Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
File: 1cLOEmHln9dtPj-wDl66jkTaMMk.mft (raw, json)
Hash identifier: ZGU/kMnUKFH21G9wbJT9k1Q4VFcVJORE63uvE+ChVZU=
Subject key identifier: 73:2E:7B:1C:3B:DB:ED:46:1E:23:94:5E:D8:FE:15:3E:BE:65:67:F8
Authority key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9
Certificate issuer: /CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9
Certificate serial: 04DE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
Manifest number: 04DA
Signing time: Fri 20 Jun 2025 15:43:51 +0000
Manifest this update: Fri 20 Jun 2025 15:43:51 +0000
Manifest next update: Fri 20 Jun 2025 21:43:51 +0000
Files and hashes: 1: 1cLOEmHln9dtPj-wDl66jkTaMMk.crl (hash: LKXgI25s4UYAe/fp/MJP1o2L7/tS5n5gHDJ+MOWIq+w=)
2: 37YW15iLsWmoG_oPYuIHXvuuBIc.roa (hash: pSKQ7bWnbwbE/tXIoQ9xSOGuzx2kr+0GffJUKBbHHtY=)
3: 6tZ1PL_nWX5MjFotFyIopnr5Exc.roa (hash: jzlE9qZ3+so7n9Amj5N0YsNe4YAdpgMvcCvTOPlZ8mY=)
4: VcylARub8mZSef4yflS9wcetRkg.roa (hash: ppcUX4GT6DPoQpfAw+ymbHChfU33r/5rAdK0ayKsrf0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9
Validity
Not Before: Jun 20 15:43:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=732E7B1C3BDBED461E23945ED8FE153EBE6567F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:98:24:46:68:f3:90:4d:3e:03:10:92:59:
b4:34:35:a1:3a:a0:c6:2d:8c:ce:e3:55:0c:a6:30:
10:90:74:ce:e2:76:73:7f:30:29:70:ee:04:be:73:
ff:18:e8:43:b6:a5:c2:7d:8f:da:c5:e7:6b:50:3c:
eb:60:d5:f2:09:c8:37:83:16:b7:16:a2:4a:c8:ec:
c9:0b:3a:57:f0:4a:3b:03:a6:54:26:c3:2e:ce:fd:
3c:70:51:03:0e:15:f7:36:b3:63:ff:2c:0c:a8:00:
13:d7:03:a7:78:de:ec:4a:4c:97:4c:fe:f9:b9:ad:
a7:bf:46:ad:7a:dd:bd:dd:a5:5c:fd:2d:3a:d6:f0:
a4:2f:92:44:66:81:ba:a3:1b:63:f4:b5:8b:96:7d:
9c:d8:eb:db:f3:7f:4c:d7:71:6c:eb:d8:39:84:f8:
d0:57:9a:89:9a:99:d1:4a:61:b2:13:a3:bd:8d:98:
6e:b9:67:f6:f1:ce:cf:bf:ff:8c:ff:71:d2:dc:de:
83:e5:37:9b:25:59:58:b8:b8:be:66:91:f6:1b:36:
d9:e1:c5:4c:f4:30:5d:27:e5:04:0d:23:e2:f8:f8:
11:60:ce:74:16:93:41:94:5c:3d:1b:84:6b:46:32:
08:c8:b5:43:c6:6d:91:0a:52:66:f5:c0:ea:86:db:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2E:7B:1C:3B:DB:ED:46:1E:23:94:5E:D8:FE:15:3E:BE:65:67:F8
X509v3 Authority Key Identifier:
keyid:D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1b:0f:40:30:59:06:b4:5b:05:4c:e0:f0:01:2f:40:0c:80:
54:97:b4:4b:7f:d5:b9:6b:4d:35:d3:65:dd:d0:9e:28:4b:97:
de:1a:a5:2e:81:f0:bb:ba:8e:9b:c0:2b:d3:a0:c8:96:41:76:
4a:5e:71:0f:8f:ee:2f:0c:fa:78:c6:94:4f:a1:70:0d:aa:ac:
2c:c7:53:00:e3:ce:b8:8b:9a:73:cc:96:38:36:57:78:49:dd:
4e:61:10:94:66:a0:fd:39:81:e1:ad:3b:78:7d:a6:17:d7:64:
d1:a8:d8:7d:9d:22:9b:e7:ce:93:8f:03:f7:01:13:55:87:4b:
fb:7b:b4:94:da:9c:0c:f5:61:73:31:74:94:51:32:96:69:93:
b4:c0:06:8f:1d:93:9b:f4:65:c6:a1:67:24:38:68:79:ef:fc:
28:1a:bf:00:47:df:a0:38:3d:e9:19:b7:da:ea:29:e2:6d:8d:
6a:41:11:74:00:3b:a8:29:4a:f5:bf:80:bc:27:62:4b:13:09:
4a:67:e7:f4:be:5d:34:43:60:78:0b:2e:c6:54:ff:9a:18:9d:
c5:19:c3:61:4f:3e:59:11:f6:f9:63:9a:64:97:42:e7:1f:33:
68:37:5d:91:41:6c:e2:1b:9d:70:20:ca:1e:e6:bb:f0:24:63:
76:d4:84:9c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDVD
MkNFMTI2MUU1OUZENzZEM0UzRkIwMEU1RUJBOEU0NERBMzBDOTAeFw0yNTA2MjAx
NTQzNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDczMkU3QjFDM0JEQkVE
NDYxRTIzOTQ1RUQ4RkUxNTNFQkU2NTY3RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCuJgkRmjzkE0+AxCSWbQ0NaE6oMYtjM7jVQymMBCQdM7idnN/
MClw7gS+c/8Y6EO2pcJ9j9rF52tQPOtg1fIJyDeDFrcWokrI7MkLOlfwSjsDplQm
wy7O/TxwUQMOFfc2s2P/LAyoABPXA6d43uxKTJdM/vm5rae/Rq163b3dpVz9LTrW
8KQvkkRmgbqjG2P0tYuWfZzY69vzf0zXcWzr2DmE+NBXmomamdFKYbITo72NmG65
Z/bxzs+//4z/cdLc3oPlN5slWVi4uL5mkfYbNtnhxUz0MF0n5QQNI+L4+BFgznQW
k0GUXD0bhGtGMgjItUPGbZEKUmb1wOqG22nlAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUcy57HDvb7UYeI5Re2P4VPr5lZ/gwHwYDVR0jBBgwFoAU1cLOEmHln9dtPj+w
Dl66jkTaMMkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk0
My8xY0xPRW1IbG45ZHRQai13RGw2NmprVGFNTWsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzFjTE9FbUhsbjlkdFBqLXdEbDY2amtUYU1Nay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NDMvMWNMT0VtSGxuOWR0
UGotd0RsNjZqa1RhTU1rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMkbD0AwWQa0WwVM4PABL0AMgFSXtEt/1blrTTXTZd3QnihLl94apS6B8Lu6
jpvAK9OgyJZBdkpecQ+P7i8M+njGlE+hcA2qrCzHUwDjzriLmnPMljg2V3hJ3U5h
EJRmoP05geGtO3h9phfXZNGo2H2dIpvnzpOPA/cBE1WHS/t7tJTanAz1YXMxdJRR
MpZpk7TABo8dk5v0ZcahZyQ4aHnv/CgavwBH36A4PekZt9rqKeJtjWpBEXQAO6gp
SvW/gLwnYksTCUpn5/S+XTRDYHgLLsZU/5oYncUZw2FPPlkR9vljmmSXQucfM2g3
XZFBbOIbnXAgyh7mu/AkY3bUhJw=
-----END CERTIFICATE-----
Generated at Fri Jun 20 23:09:31 2025 by rpki-client