Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
File: LsLMuD3fv0MzIma3amIhNiFD42U.mft (raw, json)
Hash identifier: ApVd/SFvjxmB9fXeCJTp63TAkWxdXdEotydfwQbk0Fs=
Subject key identifier: E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4
Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
Certificate issuer: /CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Certificate serial: 090E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
Manifest number: 0902
Signing time: Thu 05 Mar 2026 18:59:39 +0000
Manifest this update: Thu 05 Mar 2026 18:59:39 +0000
Manifest next update: Fri 06 Mar 2026 00:59:39 +0000
Files and hashes: 1: -v7sDlKvmzSFSuvY0PNnwWc1MGo.roa (hash: FvfuZxU9A3uZaHNDtxNXRmBYqh5UXFkkfXfNBkjTmag=)
2: 9yVAX-Q4njb8sfExeTz4wqv6e2A.roa (hash: NddH2JQ4KcG/8NxwyE1SyffUbN29gWHicCPTJzMRIUQ=)
3: LsLMuD3fv0MzIma3amIhNiFD42U.crl (hash: NoI6MbK2i29/EJCKv9W/ZC5HeTRkUg9Lg3mKzs5z0C4=)
4: Ys2nhSycv6NRYM6jWyuoIMv_vis.roa (hash: W5cyuGnXu8eMKmG3Umq71Yhc6fLj1DCdrbEAqM/j5Bk=)
5: wqWy3sVeEYGZiHuIHPFAQM5mUvk.roa (hash: mCKXxw0Jg9sTosPUUWdJmsvhNR0x38zJJC5GvDobSiw=)
6: yNqVshGXli1u3opJ5fDOPZQ225g.roa (hash: oadm03aEFC5zsx2yDKoF5Znsnmhqk50He7/z+0c/ruU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Validity
Not Before: Mar 5 18:59:39 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E9A80F3E347B6C8F32A522D96907BE401B9CAFC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:02:91:d5:4d:1e:bc:05:75:c8:ac:25:b1:
c5:00:9f:86:fe:b1:45:b4:76:27:71:80:99:70:d9:
bf:37:ab:a6:ca:c8:04:a0:87:65:c7:a9:c0:b3:d8:
2a:3b:ce:0d:0f:9a:af:7f:0c:23:65:13:4f:a3:c7:
a7:06:c2:a6:5b:7a:45:d4:23:9f:3a:19:1b:4e:d3:
0e:b6:57:59:3b:9e:9b:0c:6d:52:a1:4b:8a:b6:88:
4c:05:bb:7d:e8:cc:6b:60:ca:74:a9:84:93:40:27:
32:1b:8d:d8:98:51:e6:e4:42:52:17:39:83:2f:22:
80:06:d3:66:43:b6:31:82:8d:be:d6:05:7c:e2:b9:
86:b8:70:09:fa:d8:e4:8a:dc:20:2a:e4:8e:e8:ef:
d5:4d:fe:d0:be:98:1a:98:ac:90:92:e9:ba:8c:f5:
c0:23:78:e4:10:d4:c7:37:41:b0:1a:25:c5:1f:a7:
5e:8a:04:0f:4d:c9:97:58:17:36:a7:8e:53:10:a3:
56:4d:3d:23:e4:57:e2:39:2d:6b:48:bf:8c:49:69:
65:ea:e5:6b:03:47:4a:2b:5b:28:83:7a:2f:a8:76:
ff:98:ea:6e:fe:cb:33:ac:2c:31:65:10:a3:1f:07:
f6:47:0f:17:2e:45:10:62:55:0b:54:a7:63:0c:70:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4
X509v3 Authority Key Identifier:
keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:63:1d:4c:23:eb:11:fd:f8:9a:8a:4a:5a:74:2c:d5:f2:
cc:8e:f2:11:d7:ad:77:41:bf:a7:1e:dd:1d:22:1a:a0:e8:cd:
5e:b0:01:d5:22:8c:88:bf:23:c9:c0:25:47:07:7b:aa:ba:65:
67:55:c1:d4:aa:a7:f8:2d:43:c7:34:1f:a3:e8:06:cb:95:5c:
ac:5b:f6:55:16:d5:0d:ca:a0:11:41:64:2f:a5:7d:31:f2:18:
a1:ac:3f:e7:2a:9a:7d:97:86:71:a6:c4:3e:1f:aa:50:87:61:
27:c7:0f:a7:ba:cf:5b:7e:19:bf:fb:17:00:33:36:1d:64:ad:
e3:a8:db:55:55:35:69:ff:53:6e:23:1c:4d:16:fe:79:ad:f5:
17:23:17:ba:7b:e6:fe:27:ea:80:d6:3f:40:b3:82:b1:7c:86:
16:8b:df:28:e1:86:16:5b:60:6e:ff:41:da:52:60:d8:3f:76:
49:51:72:6e:6a:71:ae:ef:ab:61:a9:48:33:88:f8:f7:70:71:
46:9f:99:be:25:d9:ed:08:52:18:27:c0:12:67:18:99:99:7e:
24:c1:eb:e4:af:4d:89:7f:f4:4e:f3:b0:a3:ff:a2:25:0d:f7:
dd:29:c3:c4:51:55:cc:96:62:fa:5c:71:87:dd:0d:fc:95:a0:
dc:0a:5b:5d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkVD
MkNDQjgzRERGQkY0MzMzMjI2NkI3NkE2MjIxMzYyMTQzRTM2NTAeFw0yNjAzMDUx
ODU5MzlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEU5QTgwRjNFMzQ3QjZD
OEYzMkE1MjJEOTY5MDdCRTQwMUI5Q0FGQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqNQKR1U0evAV1yKwlscUAn4b+sUW0didxgJlw2b83q6bKyASg
h2XHqcCz2Co7zg0Pmq9/DCNlE0+jx6cGwqZbekXUI586GRtO0w62V1k7npsMbVKh
S4q2iEwFu33ozGtgynSphJNAJzIbjdiYUebkQlIXOYMvIoAG02ZDtjGCjb7WBXzi
uYa4cAn62OSK3CAq5I7o79VN/tC+mBqYrJCS6bqM9cAjeOQQ1Mc3QbAaJcUfp16K
BA9NyZdYFzanjlMQo1ZNPSPkV+I5LWtIv4xJaWXq5WsDR0orWyiDei+odv+Y6m7+
yzOsLDFlEKMfB/ZHDxcuRRBiVQtUp2MMcIX/AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU6agPPjR7bI8ypSLZaQe+QBucr8QwHwYDVR0jBBgwFoAULsLMuD3fv0MzIma3
amIhNiFD42UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
MS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xzTE11RDNmdjBNekltYTNhbUloTmlGRDQyVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvTHNMTXVEM2Z2ME16
SW1hM2FtSWhOaUZENDJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJdPYx1MI+sR/fiaikpadCzV8syO8hHXrXdBv6ce3R0iGqDozV6wAdUijIi/
I8nAJUcHe6q6ZWdVwdSqp/gtQ8c0H6PoBsuVXKxb9lUW1Q3KoBFBZC+lfTHyGKGs
P+cqmn2XhnGmxD4fqlCHYSfHD6e6z1t+Gb/7FwAzNh1kreOo21VVNWn/U24jHE0W
/nmt9RcjF7p75v4n6oDWP0CzgrF8hhaL3yjhhhZbYG7/QdpSYNg/dklRcm5qca7v
q2GpSDOI+PdwcUafmb4l2e0IUhgnwBJnGJmZfiTB6+SvTYl/9E7zsKP/oiUN990p
w8RRVcyWYvpccYfdDfyVoNwKW10=
-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:35 2026 by rpki-client