Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
File: h_17fpSNGju7kJe0WdcTt0M8C2U.mft (raw, json)
Hash identifier: 2D3MFCEhRkC525SkH2mFHazl/WVt+eWWUMJ54SPrZ4I=
Subject key identifier: C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9
Authority key identifier: 87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65
Certificate issuer: /CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65
Certificate serial: 2BBD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
Manifest number: 2BBD
Signing time: Tue 03 Jun 2025 18:08:53 +0000
Manifest this update: Tue 03 Jun 2025 18:08:53 +0000
Manifest next update: Wed 04 Jun 2025 00:08:53 +0000
Files and hashes: 1: h_17fpSNGju7kJe0WdcTt0M8C2U.crl (hash: BlYugPp0FGLt06w5H96s5z9VG5etZq+Zxt4JKCqWgB8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11197 (0x2bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65
Validity
Not Before: Jun 3 18:08:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C3345DED0C47F98D2F7E31DDD0475585DA8793B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:3d:86:a9:25:8c:84:d2:47:0d:30:23:25:
bd:d1:70:38:60:c2:2c:2d:ac:14:bd:46:c4:40:26:
1d:a0:7f:40:53:55:29:99:99:09:51:8c:c4:9a:51:
6b:37:41:de:48:3a:cc:21:9d:6e:97:b8:af:bd:37:
a1:93:e7:c0:a5:22:f4:ee:bf:fa:1d:92:ef:3a:07:
ad:ad:91:9b:ef:8e:a1:7b:44:44:a9:b4:ac:59:5c:
ef:74:0f:12:63:cc:fc:6a:7b:e2:a7:62:71:b5:e6:
bb:51:aa:f9:83:25:6c:1e:d5:3e:b2:92:62:63:86:
02:22:de:8b:50:2b:3a:13:45:86:bf:7e:83:ba:21:
44:e5:d1:a7:e0:68:db:cd:fd:6b:88:e7:8a:a9:8c:
84:4e:b9:d1:f2:74:d6:e5:16:ea:14:87:60:31:ea:
dc:60:55:16:3e:2b:f0:ea:3e:34:b5:57:8b:e7:9d:
eb:15:6f:6f:e2:14:c5:8f:d8:f1:a0:1f:2d:30:e5:
fc:7a:cf:ec:74:87:d1:a1:d8:42:45:d8:0f:c4:c7:
a1:32:a7:37:37:aa:7d:75:78:f7:b3:48:8b:3a:05:
69:5d:ef:d8:1d:80:b5:bf:0b:8c:7c:c3:65:b7:a3:
6e:a0:63:a1:e3:d0:94:26:ad:18:02:3e:63:5d:b9:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9
X509v3 Authority Key Identifier:
keyid:87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1c:52:1d:2e:88:83:14:67:ae:30:87:8e:98:b7:6b:76:f4:
58:0c:59:a6:87:ee:13:1c:0a:78:19:e7:0e:33:46:11:9f:09:
c3:cf:d8:8d:0b:a5:c7:fa:a7:2c:47:23:99:34:cb:ce:26:6a:
85:88:2f:a8:2c:3c:4a:48:a5:ad:17:15:66:bf:48:66:0e:c8:
32:94:66:7e:00:fd:71:5f:e0:a1:00:74:b8:18:0b:69:6d:ef:
e6:53:c0:7a:42:c8:fe:23:b9:d6:fd:f0:5d:0b:af:dc:0c:66:
2b:24:a0:fc:53:27:43:20:ac:cb:f1:77:7c:92:21:6b:1b:30:
ed:af:71:67:9c:76:24:25:a0:fa:09:21:11:da:41:4b:00:13:
3f:ea:8d:aa:95:43:c7:ce:9d:70:39:e5:86:9b:ed:98:3b:44:
f0:e7:97:c4:17:4b:9d:85:e7:6b:bc:3c:5a:ee:d1:c9:a6:7e:
9e:f1:e5:39:98:fb:f2:d7:a8:0f:f5:39:0c:1a:05:d0:f3:ab:
76:e3:41:16:4d:a8:44:be:32:89:49:03:e9:c2:4e:28:1b:75:
5e:a3:43:d3:af:02:f2:7e:1b:1c:81:20:7d:d3:6b:48:f1:1a:
7c:eb:96:79:ac:e6:6e:f3:af:c4:0d:69:1e:71:b8:98:97:a0:
f6:0f:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:13:51 2025 by rpki-client