Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft
File: q0l_YqMvEGl9yE5qo11y99Gms9Q.mft (raw, json)
Hash identifier: JZWbY9em6ZvWY7fKxnGEHN+z3neaSDDYJE3u5PndXpE=
Subject key identifier: 34:0D:E5:9C:E4:EA:EE:DF:F7:26:AE:9C:16:C3:10:C5:A0:63:B1:6C
Authority key identifier: AB:49:7F:62:A3:2F:10:69:7D:C8:4E:6A:A3:5D:72:F7:D1:A6:B3:D4
Certificate issuer: /CN=AB497F62A32F10697DC84E6AA35D72F7D1A6B3D4
Certificate serial: 9F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft
Manifest number: 9F
Signing time: Mon 20 Oct 2025 22:07:17 +0000
Manifest this update: Mon 20 Oct 2025 22:07:17 +0000
Manifest next update: Tue 21 Oct 2025 04:07:17 +0000
Files and hashes: 1: q0l_YqMvEGl9yE5qo11y99Gms9Q.crl (hash: MshH/ySuPiCdY6wkDmYZZubgvSqsb2ee92avTZW30jA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB497F62A32F10697DC84E6AA35D72F7D1A6B3D4
Validity
Not Before: Oct 20 22:07:17 2025 GMT
Not After : Sep 18 07:36:05 2026 GMT
Subject: CN=340DE59CE4EAEEDFF726AE9C16C310C5A063B16C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:42:7d:87:7c:f2:99:01:27:e4:b2:ac:97:
18:5e:33:07:92:92:56:2c:45:37:96:77:06:b8:60:
13:c2:0b:7a:29:0c:3c:a7:28:f6:72:b8:74:2f:45:
af:a1:27:f8:f7:2c:4d:f6:44:96:f1:62:52:d4:fc:
04:19:a5:2d:40:d2:1a:06:e2:11:0e:40:cb:5b:c5:
e9:0e:0d:7f:34:93:86:06:d4:34:ab:e4:c2:f2:c6:
34:43:66:0e:15:ad:75:8d:11:05:60:21:5a:85:c9:
01:a2:aa:5f:97:71:0c:7d:ed:a3:71:9d:d3:bc:df:
b7:82:7d:05:11:7b:1e:d2:13:46:ce:6c:3d:4b:7b:
67:8a:2d:a8:bc:34:09:af:7d:98:4a:66:50:a6:e1:
0f:63:f7:ff:ca:99:71:d9:0c:a2:a7:62:33:22:a9:
64:6c:38:f3:69:f1:59:f7:2e:63:32:27:7c:97:20:
59:7e:6f:a4:23:55:15:d7:42:1e:0a:5a:77:e8:fd:
a2:cf:7f:d8:a1:b5:59:44:81:60:61:94:b3:dd:04:
2e:53:bb:fc:c8:84:fa:9f:f3:59:63:5b:0d:86:2e:
79:68:09:06:f3:a1:da:d9:cf:44:7c:7d:4e:ea:a5:
8a:c0:76:5b:c1:93:fa:11:81:bd:60:8b:7f:98:70:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:E5:9C:E4:EA:EE:DF:F7:26:AE:9C:16:C3:10:C5:A0:63:B1:6C
X509v3 Authority Key Identifier:
keyid:AB:49:7F:62:A3:2F:10:69:7D:C8:4E:6A:A3:5D:72:F7:D1:A6:B3:D4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c4:a5:21:b3:e3:1e:22:24:ce:ea:44:4c:b0:12:35:1f:72:
df:29:b7:70:c1:99:3e:a8:54:2e:8b:66:d6:3a:b5:37:98:b9:
24:08:d0:84:82:18:88:65:96:5a:6d:c2:45:c3:be:bd:67:ef:
ee:dc:be:81:7f:09:05:a1:45:95:19:6f:2d:86:8b:9c:16:6c:
2d:19:20:e1:c4:65:6f:2d:22:08:9f:92:aa:eb:2e:66:43:a7:
b6:50:d8:e2:0f:4a:20:a7:74:87:ac:25:cc:3d:cd:f3:25:4e:
88:38:9b:ec:0a:14:f0:f5:1b:74:67:d5:1d:fb:9a:b4:3a:78:
e1:91:8f:b0:c0:9a:af:71:26:02:38:de:79:8e:b9:67:c7:95:
ad:f8:90:c5:68:28:6d:13:6f:5f:8f:6b:44:64:d6:90:b7:b9:
77:ca:b6:43:04:cc:4b:63:7c:a7:58:9c:66:8e:ec:a7:ac:ec:
0b:34:aa:15:38:18:35:ad:c8:2b:c1:f5:dd:8b:bd:9a:d5:af:
3d:33:14:0a:8e:61:92:aa:06:b6:42:9f:1e:8e:7b:84:2d:c1:
f3:80:e1:3a:bc:71:d7:4e:8a:15:82:65:29:cf:45:4c:7d:73:
8d:23:35:5a:1d:9b:24:60:e1:fa:53:2e:d9:79:ee:44:08:77:
b1:8b:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:41:28 2025 by rpki-client