Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier: WpGJzBH/lSIXx8H5e4Ji+P9GgomeO7uYWioiw1NU4ZQ=
Subject key identifier: 20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer: /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial: 239D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number: 2397
Signing time: Sun 01 Mar 2026 16:30:22 +0000
Manifest this update: Sun 01 Mar 2026 16:30:22 +0000
Manifest next update: Sun 01 Mar 2026 22:30:22 +0000
Files and hashes: 1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: ap+JMcxuOJOA2z8FYGhfCf9lk0YWh1089ZGIULsBiUc=)
2: Jjq7lUGmENI2hGsHBVMBajc7AM0.roa (hash: p6PoxLf28mqVaxNc2P0/8WawjpfYf7LL9ddnWyfyznY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9117 (0x239d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Validity
Not Before: Mar 1 16:30:22 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2078E015442FC65DBF7411835879235714E226A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
X509v3 Authority Key Identifier:
keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:80:23:67:0b:b9:88:6b:76:dd:15:16:e0:4e:15:06:3e:0e:
ac:59:c7:39:ba:4e:47:d5:23:26:09:b0:a7:ed:58:02:ec:dd:
ba:d0:3d:87:c8:22:10:d4:73:a7:ff:d8:67:eb:19:16:54:0b:
a0:00:50:99:82:66:ea:5a:a3:6e:16:e7:86:81:2c:3b:80:2f:
6c:c3:4a:90:9e:ad:1c:18:9d:20:fd:b6:94:b8:f6:40:47:8e:
78:87:3f:ac:5d:31:d2:7d:bf:3c:ab:c4:ff:4e:9f:d8:ca:49:
d0:2f:c9:32:e0:41:69:99:a7:f7:ae:6d:c4:0d:ff:bf:56:0d:
13:f1:df:e7:18:df:18:a5:b6:f0:7e:45:ab:2b:40:2a:bc:a6:
91:86:c8:45:b7:de:ad:80:8a:55:71:d0:b7:ff:76:62:d1:8b:
ea:ba:13:69:f2:c1:ea:cf:83:84:b1:69:34:6d:1d:4a:60:72:
64:6d:9d:57:11:1e:33:73:e0:b8:d1:e8:4b:d0:6b:7c:94:7f:
64:51:3d:d2:d1:61:70:7b:18:f5:13:91:c8:f7:5f:49:35:d8:
e5:ce:cf:4f:68:9a:ba:43:f4:da:30:c8:a0:d1:05:a3:3a:ae:
c3:97:f9:50:6a:41:47:d2:dc:7b:f2:39:21:69:e9:e4:b9:69:
3c:75:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:47 2026 by rpki-client