Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json)
Hash identifier: mtyTCLJJFgx+dfJ1xKqjYWjUDtXKt9nZdsIqRXFVs9k=
Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Certificate serial: 104A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
Manifest number: 104A
Signing time: Wed 05 Nov 2025 20:14:09 +0000
Manifest this update: Wed 05 Nov 2025 20:14:09 +0000
Manifest next update: Thu 06 Nov 2025 02:14:09 +0000
Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: GPyv7zZIZyttfrIqs8Ol/TerEr+6CNEuAvWpb62fXqI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4170 (0x104a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Validity
Not Before: Nov 5 20:14:09 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c:
6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62:
a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5:
2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04:
54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03:
df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db:
c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2:
30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32:
00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92:
4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1:
6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac:
c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4:
24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c:
fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42:
8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc:
30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03:
1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
X509v3 Authority Key Identifier:
keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:69:45:49:2e:ed:e3:4f:d5:79:dd:ac:42:ff:6f:01:79:4b:
ae:21:c5:5e:e0:d3:20:b9:89:a2:2d:56:21:dc:6b:05:c4:12:
f3:a9:4c:8f:8b:a0:18:75:25:bb:1d:d4:62:d3:f0:c6:d8:87:
85:d5:b4:81:a5:f8:ce:7d:5b:e9:56:f0:af:74:ac:92:3b:91:
3c:d8:35:08:b3:a5:32:49:5d:59:fd:34:73:ef:ee:29:11:28:
bf:83:51:ab:13:a7:9a:11:86:9c:7a:b9:37:d0:3b:91:99:04:
79:f8:52:48:df:13:76:aa:55:2d:d8:86:bc:4b:c8:66:8e:f7:
2c:5c:5d:8b:88:27:b2:04:58:0f:fc:1c:e5:fe:e4:c4:79:7f:
13:8c:c2:78:5d:c4:35:77:0c:6a:6f:33:aa:49:73:5d:10:bb:
9b:7e:fb:0d:f3:0a:8d:33:07:59:cc:1b:3c:13:51:13:63:3c:
57:d1:10:f4:c4:ce:7e:12:96:b6:a7:73:71:71:b4:96:d9:db:
94:95:81:9a:92:92:dc:a9:16:5e:3c:c9:3c:77:32:76:33:e2:
bd:47:0a:d8:12:a2:f0:49:f9:84:58:1b:29:1b:ec:8c:61:06:
31:76:c1:07:ca:eb:3b:69:1f:b8:67:73:f0:eb:74:d1:8c:47:
47:b5:db:89
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0
NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNTExMDUy
MDE0MDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD
RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP
WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3
41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1
kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh
2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u
BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO
Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy
OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ
OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABFpRUku7eNP1XndrEL/bwF5S64hxV7g0yC5iaItViHcawXEEvOpTI+LoBh1
Jbsd1GLT8MbYh4XVtIGl+M59W+lW8K90rJI7kTzYNQizpTJJXVn9NHPv7ikRKL+D
UasTp5oRhpx6uTfQO5GZBHn4UkjfE3aqVS3YhrxLyGaO9yxcXYuIJ7IEWA/8HOX+
5MR5fxOMwnhdxDV3DGpvM6pJc10Qu5t++w3zCo0zB1nMGzwTURNjPFfREPTEzn4S
lranc3FxtJbZ25SVgZqSktypFl48yTx3MnYz4r1HCtgSovBJ+YRYGykb7IxhBjF2
wQfK6ztpH7hnc/DrdNGMR0e124k=
-----END CERTIFICATE-----
Generated at Thu Nov 6 02:15:34 2025 by rpki-client