Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier: 5Ar+/NmPu30ELVMIJakmkl4DSXVs99EgQ4V7onIfVP8=
Subject key identifier: 9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 07FA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number: 07F0
Signing time: Sun 01 Mar 2026 16:29:33 +0000
Manifest this update: Sun 01 Mar 2026 16:29:33 +0000
Manifest next update: Sun 01 Mar 2026 22:29:33 +0000
Files and hashes: 1: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: AqRTVB+/tTJYL8HuZzTH+hCkmOLNdUM5kMHUDSXWTAw=)
2: SC6m8P0q6p7ntOCpRRKCLD07IV4.roa (hash: F3LkbRuTsF/ZxSWkX81y3jRWbGla7q1/rRTJ2pXLLBQ=)
3: Udu4Y2VVSfSvAsDnVgr4ywyw784.roa (hash: b+votEcUwTvuXUiyb8agRXfAYHbNT531+XZyEUMsCjo=)
4: esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa (hash: uyPmbNzEpeAABBZYgbGkveGl7ynOz33DLToGYNoP7hg=)
5: fotDNxN_sQREMyU_nWg8lpAAvIY.roa (hash: jD3/6TF1DTlEAMRgojNykbybNyv7ZOor/AQZnLJhVXY=)
6: nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa (hash: 8DlphKnOC+OQmVIxd6QvTWzWu9l+65jBnGINNbqNneA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Mar 1 16:29:33 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:1d:22:27:a0:47:85:e6:44:f9:aa:b2:0c:89:d3:89:7d:21:
fb:8b:d4:01:51:71:82:25:04:86:5b:e0:f1:14:ed:92:57:ad:
66:cb:fd:6b:85:5e:5f:2e:c4:d5:a0:ad:97:bf:a7:23:cf:1f:
ab:de:d5:ba:c0:b6:c5:9c:07:e1:ce:44:66:06:7c:4f:c5:5b:
3b:88:31:af:62:9e:75:4e:6d:ba:43:10:da:05:12:65:80:7c:
61:a1:a9:f9:d1:b7:e9:f3:70:d6:0c:64:2c:21:a3:dc:23:f1:
b2:ef:5d:ca:70:51:f7:d5:6e:9d:a3:8f:70:35:e0:24:18:64:
80:4e:ea:37:9d:9a:7b:19:d6:43:16:58:e4:cf:5f:a9:fb:0d:
c0:a7:2b:e8:32:4d:2c:24:1f:c2:61:de:2a:58:44:4c:df:c7:
3c:42:b9:b1:13:25:84:3f:bf:d1:3c:8f:ef:4d:36:6d:a9:62:
35:b5:b2:21:e2:fb:59:bf:bf:34:d0:d4:7f:02:4c:0e:44:03:
e7:cb:cb:e0:57:bd:f9:99:e9:be:69:18:71:a8:f3:2f:93:5f:
16:63:23:97:3a:ee:7f:08:fb:1e:db:41:63:2f:ea:73:5d:c3:
0f:3c:56:e8:4d:c0:4c:84:2e:b8:a2:d5:a3:9e:cc:75:dd:fc:
db:4f:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:34 2026 by rpki-client