Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier: TiNN6rsIn++H+NT53nBNx3564V0UQrW7WW+311RSt1U=
Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial: 0597
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number: 0597
Signing time: Tue 03 Jun 2025 17:38:32 +0000
Manifest this update: Tue 03 Jun 2025 17:38:32 +0000
Manifest next update: Tue 03 Jun 2025 23:38:32 +0000
Files and hashes: 1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: 6U9lmggGA6MklSet/4zzOlKLcC/4md4r3bJBptLo8XY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
Validity
Not Before: Jun 3 17:38:32 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
X509v3 Authority Key Identifier:
keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c8:0d:73:48:27:53:2c:ea:12:61:1e:20:c8:42:af:60:fd:
f8:1e:32:b6:cc:e5:9e:18:1a:0e:d4:33:0f:29:54:79:d5:0e:
bf:fb:51:d8:b7:7e:4a:1d:14:37:80:9b:9c:47:bb:65:31:e3:
dc:e4:78:0d:67:9d:da:c4:9a:49:61:48:a1:dd:01:9d:51:a8:
d0:56:43:91:ef:a4:a5:11:c2:57:69:65:ef:f0:0e:d6:56:a8:
3e:d5:4a:29:6d:3e:32:c6:2d:e4:d8:ae:7f:82:6e:79:28:93:
ad:6e:37:e5:db:60:70:5c:6f:3e:13:f5:b2:8d:b6:be:d4:e0:
7e:59:41:34:a6:e7:43:c1:be:e4:b1:69:e4:74:fd:7e:55:7f:
24:9e:a7:a0:c0:ac:b6:f0:d8:be:1e:9a:03:16:41:98:4b:7c:
98:a3:ed:02:ea:31:d5:98:55:0f:2a:4f:ef:ad:a9:2f:45:c1:
59:1e:8e:14:58:9a:a6:15:cd:51:d4:4d:11:e0:bb:28:6f:da:
0b:fd:eb:8a:67:16:1d:0d:9c:d7:56:69:ba:2c:00:80:ae:e3:
17:97:af:3d:14:7d:aa:e2:06:40:8e:16:d1:d2:f0:5e:9e:db:
4d:64:fa:07:24:70:c3:71:fc:5c:9f:61:16:f1:bb:47:09:46:
3e:79:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:45:29 2025 by rpki-client