Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
File: 82uLa5gte__1JH2mSO9nP3cW7wg.mft (raw, json)
Hash identifier: PbtuOGEN+MBKIngwenfPIKkZyUf7wvOMh2sOqqKn+kQ=
Subject key identifier: 4F:EF:8A:00:B9:9E:A4:4B:C0:29:C1:2A:98:55:DE:46:B1:99:A9:42
Authority key identifier: F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
Certificate issuer: /CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
Certificate serial: 0DE4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
Manifest number: 0DDF
Signing time: Wed 13 Aug 2025 13:03:28 +0000
Manifest this update: Wed 13 Aug 2025 13:03:28 +0000
Manifest next update: Wed 13 Aug 2025 19:03:28 +0000
Files and hashes: 1: 82uLa5gte__1JH2mSO9nP3cW7wg.crl (hash: XWF6BFrY2fygbsRuisto3+QbzXBeJsqVgNJXCv9m6wc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
Validity
Not Before: Aug 13 13:03:28 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4FEF8A00B99EA44BC029C12A9855DE46B199A942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:9b:da:7e:6f:e3:7a:c4:e2:d7:94:60:f7:
b9:04:28:83:45:87:e6:83:a0:72:fd:77:85:75:72:
87:19:88:b4:97:d5:98:e5:6e:e7:b2:0b:15:3f:66:
3b:d6:12:9e:16:3d:2f:b7:e3:a1:c5:21:b9:15:bd:
30:38:01:50:40:17:30:99:bf:46:f4:d1:e9:c9:c2:
13:fd:01:2e:7c:c2:40:9e:2c:66:e6:f5:09:1e:77:
e8:49:4a:1f:50:f7:23:68:a1:07:64:38:13:b5:30:
59:2b:58:85:9f:5d:ad:35:7e:2a:79:b2:69:86:cf:
39:0e:8a:4d:b5:af:17:6a:49:2d:ae:79:16:6c:f7:
ff:09:eb:9c:50:21:da:fa:d2:7a:3f:53:06:a4:36:
75:28:2a:61:ba:44:25:1f:2c:8d:d3:15:06:4c:6f:
54:8a:a3:d2:51:8f:2d:84:6f:97:f3:1a:d3:da:0c:
5a:bd:c8:ff:1e:58:cc:d4:ad:ab:e4:7f:d1:c7:5d:
73:f5:60:d4:39:94:dc:f5:ed:d9:8f:bb:a5:a6:e1:
34:4e:ad:f6:d9:02:51:fb:27:c3:a1:ee:29:88:f3:
df:0a:43:95:2e:f1:4e:9d:7d:5f:ce:b3:d6:4b:cf:
13:1e:8f:d2:a3:54:93:cf:45:9b:6b:e1:e0:98:4e:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:8A:00:B9:9E:A4:4B:C0:29:C1:2A:98:55:DE:46:B1:99:A9:42
X509v3 Authority Key Identifier:
keyid:F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:76:13:f2:1a:fc:10:d8:f1:22:bb:d4:a7:13:54:f7:f3:a1:
ff:4e:4b:79:40:a2:f4:67:00:96:05:88:b4:22:8b:39:b5:df:
92:42:ef:32:7d:b2:84:a1:4a:01:8b:0a:09:2d:48:a2:a3:ae:
b6:3d:30:f9:50:62:76:97:40:4b:f9:21:a1:9b:fe:04:06:b2:
5b:4e:fd:ff:7c:93:20:bf:db:45:78:05:8b:89:4d:7c:e4:23:
3f:d1:41:ad:6c:4b:38:d1:9a:b6:b7:ca:27:d6:5a:17:76:8b:
99:4a:8b:1e:bb:a5:9f:0f:bc:0b:97:b7:59:8b:6f:b6:13:86:
15:db:67:26:3b:53:25:06:b8:a1:5d:0b:7e:e8:92:6b:36:72:
8d:af:e3:a2:70:d8:4c:9e:99:d5:d2:4c:20:89:c6:f4:13:db:
12:46:b1:41:e9:27:9b:7b:ce:e6:9a:8b:3b:82:14:e1:fd:0f:
e4:6c:6c:61:92:db:22:43:57:0a:31:bd:56:aa:fe:98:f7:6f:
a1:5e:ca:5d:eb:67:b9:72:72:6a:1d:a4:a1:68:ac:ea:a9:2b:
0c:46:d8:35:55:b5:39:82:fd:54:c1:db:e9:73:b8:0f:0c:d5:
a1:74:55:27:6c:60:1d:43:b6:3e:e1:f6:5d:bc:38:0d:da:0f:
9f:36:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:14:13 2025 by rpki-client