Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft
File: Cm-XLSQHj4kIjtEQom3N-QqevOo.mft (raw, json)
Hash identifier: 81pGWsqdL/jaypQZeM+mRC4j5O0PIeIpPcPcgTNCm8E=
Subject key identifier: 47:4E:F3:51:13:0D:53:1A:65:EF:A3:0B:17:39:68:28:39:FC:6C:9A
Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Certificate serial: 1A88
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft
Manifest number: 1A79
Signing time: Mon 02 Mar 2026 02:29:35 +0000
Manifest this update: Mon 02 Mar 2026 02:29:35 +0000
Manifest next update: Mon 02 Mar 2026 08:29:35 +0000
Files and hashes: 1: 7KhjyFArIahfZqUppN39B2U8uWw.roa (hash: 9Tt4efQa83mrdmNGrnz9HAzUOii4WtxIiWodw7TJf8k=)
2: AKNyCIbrTIx6gqAV6a5tQrFYrPo.roa (hash: dA337WQUV0b/ikW/HF9ddxaiuctveKDFYo10YnqO8bE=)
3: Cm-XLSQHj4kIjtEQom3N-QqevOo.crl (hash: kEMNqHb+bvzTNv5BZrVnq61qoyvBXzlVdU8zcWaiBc0=)
4: EEyHpeLP2zwPwwDDrnbNGi7XLnE.roa (hash: feXqq3A6jCAD34pacdb2UXtp3vrjgWcmmd2s+ZeVB4g=)
5: FJya2J9MRXewJS0UsrRFHHS19fY.roa (hash: xdD1SHxivnU0RMg/dvIBrXho/Z9i/igtmo4LcBAFRxE=)
6: OfG8EM7TlmfgDQK2fphCmwNipTg.roa (hash: TyDBrbN3myN+sZ6CN/BLu7Dd/j06TToWBDA6q6Kqcjc=)
7: RErAL65HRCGrc8Rg8rd4PzX2Lwk.roa (hash: 0yvpMKvii87j2Vl3CUVTg0uM0+hwFSf/HY7xN0uVRJQ=)
8: RoMFAme2LyvRQ5XYpaCuZ17mdTQ.roa (hash: dH8NlKUfN7377TgKjXA2eMf6m9zUwh0NAEP/qhvWU40=)
9: h_XlbGTtRdzPycnUPkMv_VsHxOk.roa (hash: wUQYuAK1iwgoTRU6i5LJSCAg+l17CLiMUySwmIS4GKA=)
10: qNLltn56HM078SiShLYIiere6-8.roa (hash: D9NCFv8jwYo6nKUJFGsYdY54fL6ckDHlRfe9IKW2EKo=)
11: rv_gAjG_1H9fNLirCKsyP5M3UR4.roa (hash: dOQl+NMTbf19BuAJXCihoFrae8r62h4qO/73ud5Acnk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6792 (0x1a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Validity
Not Before: Mar 2 02:29:35 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=474EF351130D531A65EFA30B1739682839FC6C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:3d:ff:74:53:e9:5c:ad:49:15:19:5b:06:
ee:c9:0e:30:1e:d6:58:d1:ca:78:3c:47:f0:9e:a5:
d8:ee:bc:e4:c5:31:02:b9:5c:35:c0:28:b6:3a:0d:
a8:e9:75:88:75:93:a0:6b:e1:13:2d:f8:a9:e5:33:
d5:59:7a:f4:5e:78:46:c4:b0:c3:fc:be:a0:ef:96:
b7:4e:2a:16:10:fa:01:9a:49:a4:36:71:9e:71:e9:
37:8d:c8:ce:3a:4a:ce:f4:6f:60:90:31:2d:9b:c4:
ac:d0:fc:84:d4:35:60:29:54:db:f8:3c:c8:a9:bc:
77:23:df:30:1c:17:82:ce:b0:e5:7f:85:a1:f7:39:
fe:83:6c:07:e3:e3:fe:80:dd:cc:65:60:26:a4:6d:
60:0f:2b:0d:68:0d:c0:82:d1:5a:24:ca:c5:7d:d1:
77:71:fe:d9:1b:0e:d2:85:98:0b:51:00:95:ba:6a:
fe:f4:2f:bf:3f:42:b9:5c:5b:28:e7:9c:90:d8:04:
21:8b:0e:e8:e5:c4:13:8e:83:52:2f:bf:99:7f:10:
13:ba:9e:71:fe:1e:91:23:7f:ce:b9:70:73:6c:03:
24:87:cc:46:6c:16:68:e8:ba:5a:a6:b7:03:ee:e0:
c6:91:16:9c:f8:6e:58:a9:38:2b:0f:96:23:1a:7d:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:F3:51:13:0D:53:1A:65:EF:A3:0B:17:39:68:28:39:FC:6C:9A
X509v3 Authority Key Identifier:
keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d3:a2:3e:b3:cb:60:2f:ff:cf:b1:23:94:f8:a0:29:3b:bc:
44:40:65:25:49:27:ca:de:c4:dd:56:c5:de:c4:fd:57:94:06:
c1:4b:57:2c:73:67:80:de:74:cc:f5:6e:85:33:6d:d1:c2:8a:
1d:c0:14:d0:9a:db:2a:35:9d:1f:53:27:cc:cf:28:64:e1:36:
1d:56:d4:25:e0:1b:8d:d8:b6:5f:e0:5d:e3:93:63:0c:bf:58:
35:43:2f:75:f1:79:91:6d:3c:49:75:f1:a1:d2:50:f5:7a:a1:
be:13:e6:b5:51:86:ee:52:a1:59:71:18:f9:c8:d5:a6:f0:10:
6c:c9:90:7c:22:28:9f:02:4f:66:c2:95:e6:70:25:55:92:59:
0e:b7:57:c4:4f:22:c1:e9:b6:98:0c:c2:6a:69:8d:46:a7:57:
d9:ea:c3:f1:16:81:40:8e:dd:59:56:1b:c9:ef:8f:ec:28:6b:
16:9a:82:b7:f3:52:de:a8:1a:6a:18:7f:4b:91:16:59:7d:da:
29:10:3c:0b:cc:34:f2:03:6e:fc:4e:a9:a7:b7:ff:99:6f:1c:
ab:05:37:79:fc:21:e9:0a:c7:47:37:1a:04:1c:3c:a5:0e:77:
b0:df:ff:18:65:a7:84:f6:ad:2b:a5:af:4d:f5:df:2d:81:b6:
6a:de:61:00
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICGogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2
Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNjAzMDIw
MjI5MzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQ3NEVGMzUxMTMwRDUz
MUE2NUVGQTMwQjE3Mzk2ODI4MzlGQzZDOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3hD3/dFPpXK1JFRlbBu7JDjAe1ljRyng8R/CepdjuvOTFMQK5
XDXAKLY6DajpdYh1k6Br4RMt+KnlM9VZevReeEbEsMP8vqDvlrdOKhYQ+gGaSaQ2
cZ5x6TeNyM46Ss70b2CQMS2bxKzQ/ITUNWApVNv4PMipvHcj3zAcF4LOsOV/haH3
Of6DbAfj4/6A3cxlYCakbWAPKw1oDcCC0VokysV90Xdx/tkbDtKFmAtRAJW6av70
L78/QrlcWyjnnJDYBCGLDujlxBOOg1Ivv5l/EBO6nnH+HpEjf865cHNsAySHzEZs
FmjoulqmtwPu4MaRFpz4blipOCsPliMafSeDAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUR07zURMNUxpl76MLFzloKDn8bJowHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ
om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy
L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyL0NtLVhMU1FIajRrSWp0
RVFvbTNOLVFxZXZPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAu06I+s8tgL//PsSOU+KApO7xEQGUlSSfK3sTdVsXexP1XlAbBS1csc2eA3nTM
9W6FM23RwoodwBTQmtsqNZ0fUyfMzyhk4TYdVtQl4BuN2LZf4F3jk2MMv1g1Qy91
8XmRbTxJdfGh0lD1eqG+E+a1UYbuUqFZcRj5yNWm8BBsyZB8IiifAk9mwpXmcCVV
klkOt1fETyLB6baYDMJqaY1Gp1fZ6sPxFoFAjt1ZVhvJ74/sKGsWmoK381LeqBpq
GH9LkRZZfdopEDwLzDTyA278Tqmnt/+ZbxyrBTd5/CHpCsdHNxoEHDylDnew3/8Y
ZaeE9q0rpa9N9d8tgbZq3mEA
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:29 2026 by rpki-client