Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft
File: zez04eD7Tx2VgkDeiymD-UEiEzg.mft (raw, json)
Hash identifier: XL/63ptbJ/7kkVBDaS6c/sMk6Uqx3tUYwwUPJrxJjhk=
Subject key identifier: AD:A5:DD:83:E8:7F:9B:33:C6:58:CE:F3:04:20:D2:CA:77:91:89:EC
Authority key identifier: CD:EC:F4:E1:E0:FB:4F:1D:95:82:40:DE:8B:29:83:F9:41:22:13:38
Certificate issuer: /CN=CDECF4E1E0FB4F1D958240DE8B2983F941221338
Certificate serial: 499E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zez04eD7Tx2VgkDeiymD-UEiEzg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft
Manifest number: 499E
Signing time: Wed 13 Aug 2025 14:04:32 +0000
Manifest this update: Wed 13 Aug 2025 14:04:32 +0000
Manifest next update: Wed 13 Aug 2025 20:04:32 +0000
Files and hashes: 1: zez04eD7Tx2VgkDeiymD-UEiEzg.crl (hash: OSoeRMP7PD145R9i7pfvhP1+0ppxXtkOi5W2DT6FCdg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18846 (0x499e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDECF4E1E0FB4F1D958240DE8B2983F941221338
Validity
Not Before: Aug 13 14:04:32 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=ADA5DD83E87F9B33C658CEF30420D2CA779189EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:90:5d:c7:30:ad:15:3f:b4:74:52:8b:af:
e0:9d:40:3b:9d:20:c4:ac:5e:88:5d:fb:4b:6b:3e:
81:16:74:2b:d7:53:b1:1b:80:6c:82:aa:0a:54:7f:
eb:13:5d:94:fc:57:2e:9b:af:23:71:92:78:c0:2f:
67:c1:e8:88:17:38:6d:48:a8:57:7d:1f:c9:7d:ea:
a1:4c:a1:dd:9a:b1:1b:c6:71:b2:88:5d:19:22:c9:
2e:43:27:7c:3b:39:37:52:1c:73:71:63:2c:37:56:
74:ff:56:fe:ce:3e:f1:f0:1d:03:08:1c:09:6a:0c:
cc:2e:ce:57:c6:79:5d:79:7a:1e:0d:90:a7:71:85:
ce:e5:36:96:46:a0:3a:b4:b6:1b:9c:eb:95:4c:db:
7f:e0:74:b6:4e:36:1b:27:ab:21:e6:1e:cc:fd:f6:
48:ac:47:3c:23:b9:7c:d4:60:e8:02:ce:0c:59:5d:
60:72:a7:8e:17:09:86:93:60:1f:05:ae:ce:9c:24:
01:42:31:5f:bc:59:27:31:81:a7:8b:c4:a4:98:26:
19:77:bd:e4:33:b4:37:c5:48:7a:33:80:a8:4d:60:
7e:5f:d3:31:e7:46:c9:9a:bb:3c:54:f6:49:ba:2a:
a3:b6:95:12:be:a4:fe:f7:a1:56:eb:5b:47:54:a8:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:DD:83:E8:7F:9B:33:C6:58:CE:F3:04:20:D2:CA:77:91:89:EC
X509v3 Authority Key Identifier:
keyid:CD:EC:F4:E1:E0:FB:4F:1D:95:82:40:DE:8B:29:83:F9:41:22:13:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zez04eD7Tx2VgkDeiymD-UEiEzg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:0c:e2:32:65:01:a9:c9:a1:1c:6f:d3:03:ba:52:b3:86:97:
db:d9:bd:73:45:9c:4d:b3:cb:f3:d7:b7:ea:d5:c9:e6:4c:20:
23:a4:21:f9:b3:4c:b1:33:4f:fd:5e:d5:09:3b:71:38:be:fe:
88:c4:f9:87:cb:4a:2f:3a:c9:c8:37:22:29:d6:cd:b0:ae:32:
0a:0c:af:5d:9e:85:ce:34:4c:08:7e:12:19:10:6d:03:7d:37:
7c:a8:94:61:7a:20:43:8c:69:ec:c9:4e:73:cc:0a:4c:97:3c:
24:71:9c:13:1e:22:49:f5:f1:d6:ee:fa:d0:9d:7e:9e:c7:f0:
03:e6:01:5f:4b:26:0c:80:87:ec:51:58:45:3f:c5:1f:c1:92:
12:44:ec:2b:ef:1c:94:4d:1e:11:9f:a5:e0:82:a4:bd:e9:6d:
53:53:52:aa:0e:cd:43:c3:42:86:bb:be:96:32:0f:87:86:1d:
a1:00:9b:36:ff:83:de:14:60:16:69:e3:20:f9:91:49:80:bd:
f4:85:62:8f:36:84:4b:bd:e8:a0:87:12:43:fb:a2:fc:81:db:
af:50:0b:29:15:15:a3:c5:e6:57:7d:5b:46:94:94:fb:2d:fa:
a5:67:ac:99:19:52:1f:1e:6a:14:d2:ec:65:aa:8c:b8:06:74:
06:93:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:23:17 2025 by rpki-client