Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft
File: 3GiS42IN0PH9YpguEY4pdX3Iyz0.mft (raw, json)
Hash identifier: h66P+PuHRaYoz8oPZ6EuvtzGCGdcsGEzAUnyO2OXd6o=
Subject key identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 1527
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft
Manifest number: 14C9
Signing time: Sat 26 Apr 2025 06:36:44 +0000
Manifest this update: Sat 26 Apr 2025 06:36:44 +0000
Manifest next update: Sat 26 Apr 2025 12:36:44 +0000
Files and hashes: 1: 3GiS42IN0PH9YpguEY4pdX3Iyz0.crl (hash: yFy3bl1x51FgAIhkv2Uy1Jx5CBeOjprnEJ5GNCFXZJU=)
2: 5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa (hash: +BAnoDks/I9MJXYriLgObyMPkMI3GpRgHTysE1uOmJ0=)
3: 75ys0PrDinDFKrNoR4e23Idu8m4.roa (hash: hqT2Mqlf2A+MLPQIu6Z0Qjy6Mwg44SLEln0zoQxySso=)
4: RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa (hash: CeZWKFta3q7XOY1PMeung3ofIhHqs04YGuQxyt3uHH4=)
5: SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa (hash: 5C4Kz2tvXlKpPp0zUdoEHwlfyvHduEz/cUpmRj3xDAg=)
6: bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa (hash: FPsYvAAOaQMSgDGGxAOpHgM9zH3kX06iyzaLE9msP8c=)
7: c8cUFZDH6O5exb6j4uFUNQZBVwA.roa (hash: ChxxrTVExxNhWtyTkhs7Lts9bjh8WwMtzGdZlOqpElw=)
8: iPCP6IuT-0QUdjr7rWq4x3eahUs.roa (hash: 392WqWeFbPlBXrnmWzfBSMp8DlyfnVN0seKH8/K1kVA=)
9: mOP5PXAJj2kQLFwCgVjCZczJXBo.roa (hash: wfV0HRjPUvGW/UwP9JCls20oaaBHIMZWwQL7DaYqcbw=)
10: rJq0JCq-nYCiaPtjdTG4aGX_lew.roa (hash: pRKxjBukzQitNjXwkG8mzwM2l2UavR4iKrfomRa7B/c=)
11: rlzdZPwqK5Oa0YBChiK_h_0EwVY.roa (hash: oIVPo7fR1TB38YsoJ++yXQ6k9SlvuWne2dWr+5XWVGw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5415 (0x1527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 26 06:36:44 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=AEC4B33917814BC00A65EB9CEC3E1DFD8D383010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:79:0f:fa:67:80:fa:5d:2e:95:a1:98:8c:
49:15:6b:7c:b6:6b:21:fc:03:e9:69:75:27:1f:63:
35:4e:93:f0:74:1c:93:1e:dd:35:8e:2f:e5:d6:40:
1b:5f:12:fd:cc:78:a9:5b:c2:74:89:e7:af:f8:c3:
18:e2:d3:e7:b8:0d:c6:63:2d:ca:c4:ca:b4:6b:ea:
4b:54:e6:6d:a9:02:d4:74:c0:a8:da:2a:a6:de:d8:
0e:b3:9b:c2:ed:0f:e9:68:f6:09:f8:41:6a:7a:4d:
56:b3:8a:db:e0:be:ad:fb:85:b1:e0:0b:88:d3:bb:
26:1d:48:96:09:cb:ee:cb:6f:14:5f:4d:dd:fc:ec:
98:94:32:8e:8e:00:de:15:eb:d0:3a:2d:55:cf:a9:
09:2a:8d:5a:08:1e:1a:72:cd:b9:cc:49:e9:79:22:
61:c1:79:56:2b:1f:15:2b:20:d5:96:30:be:1e:d1:
92:11:20:52:24:3a:e4:c1:6b:a0:3d:4d:76:f9:6e:
d9:94:40:f7:43:58:86:f3:2d:ca:8d:97:13:23:18:
9a:8f:af:c2:b3:83:40:46:86:39:f9:3a:11:4d:b5:
41:56:73:5c:54:d9:44:1c:4e:72:d5:5f:8a:34:63:
31:84:47:5d:8d:92:52:f7:c0:b7:80:8a:0b:02:88:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:db:4b:3c:5b:29:17:f1:70:41:2f:e1:60:34:82:b8:51:1d:
b8:45:27:34:57:86:04:be:e3:16:b0:7e:39:95:95:9c:eb:5d:
7c:d7:a8:7c:b6:17:2f:87:17:dc:e4:73:f6:cc:8b:18:30:89:
91:b5:b1:84:e2:dc:d7:15:f7:f2:b8:f8:08:d2:34:db:33:f0:
75:9d:a2:6c:58:cb:a8:75:43:7e:55:e3:06:b0:2c:ab:b1:c6:
6c:42:32:ed:bc:6d:7f:9d:bc:4d:2e:d7:73:f5:c7:93:24:c9:
7d:19:a6:e7:0a:78:b9:dd:a5:e2:c7:5e:1c:62:33:1b:59:bb:
c9:03:5d:27:cd:7a:db:b9:b0:a9:f3:91:be:13:ff:80:11:87:
8b:13:94:66:49:00:1a:de:b0:ac:64:79:eb:04:7c:d3:bc:7e:
b1:e6:33:8f:21:d3:0d:a8:f6:28:b8:4d:a3:11:44:8a:5a:c1:
6d:b2:fb:0d:82:eb:d6:02:eb:3a:38:e9:ad:c7:68:f6:c9:5b:
28:18:0d:cb:3c:5b:db:86:91:a7:20:cb:5c:1c:4f:3e:d5:1a:
6c:f8:5d:0a:ad:f6:51:c6:b5:8b:7f:42:d2:04:8a:6f:c5:33:
ce:c3:e8:d1:a6:d3:ae:3f:92:77:91:96:d9:2d:52:21:40:2d:
a8:7f:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:39:31 2025 by rpki-client