Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft
File: 0l8rHfhFF12JkzFKs-8VOushUQM.mft (raw, json)
Hash identifier: sC62kz+hKKVeQeNlzakxhjOWx9n2svkiiQWFjWoM2NQ=
Subject key identifier: AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50
Authority key identifier: D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03
Certificate issuer: /CN=D25F2B1DF845175D8993314AB3EF153AEB215103
Certificate serial: 64
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft
Manifest number: 63
Signing time: Wed 05 Nov 2025 06:41:11 +0000
Manifest this update: Wed 05 Nov 2025 06:41:11 +0000
Manifest next update: Wed 05 Nov 2025 12:41:11 +0000
Files and hashes: 1: 0l8rHfhFF12JkzFKs-8VOushUQM.crl (hash: wTRuLMBi4Zk0bBb2rx7QFKBLBoELRqtCrZY437UWEg8=)
2: AGriyG3XsaomyXY3wqP5qpGbufk.roa (hash: 43km3iEPjFQcdhRCmSjkh6AivcIkq02LE0ll+nx4s3g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25F2B1DF845175D8993314AB3EF153AEB215103
Validity
Not Before: Nov 5 06:41:11 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=AAD1ABC0C457D5B68BBDE599A858F4DBC37A0E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:9e:04:e6:0b:2a:b4:dc:ca:7f:5f:75:28:
86:85:89:d0:57:c6:78:3b:f9:68:1d:c1:67:df:84:
ee:89:9f:4c:ff:3d:9a:0f:df:6f:ad:68:82:23:db:
aa:06:82:ac:e7:b1:3c:89:45:71:b9:e6:fe:19:a2:
fd:d5:b0:80:53:d5:99:38:5b:8e:70:e0:cd:a5:d1:
7e:5b:e4:86:24:91:f2:4e:b2:66:2e:c5:94:ba:8a:
03:e3:6e:62:ae:d6:39:ae:3e:89:5e:4a:a8:83:c2:
d7:b1:dd:32:5f:9e:4c:97:bb:e3:71:0f:0f:e7:3e:
d1:6a:d8:3d:14:24:d4:b9:87:71:aa:66:25:24:7a:
32:b1:7f:78:8e:87:f1:5d:52:ea:a8:bd:3d:7f:75:
b7:77:13:fd:dc:cb:64:c2:19:a5:39:24:eb:42:94:
5e:ef:88:06:4e:4e:33:a8:a9:fd:b6:0c:5d:39:ea:
d1:6b:88:f7:bb:0e:aa:7e:ea:69:ce:56:2b:21:28:
01:90:af:90:26:6c:92:dd:2c:de:ef:0d:30:a8:a0:
4f:6f:39:7e:76:54:63:5f:90:2a:e2:0f:6c:de:2e:
3c:4e:b9:a5:4d:d5:cd:64:72:c9:69:6b:02:92:b7:
a8:62:0d:b4:10:b8:f5:1f:e6:5d:d5:1a:32:21:9c:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50
X509v3 Authority Key Identifier:
keyid:D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f6:d8:70:11:09:75:5e:14:8c:96:e5:86:e6:75:fe:fe:5b:
e2:bb:be:4a:9d:ac:26:e8:36:9f:8c:93:24:8c:70:1b:63:d4:
1b:99:df:07:93:ed:78:9b:7b:d0:74:5a:4e:b1:70:f5:86:3a:
e2:a5:75:c1:45:f1:a7:d7:a9:f2:8f:2b:b5:92:f6:dc:64:7d:
1a:a7:fa:81:42:b9:10:2e:ea:df:55:94:dc:9c:01:05:a8:3d:
ff:62:b1:6f:01:5e:92:a2:d5:40:14:24:2b:6a:e6:dd:dc:da:
32:0b:42:1c:4b:62:c7:3b:f9:05:35:9c:ec:3c:11:9e:97:cc:
d3:3d:91:b8:cd:2e:74:ac:8d:e8:9b:23:96:ba:d7:b0:93:e8:
a8:98:5f:b2:b0:ae:58:d2:e8:00:41:aa:37:77:86:07:cc:6b:
d8:4f:a6:b0:25:cb:8e:20:80:84:9e:d5:f5:d5:53:69:fe:1b:
5e:9c:24:31:41:b2:eb:c2:ed:9f:c3:9e:4f:54:c8:a7:a1:7a:
29:a4:3e:91:8b:61:5d:89:5b:31:b7:1e:68:6b:20:24:26:f2:
64:57:72:94:74:b3:0a:79:ea:ac:b6:f5:42:63:be:94:71:8a:
e4:cb:0a:27:aa:77:82:86:cb:00:30:cf:61:67:67:f0:96:31:
20:50:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:16:37 2025 by rpki-client