84:de:a3:06:a4:2c:c9:dc:a1:1f:4c:e0:e7:08:a7:d2:
5c:0c:fd:8c:f2:61:0b:14:ae:9d:d8:cc:92:18:38:c0:b9:1f:
2a:ae:aa:cc:67:ea:36:19:33:8a:0a:7d:7d:ba:41:85:ae:f8:
93:a0:73:1d:cd:7d:f6:3f:2a:e1:c8:99:d0:63:3e:d5:5a:6f:
81:8d:1a:0d:6b:7b:aa:ea:3e:3b:86:d4:81:86:27:f2:bf:9d:
de:ce:80:90:5e:67:75:3d:73:13:ec:db:ef:b0:55:01:49:c5:
a7:d3:f7:98:03:a4:15:8d:57:7d:d6:3d:65:b9:f5:76:c5:fb:
ce:86:d1:26:f7:0f:81:49:40:be:63:cf:f0:08:ca:57:54:c7:
06:a5:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:14:44 2025 by rpki-client