Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json)
Hash identifier: Bcbu0YkxJ6VLDtXqlnVEf/XgWISAi+0CikNlj27YpXM=
Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8
Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68
Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68
Certificate serial: 020B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
Manifest number: 020B
Signing time: Thu 05 Mar 2026 20:00:16 +0000
Manifest this update: Thu 05 Mar 2026 20:00:16 +0000
Manifest next update: Fri 06 Mar 2026 02:00:16 +0000
Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: 8aSeOvqjq+hvWKf04+CP+9uwbmY78eMtpYwys1JDF4c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68
Validity
Not Before: Mar 5 20:00:16 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1:
ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad:
0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18:
5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9:
c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8:
ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d:
df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31:
59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33:
0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97:
68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22:
a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd:
ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29:
8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af:
ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98:
0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88:
bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a:
70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8
X509v3 Authority Key Identifier:
keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:b9:51:a3:ff:ad:32:07:97:c6:31:ac:fe:c9:c7:cb:64:
83:c3:13:a2:c7:4b:0c:0a:25:fa:ac:75:ec:be:4d:34:bd:f2:
35:40:27:32:f2:ea:5c:70:e2:e1:76:0f:a9:20:a2:c7:db:26:
a1:be:c4:59:ca:17:25:36:be:12:01:0f:60:9e:08:c9:cf:19:
28:9f:ef:0f:0d:23:a2:09:8e:a8:45:0f:d2:ca:fc:43:b5:82:
24:77:3c:11:20:e9:a1:b6:6d:34:92:81:dd:80:75:70:f3:6a:
4e:96:d5:5f:96:d5:e7:86:c2:af:33:18:dc:a0:c7:50:9d:3e:
11:d2:e8:2f:95:39:8a:0d:d4:e4:04:ee:07:7d:b1:73:62:80:
fb:78:18:f4:f3:f5:5f:f3:66:11:8b:5a:b2:1f:d3:7d:6b:12:
01:34:0f:0f:ab:36:72:eb:4b:f9:8e:69:4c:e2:e6:86:62:2a:
0e:09:b6:88:88:6d:2d:05:be:3e:d8:9f:9d:ee:1e:80:9d:ad:
9a:48:1c:ad:60:ca:e2:6e:ea:f4:48:4a:4a:4c:2d:96:98:09:
e4:8e:91:fb:41:fc:1c:00:11:c0:78:1a:0a:99:64:61:47:f1:
67:07:6f:ba:ff:65:69:55:99:da:98:7b:a7:b8:36:bd:c6:75:
94:b5:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:28:36 2026 by rpki-client