Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft
File: xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft (raw, json)
Hash identifier: +w6UYL5qR7/z9ouUVZcOvFn6lCUioOwSNZq97/TvDxg=
Subject key identifier: E1:0D:32:06:DD:C9:FB:6D:C2:D2:DD:F9:13:FA:7A:E4:48:21:E3:0D
Authority key identifier: C5:72:F9:96:D9:79:9F:68:FB:3D:55:9D:89:5D:0A:F8:3B:53:C5:79
Certificate issuer: /CN=C572F996D9799F68FB3D559D895D0AF83B53C579
Certificate serial: 053A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xXL5ltl5n2j7PVWdiV0K-DtTxXk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft
Manifest number: 0538
Signing time: Thu 19 Feb 2026 23:58:44 +0000
Manifest this update: Thu 19 Feb 2026 23:58:44 +0000
Manifest next update: Fri 20 Feb 2026 05:58:44 +0000
Files and hashes: 1: 0Pa8B9OTzebFcDsK7TByNvRuyuM.roa (hash: CDEpvov+8+ivynyAB/Wv2dIMde2hkJ6w7DL/oLbeoUE=)
2: lmXgnMAQGCosCvMVRXtiWNNYoXw.roa (hash: VpAgRnQqVaTrf0jqRvtqvgVAq4S5PgI+4vgaIE1exZw=)
3: xXL5ltl5n2j7PVWdiV0K-DtTxXk.crl (hash: j9JvNOMgK4F0B7UwrBUZD7wsKSJlv9rbxVp8AhhZFqo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C572F996D9799F68FB3D559D895D0AF83B53C579
Validity
Not Before: Feb 19 23:58:44 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E10D3206DDC9FB6DC2D2DDF913FA7AE44821E30D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:c4:a5:42:f6:37:ef:7b:99:3c:46:b1:d2:
8a:45:4d:2c:fb:45:bc:ce:4c:06:70:b0:35:80:2c:
64:ec:f5:82:47:15:99:56:fb:90:74:a7:7c:db:e7:
ac:0d:b4:09:21:48:9a:b6:54:ba:19:d9:08:66:19:
97:db:86:57:b9:99:ad:ef:93:b2:78:92:66:78:9e:
cc:e3:cf:ef:9f:b5:c4:4f:af:26:42:c3:ce:f5:1b:
e9:ae:17:75:16:e2:73:42:20:65:3c:80:af:e1:20:
ad:de:4e:63:08:56:44:53:0c:87:fd:23:00:d1:b0:
08:47:35:69:69:f4:b1:0c:f9:c9:9b:1c:d9:d5:21:
e6:e3:dd:7f:83:6b:1f:07:55:c2:70:79:2e:34:36:
a4:6b:7e:26:f2:85:dc:9e:37:e6:4e:c1:b7:14:90:
d8:5a:18:fa:63:7e:38:50:6d:bb:23:dc:ed:d7:89:
3d:b2:2a:44:8a:da:10:d7:d9:ba:bd:d3:d6:93:a2:
74:96:84:77:d0:ce:4c:d0:eb:b4:a7:f1:93:92:f0:
5a:13:1c:9d:b7:4c:b7:41:45:5d:f7:4c:64:1c:c1:
8a:3c:e7:02:eb:ab:9a:f1:7c:af:8b:69:6a:ac:76:
f5:d2:5a:3c:c7:47:5c:f4:b1:88:b9:7b:15:1b:94:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:32:06:DD:C9:FB:6D:C2:D2:DD:F9:13:FA:7A:E4:48:21:E3:0D
X509v3 Authority Key Identifier:
keyid:C5:72:F9:96:D9:79:9F:68:FB:3D:55:9D:89:5D:0A:F8:3B:53:C5:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xXL5ltl5n2j7PVWdiV0K-DtTxXk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/501/xXL5ltl5n2j7PVWdiV0K-DtTxXk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b2:2a:a5:05:aa:e8:87:c9:25:f0:a5:e0:de:70:9e:ed:e4:
6e:4e:d7:d9:6e:9b:22:3e:70:5e:0d:87:4b:df:1b:37:0c:c4:
e3:6d:f6:75:6a:f8:fa:75:30:f4:98:3b:e2:ac:90:c1:f8:37:
a8:d9:19:06:f7:12:b0:42:36:1b:a5:b6:1e:4a:23:6f:ba:de:
09:29:25:df:0d:af:90:d1:c0:36:49:15:70:7b:c4:e7:36:b2:
c9:42:1a:3b:fb:53:56:ca:df:43:0c:99:6f:a0:56:f6:bf:c2:
d9:b6:04:fe:a7:00:9b:66:31:dc:24:7d:3a:fd:49:31:52:ab:
ce:3a:21:27:0e:44:7e:2f:b5:fe:36:d0:a6:a6:80:46:ac:a5:
33:2c:f9:5e:f7:c7:9d:23:2d:dc:76:f0:76:28:db:dc:d8:b2:
9c:d6:4f:16:4a:e0:ef:34:c1:48:43:89:c3:bd:99:6b:d1:6c:
1e:ae:2f:19:cb:a1:76:fe:57:80:1f:31:59:a5:6e:69:71:67:
cc:84:b8:3c:21:27:3b:fe:55:aa:e6:f5:a6:a7:cf:fd:df:77:
37:78:02:7c:d6:9a:ab:e1:66:6e:86:71:87:e0:39:3e:b4:7b:
95:d9:96:f6:57:be:74:21:b5:f3:2d:c7:32:a9:4b:ca:12:42:
cd:89:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:59:20 2026 by rpki-client