Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
File: 2wnDhcqGTQSV-VGV_38HvFdh4XY.mft (raw, json)
Hash identifier: jaUuYiQNKziBnuemc0nKH/Zs8yvv+yeAhtrJ4wAu2Mk=
Subject key identifier: 04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
Authority key identifier: DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
Certificate issuer: /CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Certificate serial: 0466
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
Manifest number: 0466
Signing time: Sun 20 Jul 2025 06:42:35 +0000
Manifest this update: Sun 20 Jul 2025 06:42:35 +0000
Manifest next update: Sun 20 Jul 2025 12:42:35 +0000
Files and hashes: 1: 2wnDhcqGTQSV-VGV_38HvFdh4XY.crl (hash: DV1dcf4MaTzVBSSU/KuJUq0I3ZgkNsufua3QeZ0zcwE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Validity
Not Before: Jul 20 06:42:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=041AA5E81743B74248C3C196FF3D9237B7687FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:76:e4:6b:ce:10:9a:1b:62:cc:f1:71:7e:
61:36:c7:6b:20:47:da:a5:25:c4:bc:d0:40:10:60:
35:fd:34:4c:6b:c5:32:bf:8b:d8:d4:36:a3:2a:63:
51:5a:a4:3f:a8:d8:71:40:65:03:dc:8d:bc:4f:7f:
4a:aa:8c:80:55:83:73:ef:9a:4e:92:94:1d:b4:bd:
eb:37:17:2c:32:a1:35:26:32:fc:aa:00:cf:9d:d3:
49:74:19:ca:0d:92:0d:29:b5:f8:ad:88:67:db:3a:
92:17:68:83:a9:dc:51:09:5f:f6:5d:7c:b1:34:37:
f4:73:d9:01:14:88:09:e0:94:f4:59:f2:8a:01:98:
36:20:d7:59:9c:65:e5:4a:20:b6:e8:47:fb:ea:c6:
cc:13:56:a1:a0:63:d5:d4:13:e8:6e:86:04:cb:4e:
f2:0a:5d:27:82:4c:16:86:7d:b4:87:b3:aa:49:48:
df:a0:d3:20:29:9f:08:fc:64:79:84:22:16:50:d0:
63:ea:89:4d:d1:08:87:13:04:7a:17:4e:97:fc:e7:
5d:14:6d:af:83:03:16:b3:7e:23:58:a9:7e:b5:12:
ae:4b:b3:74:84:fd:7b:6a:c0:f4:49:7c:e3:d6:66:
54:b9:d7:dd:44:50:85:04:8e:78:5a:ed:2c:04:96:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
X509v3 Authority Key Identifier:
keyid:DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:37:50:e6:fa:70:2a:c6:ed:49:7a:46:aa:03:92:27:9e:e0:
b5:f2:b1:42:c3:79:48:31:76:38:e4:05:75:29:11:b1:ae:a2:
14:7e:2f:d3:b6:ce:73:8a:9a:a2:7a:2b:77:70:8b:71:e3:ae:
f5:d5:8b:8f:db:8d:a6:38:fa:16:c1:42:65:f5:4a:58:5c:ac:
31:17:7e:47:b9:18:f1:cf:e0:51:b1:5b:ea:92:7d:9d:64:05:
0c:5e:75:82:c3:ae:2e:81:ac:60:29:60:a9:9e:d0:e4:ce:fc:
75:d9:e4:b8:d4:75:76:23:63:1a:07:f5:28:0b:7e:86:1b:30:
02:27:ed:dd:29:33:52:3f:62:2a:9f:9a:c2:67:8a:91:b0:1d:
e0:fa:97:ea:f8:d3:b9:5d:90:e0:d8:f2:9e:9b:09:71:89:a6:
45:6f:89:47:ec:8e:f7:78:70:53:9e:66:5b:9b:ca:b4:81:aa:
15:d8:d9:55:3b:3e:bf:92:9b:ca:31:6d:89:0a:d5:fe:38:de:
a0:9c:35:96:e2:af:24:cd:6e:87:67:f4:7b:3c:48:35:28:2a:
ba:f3:1d:0a:aa:b5:56:ae:0e:d2:9e:da:62:9c:41:e6:ea:5a:
d9:a1:4e:5b:c5:40:7c:20:8e:51:01:70:c1:6d:d3:2c:26:17:
a5:64:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:12 2025 by rpki-client