Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json)
Hash identifier: IK+Ofjl2kqM+0n4RajW/rZIP64y7FSaCayuIENvJzYs=
Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199
Certificate serial: 0FC7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
Manifest number: 0FC7
Signing time: Wed 13 Aug 2025 14:02:36 +0000
Manifest this update: Wed 13 Aug 2025 14:02:36 +0000
Manifest next update: Wed 13 Aug 2025 20:02:36 +0000
Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: wxOsBviE8/kfAin8awj6cSEEz76gIqNB8Kg9N4p2WeE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4039 (0xfc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199
Validity
Not Before: Aug 13 14:02:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b:
8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40:
7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04:
80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c:
09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54:
d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26:
bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4:
f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd:
99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b:
77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66:
82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc:
75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6:
fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45:
14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79:
b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d:
19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c:
6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
X509v3 Authority Key Identifier:
keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:66:ea:8e:96:e4:ec:a7:0c:cf:76:da:cd:0e:42:b4:09:
1b:d4:46:0a:18:cc:45:94:d8:fb:7c:a4:2b:e5:31:66:8e:99:
ab:63:7e:f6:77:2a:86:ba:15:b5:48:9a:00:41:e2:6e:cb:ae:
9d:0f:0b:62:6d:2a:0a:c3:fd:27:7d:fe:6e:84:c4:92:15:68:
d8:e9:ed:b3:b0:ea:21:54:87:81:a4:23:f4:75:ac:76:4d:38:
65:79:bb:d0:51:df:0a:5e:54:be:63:54:08:c2:bc:1c:8b:72:
e9:9d:f8:59:b3:43:7f:14:57:dc:69:ac:5c:6a:32:18:c3:f3:
d8:6c:b8:8b:88:ec:1f:b6:69:20:11:cf:46:1d:fb:7f:1b:3f:
8f:6c:d8:2a:86:81:60:d9:21:12:eb:ab:f1:62:2b:4b:de:ef:
f6:3b:44:a3:ce:5f:6d:f0:68:8b:28:fa:04:d9:00:b6:bc:e0:
74:48:96:02:2d:df:a4:5e:d4:9f:e8:95:83:78:a4:ef:db:33:
65:47:d9:42:36:8c:3f:e8:ad:38:47:8e:bc:d9:5e:92:3b:72:
b5:4b:f0:d1:26:bd:94:19:32:52:a9:03:e6:d5:ef:33:2c:4e:
06:3f:c1:ff:99:51:4e:ea:dd:c8:b6:9c:21:8c:3f:b0:23:12:
7a:e8:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:23:15 2025 by rpki-client