Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
File: AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json)
Hash identifier: vJNfMxzLiEIQj80XfhFyiwk4SX6tHPmbFsL52gKayCw=
Subject key identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 29DA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
Manifest number: 29A0
Signing time: Mon 02 Mar 2026 02:29:08 +0000
Manifest this update: Mon 02 Mar 2026 02:29:08 +0000
Manifest next update: Mon 02 Mar 2026 08:29:08 +0000
Files and hashes: 1: 27bgjmmwbF59YVqphftbVMyneb8.roa (hash: 1uD3TZNTINDyYUqPmv22HJqMul/KVpchJuhXdJl2eeQ=)
2: 4UrDTuI3fRzxDkq9jmbrDmI-UHA.roa (hash: oZG+CE81ah9aXVNLu38K4yiAAENpfLNqjhEmoyhOSrs=)
3: 8UazvGr8myutsZuYchfmJiGlpPU.roa (hash: dwAzogItaSJiR8s2XycaBfjUY/ztu1XyATE78EINMAs=)
4: AMsZswWK7O-X-DZlVodR1j6bKgE.roa (hash: gZ/vAOiZ4ghzLpY/d54TAnLwdYCKR44e6XsJZDWHOuI=)
5: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: II91cfhyoH/pX1F6hyrhduh69BMTSIFYA6bCBU9bzSw=)
6: C6ag7U5RmZ0EYqCxc2v4ET9rKsc.roa (hash: OQBn+27/GulF2o2k19vSK4xICKuvpEdVs6DwC29ENJo=)
7: DidIRSkw-WRcPi5FzKflyO7_D70.roa (hash: g8DB708QXq44Q/8NDczaROW/YsbIAjGxcxz91MAz1ho=)
8: LgcTxi9rn3RrY68Oq4AMCUNBsXI.roa (hash: QlvAFBKmcfZre77hDOMcaOgF9Waw8eFjmdd08teW8Z4=)
9: OjhYk2JTtXMr2VTJQ8SdzwdDT1s.roa (hash: lcodeE3IeVytTqji8Vl/2et7iTCM/vCchqxnNxXe1us=)
10: QWNPUriuPTu9mMN7kkS5vSl3FpQ.roa (hash: wpNrPvLlM/Y/pcvk+2/pS1oFpwzKcTWyZzPhM+/WiEw=)
11: Uu2yjNfB95SbG7-fDjsCIwA9T6g.roa (hash: fN3aXFAbD+RtnMBPuinDNOhG9QamHfd+luJc5OPGm5c=)
12: WndHbjRCw23yWTJ5rI3H19Ad0Pk.roa (hash: K7cZOi+gqIGqw1P04flbzPMyz3gWL3RLQYClc3Qy/yM=)
13: YtgPMpzsRzGXBs45mr1kyGJf1Os.roa (hash: 98gJqd8+/J+xFOWdPMc/FU4rHgZx0N080kCzwFikk9U=)
14: bzHUb37wqq6vZG_XdGOsSODnE5g.roa (hash: esZfW+ZJ3LKtDeHoVr6XI4SDXbU1JFrxpW5XtTZYbBQ=)
15: fBgIpTOxAzFFnzpWsXPx2pB0L6g.roa (hash: zwZxd4I2TQQt/4G3oN3RZ4Tc5bdK7vg8n88gUAbJcwM=)
16: gW4EuJO8f7MZH4a6My2N0BPQo2o.roa (hash: o9zHDf5qvOrfWmIyXAjwjOML9FNKrus9hv6txpKsZBY=)
17: kMtGhQY_DnHonghgB-517K1lQLU.roa (hash: PAz0Hu8Y3D0G++gjB/sjurw0ZoEzzimp8e5HgUHfkEQ=)
18: lUU9VdyhnT40lvxO7cwjESQacmk.roa (hash: dBHKedmYfwwN9CCpggiGn1QUz90iR+s787FT3wXJ3ow=)
19: m7KLpdIkQhlUic2KR1DO-C_kVjY.roa (hash: wbqVDuJjy0gMzAY6r7yd/CaS0ynLzINfV0y7Srll4Pg=)
20: t1LLR_-XYrjVKRkJHwWKmzv5vM8.roa (hash: 7nQf2ITpmzHKe2QQyX0zPlhN6/0hAToZxQzHdoLwcLs=)
21: uOcIBjmNT5CFe4fLuWdjVUr8WCY.roa (hash: mz1JD6lE8OmV/eiKAkFWtQowBvk6JVFFxyyQYyRR8Rs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10714 (0x29da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Mar 2 02:29:08 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0ACA00C337354773164EFA107456DA00F2479420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35:
84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4:
15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5:
55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba:
61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c:
56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0:
bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d:
e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16:
1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60:
c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c:
87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e:
75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c:
fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b:
fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91:
a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70:
b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7:
28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:40:d1:48:55:11:f8:f4:3c:23:65:44:4d:c4:0c:81:ec:41:
ae:4e:f9:2a:c4:6a:0d:0d:03:0a:a4:6b:d4:23:94:1d:8e:c2:
71:08:07:6f:7f:2f:0b:ab:e1:e0:d6:be:4c:05:8a:89:52:02:
4a:de:84:15:9c:31:e9:e7:2b:56:28:1f:07:d6:00:96:db:e5:
44:1b:b9:50:ff:a8:6d:55:e4:9d:ca:5e:85:1a:50:bf:b4:d9:
d1:e8:cf:db:fa:fa:1e:5f:58:1a:a5:dd:a6:90:1e:17:df:58:
65:8e:5c:89:3c:82:8e:56:5c:f1:82:08:22:92:6c:e4:91:72:
37:37:2b:46:3c:6f:c2:e7:1f:de:6f:0e:5b:d4:75:76:a0:c1:
8e:d0:85:8e:eb:df:ee:05:43:44:2b:bf:0b:6a:b5:3a:a4:01:
2f:f2:0d:6c:a8:bd:d9:15:f3:33:b6:24:2d:54:35:4d:85:84:
87:08:9a:35:35:d1:37:f7:78:52:8d:e8:18:27:e9:41:bb:7c:
4f:01:ff:98:0c:91:79:0f:b6:6c:0c:4c:12:67:9a:4e:52:e3:
58:69:9e:ef:fa:ea:11:94:d0:d9:ef:3a:f1:c1:93:d8:86:69:
4f:0f:55:50:a1:1c:fd:e0:d9:88:1c:e2:89:b5:ea:6a:d2:02:
85:54:ed:52
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICKdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy
RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAzMDIw
MjI5MDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBBQ0EwMEMzMzczNTQ3
NzMxNjRFRkExMDc0NTZEQTAwRjI0Nzk0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjR21IvPQlH7ZUWu5iNYScR9d94zn8hN7knCQQxBW3ascRxHqL
hHH5/lawpVXlLOCZ7B7CIBw5/6qDumHhUtU1a6YtOaREkD/lDFbsTj/C2Xe+AQZm
AMiA0LzC40IEuzirQ4aol1MYbelPPVZqIAgN3Fgv9qntFhwZSBq3uUf/HMffITTf
YMnSrvr07WymQNvbha5CHIdMVCkhQIvmSFFxuqVaXnVV+yJur3RJzZtQRqRATPxL
jUWYHynOGup+Vt99W/04R5HxIEcSqiFrMBLrkaKx7Ta0vSYPv43A3n/lcLS0i0By
iRUqVYESpVQc5yhcfPXA3kMH8nbhyHRTYrWbAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUCsoAwzc1R3MWTvoQdFbaAPJHlCAwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J
D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4
OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvQVMxREY3eWhaZy1J
Qm0tSkQ0d0VyMVZ3QU1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAClA0UhVEfj0PCNlRE3EDIHsQa5O+SrEag0NAwqka9QjlB2OwnEIB29/Lwur
4eDWvkwFiolSAkrehBWcMennK1YoHwfWAJbb5UQbuVD/qG1V5J3KXoUaUL+02dHo
z9v6+h5fWBql3aaQHhffWGWOXIk8go5WXPGCCCKSbOSRcjc3K0Y8b8LnH95vDlvU
dXagwY7QhY7r3+4FQ0QrvwtqtTqkAS/yDWyovdkV8zO2JC1UNU2FhIcImjU10Tf3
eFKN6Bgn6UG7fE8B/5gMkXkPtmwMTBJnmk5S41hpnu/66hGU0NnvOvHBk9iGaU8P
VVChHP3g2Ygc4om16mrSAoVU7VI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:49:51 2026 by rpki-client