Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3380/_nAIdXwZsXTWXyO81oKhaYJu3Tw.mft
File: _nAIdXwZsXTWXyO81oKhaYJu3Tw.mft (raw, json)
Hash identifier: /N/kHcbA4pho4CELjHFJBFC1FrEnRHsHtVxphBxqdR4=
Subject key identifier: 26:B0:72:91:23:32:36:D1:57:F3:E6:D0:DB:EE:DE:DC:F9:3A:48:25
Authority key identifier: FE:70:08:75:7C:19:B1:74:D6:5F:23:BC:D6:82:A1:69:82:6E:DD:3C
Certificate issuer: /CN=FE7008757C19B174D65F23BCD682A169826EDD3C
Certificate serial: 46
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_nAIdXwZsXTWXyO81oKhaYJu3Tw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/_nAIdXwZsXTWXyO81oKhaYJu3Tw.mft
Manifest number: 46
Signing time: Mon 21 Jul 2025 02:09:31 +0000
Manifest this update: Mon 21 Jul 2025 02:09:31 +0000
Manifest next update: Mon 21 Jul 2025 08:09:31 +0000
Files and hashes: 1: _nAIdXwZsXTWXyO81oKhaYJu3Tw.crl (hash: bVL6B+zKZSliaATRERKmeqZvbyFF7nKYNX8rRRvjsIQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE7008757C19B174D65F23BCD682A169826EDD3C
Validity
Not Before: Jul 21 02:09:31 2025 GMT
Not After : Jul 4 06:36:56 2026 GMT
Subject: CN=26B07291233236D157F3E6D0DBEEDEDCF93A4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:1d:b0:66:31:75:6a:62:87:77:11:f0:19:
57:10:af:2a:ee:41:85:6d:55:ef:f3:15:c6:de:83:
a0:f2:2f:63:f8:b3:a2:f2:95:c8:fb:89:d2:74:5a:
77:69:c7:f3:e0:66:9f:b8:6b:21:b8:97:29:5d:f2:
bd:23:65:07:13:20:28:31:c1:04:f0:a0:ee:28:62:
6b:2c:2a:7c:18:fe:3e:59:69:ff:84:ff:32:c2:0c:
8a:37:d3:f4:9a:de:2a:fb:af:fb:77:cd:b1:85:48:
01:45:95:cf:21:71:f0:6a:d5:47:22:9b:13:c6:a6:
2d:09:f8:3b:5e:8c:9d:b1:ae:5b:a9:c4:00:36:8f:
a2:5b:3c:a7:69:4d:49:4d:c7:b6:4a:31:e1:36:54:
85:43:31:6c:a9:98:65:12:7a:da:6d:53:78:9e:a9:
4b:e2:3d:be:43:98:80:c9:1e:99:18:10:36:18:4c:
73:4d:a2:fd:bd:ab:a2:05:c4:b9:56:cf:83:91:d9:
5d:21:98:41:3c:0a:17:95:93:44:7e:19:b1:52:02:
97:62:d4:28:74:5e:0c:08:04:d2:59:c4:dd:ae:8d:
15:38:7e:6c:fa:69:01:07:80:bc:8b:75:ec:47:46:
21:19:86:02:97:0c:c8:86:83:8c:3f:33:a5:5d:31:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:72:91:23:32:36:D1:57:F3:E6:D0:DB:EE:DE:DC:F9:3A:48:25
X509v3 Authority Key Identifier:
keyid:FE:70:08:75:7C:19:B1:74:D6:5F:23:BC:D6:82:A1:69:82:6E:DD:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/_nAIdXwZsXTWXyO81oKhaYJu3Tw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_nAIdXwZsXTWXyO81oKhaYJu3Tw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/_nAIdXwZsXTWXyO81oKhaYJu3Tw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:59:85:0b:77:f0:dc:bb:8c:9e:c1:c3:0d:55:07:d2:b5:d3:
a2:9d:d0:e0:50:23:38:f8:78:6f:75:99:cc:51:af:e3:57:3a:
08:c3:d3:57:7a:1b:76:a7:b1:bb:31:fd:2a:7c:4e:d7:67:00:
33:8b:c8:f0:9f:4e:ab:80:e3:fd:21:0b:44:cd:d3:fb:3e:ee:
db:30:37:0f:61:3c:4b:49:3d:95:76:65:05:46:9f:2c:36:d7:
d1:8a:26:c8:ae:f7:eb:55:aa:73:6a:21:01:b6:eb:9b:e9:af:
dd:2c:e3:d1:46:d2:4a:51:3e:56:de:37:cb:da:57:8d:a5:df:
f9:74:37:cf:51:6b:8e:f6:83:06:3e:fc:8a:be:70:a7:be:ad:
37:ab:31:81:3f:5c:f7:83:5c:b1:fa:c3:4d:60:2d:28:c3:3a:
02:40:00:ff:8a:4d:d7:d8:d4:e0:f4:2b:c4:ae:10:82:69:03:
f5:9d:ce:10:3c:b4:04:04:a1:32:e2:3e:94:df:0a:0f:34:db:
cc:16:bd:2f:c5:63:f3:48:91:41:c2:e8:40:71:10:51:58:50:
dc:22:f2:f0:24:e8:8f:95:07:6c:ba:2d:b5:ab:b3:21:7c:09:
de:a4:a7:12:53:16:c4:05:e9:25:35:de:70:6c:ff:12:9f:38:
9e:e7:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:15:27 2025 by rpki-client