Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: MB/W+quQ37wMD8njglDPxGRqx1W98ZIT7ikDRQk3ldA=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: A618
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 4A54
Signing time: Sun 01 Mar 2026 21:28:59 +0000
Manifest this update: Sun 01 Mar 2026 21:28:58 +0000
Manifest next update: Mon 02 Mar 2026 03:28:58 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: Umga1BRngsyoDPSxiZNVUwy06emKmKG7F7GOxGMgWxY=)
2: XxXXhggs9aGA0bndFttepY0P3Go.roa (hash: P1p4E28892w17aiBPhnU6+t1s0Pc9IES7M2JO7Fn+yY=)
3: fjaEc_mVudU9HIGtG2H2aVPQ2yE.roa (hash: 6WVd7iWZJDykzdlbaLY2yeHONKcQ16z85Q2rPg1BK80=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42520 (0xa618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Mar 1 21:28:58 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:68:67:4d:c7:53:18:48:dd:46:74:84:95:f7:41:7b:00:b7:
41:4b:36:f1:cb:a5:97:6a:23:0b:bf:90:e0:9a:10:f1:f9:59:
76:59:b1:30:8a:a7:0c:a1:08:7a:5b:24:d9:85:1d:6b:09:78:
ae:4a:06:ce:e1:1a:13:ff:90:a6:28:14:8e:e0:6c:16:3c:02:
e5:bf:44:57:f0:3f:d3:0c:4d:1e:31:72:ff:bd:8b:f7:10:56:
b9:24:e8:01:13:ca:57:c9:27:8b:5b:e8:8f:52:aa:07:c4:17:
87:71:a0:00:20:9a:e8:eb:95:83:1f:41:2b:34:5a:7d:42:a0:
20:0f:92:dd:8a:e9:71:1c:10:7f:76:a3:70:2d:d4:2d:d5:6b:
51:43:71:ea:72:bf:eb:8d:2c:0f:3b:8e:2a:bb:8c:dd:f3:dd:
18:5a:d7:b9:d4:44:4c:79:0b:1b:bd:3d:39:41:56:70:4a:4e:
df:88:b1:1f:ff:15:d5:a8:51:01:3c:1c:3f:03:4c:1e:32:2e:
9b:71:ba:cb:a1:b8:00:c1:21:f4:0f:1f:54:47:dd:37:c5:9a:
4b:2c:c1:77:ea:ef:55:4d:1c:8d:41:0c:05:31:32:af:77:72:
c8:0c:b1:e7:6b:52:20:55:96:55:3e:52:a7:ee:54:89:c2:e8:
65:13:ec:b9
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIDAKYYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy
QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjYwMzAx
MjEyODU4WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg1Qzg4NjM3NUE2QUIx
MzYyNkY0NTQ0OTQ1RDczODcxMjA1N0ZEQUFBMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt6You3wa8NOfZiO2Qb9a6wsJSf2siRT+7KDR4GV3SebIOQbC
aVqB7uD4nzm47KOlroVhsRRw+tIQg5uw8lu4QAP0ScxZJovwuhymVG8A1YKp0nJX
u0Z9A2vSlzY5d2eGnmq1Zx5io1HY25Szs1xxAw1DqEkqkiXuZx2TEZONGjUyrHU8
LHUXVn+zzFndAAJ7WCLoMMO1/U3h3Rp4PU9jxNbqIFkgyl4p+MCdpFSxOgubYKeA
hGbKddTMc82/6J95saMP9PokC4GaS35hQBlL+7BC/xO7QYur0lJd8UzK0Y50xV3S
xdA5dbJDbupot2znFuxrwjtFIDeeHCE+aiMmcQIDAQABo4ICDDCCAggwHQYDVR0O
BBYEFFyIY3WmqxNib0VElF1zhxIFf9qqMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ
UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS
oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw
OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX
MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB
/wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v
cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4LzBxdHNtMjRXVXpU
QU10QlIxZng5RlVmazQxTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j
bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBRaGdNx1MYSN1GdISV90F7ALdBSzbxy6WXaiMLv5DgmhDx+Vl2WbEwiqcM
oQh6WyTZhR1rCXiuSgbO4RoT/5CmKBSO4GwWPALlv0RX8D/TDE0eMXL/vYv3EFa5
JOgBE8pXySeLW+iPUqoHxBeHcaAAIJro65WDH0ErNFp9QqAgD5LdiulxHBB/dqNw
LdQt1WtRQ3Hqcr/rjSwPO44qu4zd890YWte51ERMeQsbvT05QVZwSk7fiLEf/xXV
qFEBPBw/A0weMi6bcbrLobgAwSH0Dx9UR903xZpLLMF36u9VTRyNQQwFMTKvd3LI
DLHna1IgVZZVPlKn7lSJwuhlE+y5
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:55 2026 by rpki-client