Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft
File: zgJJuefVZubL61d9djs8y7Gwqy0.mft (raw, json)
Hash identifier: GXr1pGGL/984NyR/ld3KyyswDeu7BoSzqv929nm3Qfk=
Subject key identifier: D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A
Authority key identifier: CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D
Certificate issuer: /CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D
Certificate serial: 252C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft
Manifest number: 251A
Signing time: Mon 27 Oct 2025 05:05:32 +0000
Manifest this update: Mon 27 Oct 2025 05:05:32 +0000
Manifest next update: Mon 27 Oct 2025 11:05:32 +0000
Files and hashes: 1: WyTkXHEhLqcsjNd_oPHvbf674aI.roa (hash: gt/t6rEu5sUWRrRf2e3Slg7FAm0I0chcu0jtaf/OGlg=)
2: cYoSIKX5rPaGhe1jQErFxMn1KlE.roa (hash: sGiqqVrNR6d7HV7W1A6wNpAMcqkm+3f/aPa23FGvVeA=)
3: zgJJuefVZubL61d9djs8y7Gwqy0.crl (hash: /vPbobTzKvV1gZU/e9aTBMzG0i1EXk3a0vCNsGQ5Wkg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9516 (0x252c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D
Validity
Not Before: Oct 27 05:05:32 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=D735CF064F7BA7C52F1067937F4D16BAF06C5E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:3b:af:00:60:89:fe:1c:da:67:e3:72:bb:
e8:ad:94:64:0b:0e:e3:b8:81:9f:9f:09:c0:99:4c:
7e:5d:df:36:31:92:48:82:c2:8d:27:f8:66:60:b6:
1a:60:9c:9a:0a:da:a9:8c:fb:0e:a5:cf:6d:64:e4:
6c:b6:b3:c8:d0:15:a2:e6:03:55:bb:14:77:6e:d6:
2b:1a:2e:70:a9:a8:1f:c9:67:b7:de:a3:53:90:48:
88:12:bd:6f:1c:e2:38:aa:40:dd:5c:08:ab:18:8a:
75:5b:ac:1f:be:b1:dd:34:9d:b5:69:92:a8:6f:8d:
c5:8f:d6:51:ae:37:72:d2:44:27:f8:4c:6c:8f:d5:
6f:73:87:21:6a:21:4c:77:fd:5d:b0:1c:01:55:e7:
7d:b4:5d:bd:d8:1b:b2:1d:46:05:28:47:f1:82:6f:
94:4a:50:83:56:0c:f8:20:cd:78:f4:0e:fa:a2:41:
6c:76:1b:67:66:a3:32:12:a4:af:45:a4:f6:25:35:
22:cd:f3:b5:bc:ea:8a:2c:f0:64:c9:ba:c4:98:13:
90:16:04:5e:17:23:6f:3c:c1:b6:36:15:2c:09:a0:
73:fb:e3:51:e6:1f:96:63:14:26:bc:48:48:67:eb:
44:67:16:86:ea:59:f5:33:79:b6:5d:49:c9:eb:d5:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A
X509v3 Authority Key Identifier:
keyid:CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:7c:51:98:bb:ff:4f:c0:94:2c:4c:7d:de:19:bd:8e:36:f8:
30:19:ad:fe:c9:38:01:1c:d5:9b:d9:89:72:bf:34:3c:a5:25:
95:77:10:39:7b:a1:d5:00:d0:b6:97:c5:0a:bb:30:bc:7a:a0:
7e:3f:b1:07:9b:fe:f7:f4:a1:6b:99:2b:ae:8b:6a:2d:b0:fb:
8b:53:d9:de:23:4a:38:18:e0:eb:22:91:28:f1:d7:1f:9a:5e:
54:d7:3d:fd:9f:ca:be:42:b1:4c:4a:b4:82:86:d3:25:6a:e2:
ae:2b:e9:4e:ca:b0:c4:2d:33:2f:27:5f:0c:79:f8:3c:52:fb:
40:24:12:ec:a0:44:b5:ac:84:77:19:16:59:27:22:27:3f:83:
95:7d:ff:4f:af:ad:b7:48:85:25:89:7c:4d:9a:0f:2e:dd:4e:
2b:8b:d2:dc:89:87:5b:de:b9:90:8b:28:44:6e:e9:d9:b7:7f:
aa:5e:94:f8:55:75:07:69:65:4e:95:96:4b:f0:e7:dd:8b:67:
42:79:76:fc:3f:a3:5d:4b:84:a3:a2:9b:37:fd:b4:99:b9:03:
9f:1a:58:8b:1f:c9:72:b0:03:97:87:ec:99:80:22:4f:6c:8d:
af:53:fa:66:82:5d:ba:bf:2f:83:13:82:7e:4e:29:e3:cd:74:
70:b5:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:48 2025 by rpki-client