Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json)
Hash identifier: 38DJbqkUgydcL3xFe9gnURAx/d7Jg3BTZrAWyMK3Ihw=
Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C
Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Certificate serial: 05C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
Manifest number: 05C3
Signing time: Thu 05 Mar 2026 18:59:24 +0000
Manifest this update: Thu 05 Mar 2026 18:59:24 +0000
Manifest next update: Fri 06 Mar 2026 00:59:24 +0000
Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=)
2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=)
3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: ITC+ENC5IHwboJt54it9lcgvNNqiOa5fZzdCU6vk5BM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Validity
Not Before: Mar 5 18:59:24 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d:
45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b:
7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08:
35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1:
5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46:
86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c:
c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8:
1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d:
b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6:
6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31:
7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07:
01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31:
15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76:
d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5:
c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41:
77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4:
f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C
X509v3 Authority Key Identifier:
keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:0e:36:15:7f:d0:38:20:89:79:96:7b:dc:68:3f:71:35:
e7:7e:8f:ba:d8:c6:05:a7:64:f5:90:45:bc:7e:b5:0f:04:93:
f3:a0:67:92:06:76:71:29:cf:6d:65:a1:44:e4:30:fc:5c:f6:
29:17:4a:01:bf:86:4a:07:d4:a9:24:b3:33:e7:4d:71:d6:d3:
e9:bf:16:ce:a8:c5:fa:4b:f9:35:bc:45:f8:b1:bc:de:c5:f5:
95:c6:0b:32:49:66:7f:2d:b4:6c:54:e7:5a:20:70:bc:a9:08:
4f:0a:ba:b2:be:18:a3:7f:64:8a:17:8f:ac:75:06:3f:5e:df:
71:7b:b7:ca:63:62:08:4c:25:fa:93:28:38:80:c2:d3:ef:c2:
38:f4:61:f1:66:11:81:bd:3a:4b:7e:a6:73:18:a2:d3:dd:65:
16:4b:8a:d5:1c:df:d2:a6:d6:fd:5c:48:73:0d:a2:ed:03:d4:
98:c4:20:16:0b:ff:52:a7:de:b0:32:e6:e1:94:e4:02:66:a4:
19:61:8d:a5:eb:1b:00:92:53:64:06:c5:ad:6c:61:02:ba:90:
3f:31:a5:e7:78:c4:3d:81:53:51:d7:c9:62:3a:de:c8:24:43:
40:82:8d:e4:2e:df:1c:31:27:1c:ca:05:fb:ad:86:1a:4e:09:
6d:73:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:08:50 2026 by rpki-client