Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.mft
File: yGYvK0iswHfpWADlqpLOFtJuHeo.mft (raw, json)
Hash identifier: Je0s3i4WkJco+1lfjcnSx6PcAFwzYXFC7cnU3hVAKHw=
Subject key identifier: 94:7C:DE:36:14:F0:27:AF:B0:FD:1C:6D:9E:D9:F8:27:17:0D:63:27
Authority key identifier: C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA
Certificate issuer: /CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA
Certificate serial: 048E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.mft
Manifest number: 0488
Signing time: Sun 01 Mar 2026 17:28:14 +0000
Manifest this update: Sun 01 Mar 2026 17:28:14 +0000
Manifest next update: Sun 01 Mar 2026 23:28:14 +0000
Files and hashes: 1: 4IPxAcBB8d60RbMzQW1q_Zk5spc.roa (hash: RSRbi+VJkcVS/ILldg1kKiHadRJWcM1Mmw3Dk4goFaM=)
2: uW_sUHl-3HScavxDrg5eg9_INJ4.roa (hash: reqWK3fVKlZA3fra6G1lT9OteuvSXtDOZpPqJhZckac=)
3: yGYvK0iswHfpWADlqpLOFtJuHeo.crl (hash: 0hfiDAHpEgKRnQCYY+IA1HH7Ex7hmOrvRQcdUyEZKYE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166 (0x48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA
Validity
Not Before: Mar 1 17:28:14 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=947CDE3614F027AFB0FD1C6D9ED9F827170D6327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:3e:ae:64:8f:6b:31:45:e5:ec:51:02:5b:
5b:15:41:6a:62:0e:d2:df:92:ca:34:b3:fc:9f:d4:
d3:f5:93:40:bd:8e:a4:a3:4b:84:38:04:db:3a:bf:
df:bb:a9:b7:7a:0f:28:7b:12:48:54:ac:52:48:55:
1e:99:93:0c:10:b7:06:0a:80:3c:0c:98:79:20:67:
1e:2d:33:c3:fb:37:8d:30:7e:ea:17:e1:f2:27:22:
c0:a9:fc:2e:a1:53:e5:ac:b5:25:de:93:45:a2:b6:
1b:4a:7b:89:81:2f:32:c2:8d:98:50:f3:23:0b:22:
88:4d:77:2f:90:8b:20:e9:dd:35:35:af:8a:bb:e5:
8f:7e:50:5d:88:98:07:06:9e:3a:e2:8a:81:a7:83:
1a:9a:6b:c0:45:1d:9c:ab:18:52:d4:6d:6d:85:35:
29:a7:08:1f:00:49:4e:97:ec:43:48:f4:5f:54:6e:
0a:1e:6a:7d:a0:5e:45:e1:df:7e:85:fe:22:be:cc:
22:b3:8b:53:86:64:b7:90:c4:60:84:6f:40:a3:0f:
61:e9:29:bd:a7:44:c4:73:64:be:ba:4e:69:e2:dc:
8c:09:40:c0:00:76:9e:81:ab:17:95:d7:53:07:0f:
1f:b2:a1:b6:f7:d2:b4:54:a0:3c:31:43:82:cc:d0:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7C:DE:36:14:F0:27:AF:B0:FD:1C:6D:9E:D9:F8:27:17:0D:63:27
X509v3 Authority Key Identifier:
keyid:C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:88:76:a8:6a:03:75:ff:56:31:0f:ac:63:6d:fa:2c:ae:
29:a9:21:7b:71:96:df:04:85:c1:71:3f:57:5b:d8:10:2f:ab:
65:16:d9:86:ec:cb:38:de:7b:6f:c5:85:df:96:44:3d:c6:44:
18:6d:6c:c6:0a:36:99:f2:65:e7:66:db:a1:0c:3c:f1:6d:00:
b8:af:10:41:f1:a0:74:71:2a:d3:8a:41:6e:70:f1:92:74:b5:
99:9a:53:26:b1:45:5d:87:b1:d2:42:4e:b2:78:65:58:7b:b4:
91:3c:61:e0:d9:ec:18:8d:6f:3b:e1:54:f3:90:81:42:3c:bc:
d5:2f:e8:69:76:73:b2:e2:aa:e2:55:d0:10:69:62:54:43:e7:
41:ef:da:db:e0:6b:d1:ac:c9:78:d3:62:76:26:50:ae:3f:3c:
80:f3:27:c7:41:f8:8c:92:97:b5:63:3d:07:58:44:9b:07:dc:
9d:70:e3:2c:98:4b:14:62:3e:fb:ec:d0:c9:00:43:ce:e1:dc:
99:0b:fc:71:6e:86:49:95:83:06:0d:2e:52:b4:08:c9:88:08:
5e:7c:78:ac:a6:5b:c5:8c:4c:91:ad:2b:48:0e:c8:da:92:1c:
a2:dd:5a:f5:0a:bd:e4:02:c8:bf:f3:ec:19:9a:86:21:8e:60:
63:2f:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:29 2026 by rpki-client