Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json)
Hash identifier: VAUIomTa1QKITIvybFBSctE9lnwd7WUPIZIYTVSaEGY=
Subject key identifier: 0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 1F70
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
Manifest number: 1F4F
Signing time: Sun 20 Jul 2025 06:40:23 +0000
Manifest this update: Sun 20 Jul 2025 06:40:23 +0000
Manifest next update: Sun 20 Jul 2025 12:40:23 +0000
Files and hashes: 1: 4DB6b8uYtZlt1s-s0_Kj8Gd-4Qk.roa (hash: SQKRUUQXTT1pPzXIPeZ5Tyb7WMo6EbNpgE1vC8RTOo8=)
2: 7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa (hash: //aLn6ijjd0RsSlEJvFmoXmtL59RIBJT5b37RKtCGhs=)
3: 8B3ee2zwLOh8s1iFIKMVsnmZuec.roa (hash: iJOgEVfcK047KEt3I/W4CB27slTmoT+pHxQgHjtHKwM=)
4: 8s_bHXEkGfDphZK40c_QLrHy7Is.roa (hash: AMCxQuJ5tzynj2ZxB3wziDhXYAJbbKRS+q8CIWOh1kg=)
5: 9Bj9UB3C5NwxT6KrRVdQ2YQUous.roa (hash: INv9naWBG6l1s217kvxz8c7uBcSFLeG45Nf22a5KzMs=)
6: EC0cSkLvF1XrlKJ5N0KYO0_vabQ.roa (hash: Xawvh5t2K2TS486my8Cy2k18s+hwdhLtgjfxPlzT6ns=)
7: IFIcvn9UMKRt83vukpON6Sbhixc.roa (hash: ee53oRxFxX0OVmISpeWc6zEnCZNfNuioeAQEgPEAWCM=)
8: IQ3MBoVNoiKyjgv81qd4k1Fq_ZA.roa (hash: Q4Zo416Ok8oARcqbnlhpOSGq67Max3Ojni1CpzqUPcM=)
9: IkZF2VORQzlbUojsrTphCdszKqc.roa (hash: 0kC36+mVolBQQCuRyquKEScwAsSkdyyZX4x06kOmSiI=)
10: NHT4Ire_F8NAl-Tb7bg1fVCCio4.roa (hash: AOaMGPdwVSY1SaEMTRPF4k/DYj0UzZkZvvG3vvPDmyk=)
11: VS17zQHJixrbUv4jioh85SjDNY4.roa (hash: mrVMrRtK8XPKGGEbzwkp5O1/ilSYDWqZNOunXjUgl4Q=)
12: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: i1Vl6w4NqAwZ2pcr3KwwzpVYB8B3kGAd7/nWLynYcm8=)
13: YAKlFb8WHzILwfEf2d-vY0XO2tc.roa (hash: ucFbqWELYtFSKLzhoZxsZihUE3mTffRhAPcL5Ho7sU0=)
14: YHoC-Ib7VAPfOYMbo8u5Of10E5c.roa (hash: 2QPtUsTGSjLGKyk0f7KmLP5/Lp4ZoaIrEQvVm6IKzOI=)
15: e2sv8-TY5f8TwpeWdzOHudhiy7U.roa (hash: Kg2UK+S6W3aXr3C3ZkJLPWOvHhxx8HCuDZ6HqqV4DCU=)
16: h6IigAHQTvufsTVGRtf3LVHt5rc.roa (hash: mnjF2uSX2BUy0FUGkbab260johYF3bE+fxzCc9zlpeY=)
17: p5exbNsYSmDiln-g7yIyKvynhwU.roa (hash: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs=)
18: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (hash: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8048 (0x1f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Jul 20 06:40:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69:
25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d:
9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30:
a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7:
e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b:
f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40:
8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2:
c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98:
98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7:
64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd:
f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45:
aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36:
86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75:
5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24:
0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84:
6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4:
56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:cb:11:ab:db:8f:b2:5c:a2:47:56:b9:9b:1f:5e:2e:e5:
34:61:26:67:f3:38:92:6c:8e:4e:2f:ce:2e:31:51:59:0e:cb:
6d:3f:89:5c:ed:c7:7f:e9:1d:ea:0c:e4:18:66:c4:25:77:e2:
f8:5e:f4:cd:6c:e4:03:70:28:55:fc:eb:05:a9:49:7f:06:be:
34:cc:5e:cf:94:24:61:e7:a6:a6:94:3f:c2:e8:8c:4a:01:ef:
20:7f:75:e8:ab:de:27:8d:ba:b5:d6:7c:07:ec:a3:86:49:6e:
c7:a8:72:44:66:c4:61:17:62:28:80:c2:ea:31:24:4a:9c:42:
09:53:81:d8:30:22:a3:59:31:7e:04:98:f5:ee:22:85:8e:98:
37:07:18:a8:36:c0:2d:ea:59:8b:03:1c:35:14:5a:fd:60:b2:
91:06:9c:62:bb:46:f6:38:ec:c2:3e:e4:a0:8a:af:d0:20:ed:
d1:ab:09:74:cd:c7:1d:d0:62:95:62:ef:0e:cc:d1:80:a5:88:
d8:98:4d:6c:d6:02:eb:8a:84:cb:db:d6:e3:cc:a8:c3:76:59:
ea:85:60:f2:36:d1:84:f7:9e:ca:f2:f8:68:9e:c6:c7:f6:3e:
91:61:cf:a8:07:bb:7d:75:1d:06:3a:22:cf:a1:f7:08:f4:56:
4d:54:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:09 2025 by rpki-client