Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft
File:                     H1UvborC-X4UR7-sgQBZaV4rMqk.mft (raw, json)
Hash identifier:          vBfAjR+5EqRWNRkJkep9fhe36F/1Z+fYW5AvtYk0l5Q=
Subject key identifier:   3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C
Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9
Certificate issuer:       /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9
Certificate serial:       03F7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft
Manifest number:          03E2
Signing time:             Sun 01 Mar 2026 21:28:24 +0000
Manifest this update:     Sun 01 Mar 2026 21:28:24 +0000
Manifest next update:     Mon 02 Mar 2026 03:28:24 +0000
Files and hashes:         1: 3brUlupLFNOJTrxKML94I8BrEHQ.roa (hash: Rz7xzH0RnlhaMB3xgZiF+Dwazd6Z1dnQJ+fN8v1gBhI=)
                          2: 3kux-K6eUv7YAIUgje7JO7SopDM.roa (hash: jhS1alVkDqD1AWD2PpZ4vAb8U/e4KUb5DEUiw2f/Bec=)
                          3: G-_EUah9OXXnRYOJw30MerVDppU.roa (hash: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=)
                          4: H1UvborC-X4UR7-sgQBZaV4rMqk.crl (hash: 4ZTaWpE+fURTcHtEQ2mMifzopSZJK22FXdP3lvqOYO8=)
                          5: Tueg8B20i_WKP7hRxycvFmdclRo.roa (hash: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y=)
                          6: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (hash: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=)
                          7: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (hash: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4=)
                          8: hYK-XjRKskiAn6bAAG5T4Oe--f8.roa (hash: ki0ISRRah8HdJpf+F48KF/abn4Ku+jTiEO0CCXWKn+w=)
                          9: jyJ7GXgOh5wk2yQ1QkK5PDpY260.roa (hash: xyEZXhnkY9hCIenZfbzG/0yw5LXZElAJDqguy6tatAc=)
                          10: qhmYe5kKex0rrqDH9ozQxDERun4.roa (hash: f/rKewlfJYMh484wFI5/RwDYm/Uv/x9i2ZR4r3iFEAI=)
                          11: uGhFTx1EVVAv4s_MVcvYBHC128I.roa (hash: I8iCxg/YMOwkUdcHw0EJGtWVX+MO2uPy0xA5/B8DU7c=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9
        Validity
            Not Before: Mar  1 21:28:24 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=3E81C75A63104ED0DBD030385A5636C096C7960C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:bb:84:3e:56:d3:31:96:6e:72:dc:a6:b1:
                    db:5e:2e:a5:d6:bf:38:40:50:2e:c9:91:32:b3:33:
                    e5:94:43:7d:ee:81:9d:2b:55:61:8f:20:2e:ff:eb:
                    3f:17:83:af:10:c9:b5:8f:80:fb:09:48:55:61:f1:
                    3e:b5:e2:1e:7a:ce:d6:ed:ec:ac:a6:e3:00:b5:80:
                    16:22:f8:5b:db:96:7d:cb:2a:bc:55:6c:a2:da:51:
                    2f:9f:80:fa:10:f2:35:37:3e:13:b7:85:18:29:9b:
                    90:f3:6b:4b:dd:f9:be:89:61:09:6c:48:c2:51:96:
                    47:15:67:d0:ce:7e:94:aa:fd:a3:83:46:43:a9:29:
                    0d:bd:fb:53:7b:63:b3:7c:88:ad:bd:28:b1:b8:77:
                    9b:a0:ba:eb:3c:6c:8a:24:e8:33:b6:2e:b1:4f:10:
                    93:5c:de:6a:b0:a0:b1:d2:8e:38:c9:2c:fb:4c:ad:
                    3d:f1:17:e2:db:6a:b7:a2:de:ab:c7:65:e6:e1:5e:
                    76:71:90:57:a9:39:95:e6:4c:60:00:30:fa:44:9c:
                    c4:65:c0:18:a7:03:34:a0:de:82:72:6e:d1:f4:d3:
                    cc:d6:7a:fe:93:e6:1f:fb:38:50:28:d5:ab:9d:de:
                    32:f0:7a:55:db:a7:e5:81:9c:e6:61:5d:56:a9:c2:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C
            X509v3 Authority Key Identifier:
                keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:f3:42:0b:00:55:61:76:65:78:46:ad:5d:76:6c:f7:9f:
         15:74:dc:87:7d:32:c2:fb:02:df:c5:09:10:1e:95:cb:67:95:
         2c:db:96:cd:c3:d0:bf:78:a7:58:10:34:2f:d4:5e:17:37:ec:
         ab:2f:5c:c8:4f:d8:b5:95:bc:98:56:db:04:ef:44:17:e4:ed:
         91:8b:12:56:dc:9b:54:e1:4c:67:d1:a0:3d:68:4a:22:87:56:
         b2:41:7d:10:b2:d6:d8:ac:0f:eb:f3:0d:37:7f:02:cd:dc:a3:
         bc:16:cf:b3:d6:9a:5a:6b:62:9a:f0:b8:4c:37:2f:cd:01:ac:
         04:13:87:0f:fe:b1:c9:07:cb:a7:24:d6:45:81:a1:b7:f8:1c:
         39:6d:71:b0:49:ac:69:9e:bc:b0:0f:e3:05:94:12:6a:8b:c1:
         f8:09:5e:e9:83:f0:ca:60:3a:e1:74:17:44:f2:1b:d6:f2:e2:
         28:a2:50:ad:d7:c3:b1:2c:7b:53:e6:0e:8e:0c:17:29:fe:c5:
         7d:57:47:ac:83:57:b2:a8:1b:bc:57:92:fc:39:85:3d:87:13:
         21:6e:86:40:61:49:3e:ef:d6:b6:d1:7f:c1:01:f4:a5:72:ff:
         24:d7:1a:82:74:ad:cf:cc:18:ef:4a:6c:db:04:25:2d:7f:24:
         3f:0b:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:49 2026 by rpki-client