Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json)
Hash identifier: GQ+TrcNj5Q+af90ztDr2AjFtTPTMnKntYkqMtZxZMws=
Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Certificate serial: 0410
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
Manifest number: 040E
Signing time: Thu 05 Mar 2026 19:00:35 +0000
Manifest this update: Thu 05 Mar 2026 19:00:35 +0000
Manifest next update: Fri 06 Mar 2026 01:00:35 +0000
Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=)
2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=)
3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: P5G8Nhd41wap9svpJ3lmXQHAeQK8y8kWd5HShpSnQ6U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Validity
Not Before: Mar 5 19:00:35 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f:
f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a:
b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d:
ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d:
40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8:
b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c:
d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32:
da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed:
5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5:
b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53:
b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af:
43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac:
5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5:
61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73:
22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6:
bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99:
4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
X509v3 Authority Key Identifier:
keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:15:8b:84:c9:d9:18:40:0b:0e:0d:c3:de:9f:e2:a1:cf:1b:
43:bc:ec:83:c5:c9:10:8b:8a:97:19:16:5d:e6:99:b4:bc:a7:
70:2d:cf:d5:f4:9d:8c:6c:99:8d:2f:8e:03:d8:e7:94:99:bf:
7e:f6:0a:ce:1c:12:99:08:32:83:1c:8e:18:46:63:fc:58:fd:
95:42:e8:a1:4d:99:8b:af:d2:4c:cc:1a:c1:7e:ee:2e:d8:50:
14:f6:9e:14:e5:03:22:bc:de:c4:43:f6:a4:b3:f0:42:06:b3:
94:1a:5c:85:05:e7:6c:f0:d8:c7:c1:ad:9c:0a:e8:c0:b5:d3:
ef:2a:89:b6:d4:e9:fd:8a:f0:d1:d5:3e:ff:30:5a:43:37:81:
ec:11:0e:de:f4:0b:10:7b:78:62:b6:c3:31:51:c8:94:70:61:
d8:2f:b2:46:36:f7:c3:08:29:7e:4b:76:f3:5a:71:44:93:90:
0a:cc:ba:15:b0:f1:00:9e:0e:d3:ff:20:9c:cc:55:06:1b:c1:
ec:3d:4e:e9:7e:45:5a:3d:98:da:32:0c:4c:ed:93:b5:f0:3d:
7d:d1:a1:3a:75:0b:01:e6:a9:4b:b1:b0:a7:3f:b7:b6:21:cb:
0e:94:86:e4:f8:89:5a:d8:52:6d:f0:dc:24:71:df:41:75:99:
ca:8d:d4:a8
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTFB
MEFCQzVDQTZGNTA4RjE5Rjc5MDdFOTRDMzE2MjE1MjI5NjkzNDAeFw0yNjAzMDUx
OTAwMzVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzREZBRDVERDEzODQ3
NDJGNDBBRkI4NTU3RDI2Rjk0NDQxQjIxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCty7pGqyYsbgVf5gjKX/EKaplL21KhWHm3+CVaKrKE+O9emm0S
84+YnQjsbeyukuHGM/ruwAVdK9MxbUD5IW3iaiXbeGeiSrf62LE6SBUD29VoHxIX
ARoEDNguzPwL7TtEihE18FlhMtrseFlCOQWjptwzj4/K7V14VHAsqF7Z7+IlX7GW
xbZC+24qQ4EIjpeXi7uvU7XGUuIfj6Ql28cdYboZr0MnoGSDnhaTq+/ifXWHrF6t
sWz9pdwIkc8J3RbXtWHpSznakIi049nxRCE0cyLatvCvZz4OhEkYeGEb1rx8ke9P
EQaYgLQHM0BemU+QEFjV8VcoAXbimmdVupSdAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUI9+tXdE4R0L0CvuFV9JvlEQbIX0wHwYDVR0jBBgwFoAUoaCrxcpvUI8Z95B+
lMMWIVIpaTQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4
Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODcvb2FDcnhjcHZVSTha
OTVCLWxNTVdJVklwYVRRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALIVi4TJ2RhACw4Nw96f4qHPG0O87IPFyRCLipcZFl3mmbS8p3Atz9X0nYxs
mY0vjgPY55SZv372Cs4cEpkIMoMcjhhGY/xY/ZVC6KFNmYuv0kzMGsF+7i7YUBT2
nhTlAyK83sRD9qSz8EIGs5QaXIUF52zw2MfBrZwK6MC10+8qibbU6f2K8NHVPv8w
WkM3gewRDt70CxB7eGK2wzFRyJRwYdgvskY298MIKX5LdvNacUSTkArMuhWw8QCe
DtP/IJzMVQYbwew9Tul+RVo9mNoyDEztk7XwPX3RoTp1CwHmqUuxsKc/t7Yhyw6U
huT4iVrYUm3w3CRx30F1mcqN1Kg=
-----END CERTIFICATE-----
Generated at Fri Mar 6 01:09:17 2026 by rpki-client