Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
File: L489CPJT5L3GUR1LZHvjXMZwPRo.mft (raw, json)
Hash identifier: cyjDhcOpHSbjOZC0ZdodvPZlhB/lDyvnWPqRBGJT7x8=
Subject key identifier: 80:F5:57:60:7D:4A:63:54:9A:61:A8:60:4B:3C:35:02:D1:73:49:0A
Authority key identifier: 2F:8F:3D:08:F2:53:E4:BD:C6:51:1D:4B:64:7B:E3:5C:C6:70:3D:1A
Certificate issuer: /CN=2F8F3D08F253E4BDC6511D4B647BE35CC6703D1A
Certificate serial: 1E7D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L489CPJT5L3GUR1LZHvjXMZwPRo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
Manifest number: 1E7D
Signing time: Fri 20 Jun 2025 15:45:20 +0000
Manifest this update: Fri 20 Jun 2025 15:45:20 +0000
Manifest next update: Fri 20 Jun 2025 21:45:20 +0000
Files and hashes: 1: L489CPJT5L3GUR1LZHvjXMZwPRo.crl (hash: 5/f1bNzAz6dRDj5mIEQD+veHHVV12RWNre2mtWJMz64=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7805 (0x1e7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8F3D08F253E4BDC6511D4B647BE35CC6703D1A
Validity
Not Before: Jun 20 15:45:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=80F557607D4A63549A61A8604B3C3502D173490A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:b0:79:50:52:ed:a6:8c:7e:bb:df:d2:e1:
59:5d:07:d0:15:7d:47:30:d3:48:da:9e:82:1f:3f:
bb:3f:91:f7:a7:2b:bf:88:52:7f:60:8d:76:22:6f:
dd:2c:dd:01:fc:db:79:e1:e0:92:4d:48:32:16:19:
9c:d0:3a:a9:97:2b:65:05:3e:af:2c:f1:72:2d:6e:
88:8a:2c:a0:af:85:67:58:34:7a:bb:48:ea:3f:18:
9f:3a:1e:9e:ff:03:ed:80:c2:38:2b:e1:a9:82:08:
6d:39:9e:00:fb:af:ff:44:a9:b7:39:5f:bb:7e:63:
3f:92:9b:e5:fa:34:d0:c7:e7:3c:5d:6e:eb:bd:29:
0f:6d:fa:91:ca:ce:d3:8d:f1:33:9b:ae:66:51:8a:
22:28:15:49:e5:62:13:40:65:db:47:ef:03:00:3e:
27:6b:d5:a1:d0:44:51:5c:78:9b:ec:99:23:31:3b:
cc:93:f8:36:ee:2b:38:a4:49:9b:8e:fd:aa:61:21:
77:3a:8d:f3:41:41:28:fe:d5:e6:22:e0:59:83:9a:
ac:d7:4b:a1:2e:b8:a1:ff:bc:cd:db:4c:7f:d4:9e:
06:32:cc:05:00:78:e6:13:07:a5:f4:50:6e:ef:2f:
05:e2:93:1f:64:8b:e6:c6:94:14:16:0b:5f:f7:e3:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:57:60:7D:4A:63:54:9A:61:A8:60:4B:3C:35:02:D1:73:49:0A
X509v3 Authority Key Identifier:
keyid:2F:8F:3D:08:F2:53:E4:BD:C6:51:1D:4B:64:7B:E3:5C:C6:70:3D:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L489CPJT5L3GUR1LZHvjXMZwPRo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:40:f6:df:1a:93:59:18:fb:ec:0c:3a:84:dd:e0:c7:a4:e3:
69:b5:76:ca:d9:14:10:5f:53:98:b1:f7:bf:42:5a:2a:de:5c:
07:25:47:37:53:be:f9:3d:34:8f:43:78:66:d3:b0:be:bc:ab:
c5:55:e3:43:40:8d:67:ef:4c:8d:b6:04:dd:2a:9b:9e:43:cc:
59:23:62:6b:67:ce:c8:76:d7:40:e1:2e:fa:76:a8:02:af:13:
ae:f6:cd:f4:f9:a0:18:e5:64:a7:9d:43:95:c8:21:fb:e0:fc:
be:a1:da:13:e0:41:63:bc:2a:b1:67:6f:fd:93:3e:99:8d:3c:
f1:a4:2d:c0:4e:b1:13:9d:21:7b:82:d9:5a:21:19:4e:d5:fd:
24:1e:e6:62:d6:26:6c:87:b4:63:9e:6d:3d:75:c7:b3:89:42:
e9:3e:16:65:5d:bd:05:56:48:27:ef:2b:03:1d:c9:db:c0:69:
d3:8f:c7:d7:9c:58:3f:9b:10:1d:ca:cd:11:92:a1:c6:fb:53:
2f:43:52:58:5a:08:3d:7a:05:c2:e0:d4:9c:3d:62:d5:bb:8c:
7f:da:09:d4:69:82:84:f5:45:4f:61:b5:12:dc:8d:00:b6:b0:
f7:53:18:6b:70:63:ec:58:33:a8:47:74:6f:0e:dd:6c:7a:26:
a4:4f:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:03:48 2025 by rpki-client