Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
File: 9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft (raw, json)
Hash identifier: astTKjgiIsV6e5NKPUsmiFx1Lj+w/gtW7h4+XaZ3BOk=
Subject key identifier: DB:BB:05:95:FF:E4:2F:BD:86:48:C7:C4:65:64:87:01:14:9E:20:3D
Authority key identifier: F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B
Certificate issuer: /CN=F4729CAF435D698D27C7387914801EFDB8478B8B
Certificate serial: 0399
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
Manifest number: 0397
Signing time: Sun 01 Mar 2026 21:28:29 +0000
Manifest this update: Sun 01 Mar 2026 21:28:29 +0000
Manifest next update: Mon 02 Mar 2026 03:28:29 +0000
Files and hashes: 1: 9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl (hash: n043VdUOeJuxezkYN+HnwFT7oyXIZ5+jS4hBQMs0lEA=)
2: mzEqRGt0VvtSsWPhPBXfjucZFo8.roa (hash: tTxxdHg09ks37JVOcdjBMNEqFSmbff56kqtenIT2bzQ=)
3: xwNLPe_StZMG1iv5jjnMb3WeiqY.roa (hash: T6hWSlRGulCuF3HHzGqvyeRktxl6HgxezfKP3kslbP4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4729CAF435D698D27C7387914801EFDB8478B8B
Validity
Not Before: Mar 1 21:28:29 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=DBBB0595FFE42FBD8648C7C465648701149E203D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:71:6c:8b:14:48:16:68:7d:3a:3f:2e:7a:
ce:c4:98:ad:d2:cf:91:60:c8:01:ab:84:02:e6:04:
eb:7a:d6:2b:be:1f:6e:57:4f:c5:63:a0:47:cd:1b:
7c:95:40:bb:cf:f8:28:58:86:20:e5:05:c3:fd:59:
1e:a9:b6:61:50:64:12:10:47:ef:5e:f0:7b:32:1e:
f5:fc:4a:0f:3f:66:53:e4:fd:b8:00:93:c6:76:dc:
f6:6b:e9:bd:71:f1:3e:a4:09:58:af:40:dd:4e:54:
37:21:37:4e:59:a9:51:b6:0b:00:b8:32:16:48:24:
d0:b1:bb:23:9c:1e:9e:26:88:99:3c:2f:c8:82:9a:
3c:5d:67:36:d1:0d:dd:1f:57:60:d3:60:d3:f4:a5:
2a:37:f9:9d:49:9b:f5:2f:7e:9a:dd:c1:8f:be:4c:
b9:ab:59:42:93:0a:52:c6:c2:c4:80:e9:0a:18:84:
ae:57:53:16:db:7a:90:a4:41:e5:a6:4b:3d:81:5e:
e5:19:50:98:6b:db:49:4d:90:9a:8d:21:26:c3:d9:
51:5b:25:e2:6b:03:d9:e4:ef:81:b2:1d:06:0b:af:
ef:7a:85:58:17:2c:d0:0e:67:ee:6b:b1:7a:d1:0d:
c9:10:31:1c:e7:ea:23:8f:0a:dd:fb:ce:92:8a:63:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:05:95:FF:E4:2F:BD:86:48:C7:C4:65:64:87:01:14:9E:20:3D
X509v3 Authority Key Identifier:
keyid:F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:f9:fc:2a:5d:2b:9e:1d:80:7a:65:39:e7:3a:57:f0:da:
f1:fa:f7:01:a9:16:2a:a5:bf:62:98:b7:49:ad:24:da:ad:79:
fc:2e:04:f2:8f:64:c4:b5:66:f0:f2:aa:39:bd:dd:a3:aa:f8:
9f:4e:45:04:30:b1:ee:21:a1:42:16:2a:53:8b:f6:a8:51:c2:
1e:ab:bf:48:f1:31:25:ce:9b:a5:36:7f:9a:71:5e:e7:fe:12:
70:4e:3e:30:c5:91:b7:1c:4f:cc:43:10:60:79:4d:bc:be:46:
72:29:44:1b:59:f3:62:62:82:ec:33:f5:5d:d9:7e:7f:c4:46:
7b:d0:66:90:7b:73:74:0f:0e:73:25:d6:8b:89:19:8f:45:83:
f9:56:38:67:c1:7c:be:22:c2:b4:70:3c:6e:de:5e:e5:de:b8:
48:98:67:8e:65:c9:f3:63:17:94:d0:d9:c9:f7:d2:72:fc:15:
69:92:34:37:8d:d1:a6:41:5c:c5:90:d5:5f:7f:48:51:ef:29:
1c:bc:6a:98:3f:df:6a:ef:ab:2e:1a:e1:a9:5e:46:f9:07:80:
7e:85:1a:66:ab:9a:0c:45:d9:e9:31:cd:4a:c8:92:24:e2:38:
4c:57:38:e1:20:b5:bb:39:16:17:2d:ef:65:a2:19:83:d1:83:
1c:d4:b5:8d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjQ3
MjlDQUY0MzVENjk4RDI3QzczODc5MTQ4MDFFRkRCODQ3OEI4QjAeFw0yNjAzMDEy
MTI4MjlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERCQkIwNTk1RkZFNDJG
QkQ4NjQ4QzdDNDY1NjQ4NzAxMTQ5RTIwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBeXFsixRIFmh9Oj8ues7EmK3Sz5FgyAGrhALmBOt61iu+H25X
T8VjoEfNG3yVQLvP+ChYhiDlBcP9WR6ptmFQZBIQR+9e8HsyHvX8Sg8/ZlPk/bgA
k8Z23PZr6b1x8T6kCVivQN1OVDchN05ZqVG2CwC4MhZIJNCxuyOcHp4miJk8L8iC
mjxdZzbRDd0fV2DTYNP0pSo3+Z1Jm/UvfprdwY++TLmrWUKTClLGwsSA6QoYhK5X
UxbbepCkQeWmSz2BXuUZUJhr20lNkJqNISbD2VFbJeJrA9nk74GyHQYLr+96hVgX
LNAOZ+5rsXrRDckQMRzn6iOPCt37zpKKY0Z/AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU27sFlf/kL72GSMfEZWSHARSeID0wHwYDVR0jBBgwFoAU9HKcr0NdaY0nxzh5
FIAe/bhHi4swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY4
Mi85SEtjcjBOZGFZMG54emg1RklBZV9iaEhpNHMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzlIS2NyME5kYVkwbnh6aDVGSUFlX2JoSGk0cy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2ODIvOUhLY3IwTmRhWTBu
eHpoNUZJQWVfYmhIaTRzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACGS+fwqXSueHYB6ZTnnOlfw2vH69wGpFiqlv2KYt0mtJNqtefwuBPKPZMS1
ZvDyqjm93aOq+J9ORQQwse4hoUIWKlOL9qhRwh6rv0jxMSXOm6U2f5pxXuf+EnBO
PjDFkbccT8xDEGB5Tby+RnIpRBtZ82Jiguwz9V3Zfn/ERnvQZpB7c3QPDnMl1ouJ
GY9Fg/lWOGfBfL4iwrRwPG7eXuXeuEiYZ45lyfNjF5TQ2cn30nL8FWmSNDeN0aZB
XMWQ1V9/SFHvKRy8apg/32rvqy4a4aleRvkHgH6FGmarmgxF2ekxzUrIkiTiOExX
OOEgtbs5Fhct72WiGYPRgxzUtY0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:29 2026 by rpki-client