Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
File: GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft (raw, json)
Hash identifier: h7ligEEz2kMrTbnUPWAMKwjrtX/WknHrKk0W/FHt1EQ=
Subject key identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD
Authority key identifier: 1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43
Certificate issuer: /CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43
Certificate serial: 014E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
Manifest number: 014E
Signing time: Mon 02 Mar 2026 02:31:14 +0000
Manifest this update: Mon 02 Mar 2026 02:31:14 +0000
Manifest next update: Mon 02 Mar 2026 08:31:14 +0000
Files and hashes: 1: GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl (hash: 0rzbn/Gs8mQinUtWZPfyVqoQv275GTe9XRXQgiKMIb0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43
Validity
Not Before: Mar 2 02:31:14 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=7ECF9B376B5F206D2B200CE21F49F5E958A94CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:f7:2e:87:5b:a8:41:83:5c:7e:9c:fe:06:
d5:47:58:1e:ae:84:fd:a0:74:92:88:60:ef:e0:6f:
4a:8e:62:74:4e:f5:32:a9:af:a1:a1:0e:1e:5a:f3:
00:35:2c:6e:3e:63:65:b6:6f:ae:5b:f3:46:dc:c0:
ea:44:05:1c:23:a6:d1:45:d4:37:bd:d1:8c:16:9e:
b4:13:78:26:53:8d:8e:59:14:94:03:28:c9:0c:47:
d2:cd:8f:d4:a9:05:57:00:7a:1f:54:da:e4:83:d7:
bf:97:6e:cf:92:fd:c8:4c:56:22:aa:f8:e4:a5:49:
d7:f2:22:5e:ba:0e:2f:5d:42:4f:4e:27:3a:3f:6e:
87:e6:0c:8b:ac:c2:79:c6:fa:57:8a:a1:cb:fe:5a:
88:a0:2e:fd:6c:7f:bd:9a:e4:ff:84:91:76:96:46:
66:9c:6c:57:49:cd:c5:3d:b3:ea:75:8d:a5:88:d9:
2e:6c:c6:fd:e5:09:2e:0c:ff:f7:3a:4b:b5:5b:b9:
c5:fe:bd:8b:4c:c8:10:38:bf:d7:a9:ad:dd:b4:61:
63:92:b7:fa:c0:35:2d:73:fd:ab:69:c8:30:ad:dd:
f4:a6:b9:0e:e2:9b:57:be:e4:e5:18:25:70:ea:79:
c9:4c:85:e7:ad:2f:4d:a1:9d:cd:70:5c:a4:7e:3f:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD
X509v3 Authority Key Identifier:
keyid:1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d2:ff:66:60:4f:b3:f5:f3:11:a9:f5:90:e1:d7:a6:30:53:
d2:7e:8a:b2:05:ee:26:ca:e8:73:c3:8b:06:bc:19:56:74:4f:
86:48:fb:b5:ec:63:20:b9:68:f1:ba:86:bb:18:84:e8:10:1d:
26:cb:d8:a1:73:68:81:6d:bf:4f:1b:63:85:8e:0b:09:61:4c:
48:e9:c9:36:16:b5:12:86:11:8d:ec:5a:07:87:7b:f8:15:fd:
90:02:df:a0:03:4c:e4:5b:d6:71:c3:98:c4:92:4f:48:4a:e8:
6b:5d:24:af:ab:7d:7a:29:64:12:6a:05:86:c1:69:25:26:8b:
23:8c:cc:32:83:86:e9:f6:5d:c8:1f:4a:d3:c4:e6:87:da:a3:
17:95:ee:c7:28:ef:87:76:b0:a9:53:95:16:85:35:88:4b:45:
57:91:fc:b7:a8:96:4a:c0:76:3e:3b:24:51:0e:9f:55:4c:18:
90:ec:8d:da:e8:e3:b7:29:88:8a:57:f7:f9:13:d8:db:2a:e4:
91:f3:d8:90:1c:52:81:42:6d:eb:e5:a3:41:f7:3f:2e:56:bd:
63:68:b0:cd:29:6f:3b:b2:c8:75:ca:41:be:cf:a5:58:c3:c0:
6d:b2:db:89:00:24:f9:79:73:b5:a8:3f:5c:c3:48:35:c9:d0:
b3:bc:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:01 2026 by rpki-client