Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
File: K_-tbb6GgEycV_BdDDuGxFNO9xg.mft (raw, json)
Hash identifier: lVSry0YRpwtp2zvlionxkicEq0dU93gPe76w7dn54ek=
Subject key identifier: 17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
Authority key identifier: 2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
Certificate issuer: /CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Certificate serial: 0F60
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
Manifest number: 0F60
Signing time: Fri 07 Nov 2025 05:12:53 +0000
Manifest this update: Fri 07 Nov 2025 05:12:53 +0000
Manifest next update: Fri 07 Nov 2025 11:12:53 +0000
Files and hashes: 1: K_-tbb6GgEycV_BdDDuGxFNO9xg.crl (hash: QTYCA0rJ1UD64gRlId7nbLDQZra0Mr27bYSiuhLqQjM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3936 (0xf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Validity
Not Before: Nov 7 05:12:53 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=178D4B5169CDA24E9A65E8CA42C39D0FBDF71C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:93:54:95:aa:c3:53:d8:6c:da:56:3d:b5:
35:8c:0e:5c:19:d3:2b:cd:70:77:75:b0:a3:69:d8:
30:6d:23:94:3d:85:aa:3e:2e:9f:6e:a5:ee:4a:6d:
66:dd:46:42:ce:45:38:e7:f5:e6:2d:19:43:8b:cf:
4e:20:96:5c:4c:a9:48:59:6f:5e:c3:c3:c7:fe:14:
3d:27:bc:1b:6d:ad:28:6c:af:c5:19:8e:ac:44:27:
93:52:76:e5:58:16:b9:b3:1e:a3:ea:cf:1d:a3:ad:
72:b2:fe:ab:30:20:0a:4e:61:b0:a2:b9:1d:d8:9e:
55:bd:25:2a:04:74:81:4f:fd:8c:cc:22:44:4d:2e:
da:88:b8:38:65:0a:03:7a:7e:c7:1f:b1:9a:be:b7:
52:85:b4:ed:6a:78:93:d7:a5:8e:f8:9c:85:c5:7a:
77:48:2a:6e:b9:97:05:ff:29:92:28:90:f1:80:0b:
d8:7c:bc:db:09:40:d1:ed:8e:1c:01:c4:54:7e:08:
4a:b9:21:73:73:3f:83:0b:f0:ee:3a:43:eb:69:67:
b4:c2:e7:a4:35:44:96:5a:66:bc:cc:b2:fe:a2:c8:
8d:58:70:a6:20:e3:ff:9e:b7:bb:ff:9e:f3:18:bf:
c8:da:56:a4:07:87:cc:fc:06:a3:a4:e5:1c:a7:eb:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
X509v3 Authority Key Identifier:
keyid:2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:01:67:c4:45:8b:76:b5:8e:58:74:7f:c5:7f:95:69:ba:c0:
95:fc:e3:e3:0e:47:fd:a0:6b:74:88:89:e2:81:f1:88:2c:e3:
59:ea:1b:74:e6:19:2a:f2:d4:2e:47:58:6e:e5:0c:1e:87:0e:
1a:fc:f0:93:c5:2a:80:c1:34:a9:c4:b2:46:2d:30:40:2a:0c:
f6:5f:5a:d5:65:1e:a6:06:6a:d4:ea:66:89:0f:e3:3e:82:e2:
12:05:40:00:ec:52:15:67:23:ce:99:de:12:ed:ae:df:34:4a:
ae:61:5f:82:03:28:16:68:29:b9:19:57:d3:92:50:99:c7:78:
6e:02:0f:67:2f:af:3a:91:ac:65:1e:c3:ee:c7:05:02:ee:31:
77:08:e1:5e:71:ae:2c:cc:27:ed:f0:f7:cc:52:41:ed:dc:cc:
b0:eb:84:7b:cc:20:20:02:bd:a3:ed:9b:49:52:9b:e1:f9:e0:
ad:81:06:b3:28:41:56:f2:ae:9f:69:73:e2:ba:fc:f0:b9:9c:
29:df:b7:f5:36:4a:23:a2:32:ac:1d:7d:64:6b:db:dc:e6:36:
a0:da:f2:cc:fe:16:1d:7e:61:9b:38:52:30:79:a7:ca:5e:7a:
46:0a:f3:2a:f9:96:f6:6b:38:f7:2a:26:fd:ae:17:5c:7d:d7:
ef:95:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:26:59 2025 by rpki-client