Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft
File:                     5rGE-nKUtniPAEZzeWmhCOpgUCA.mft (raw, json)
Hash identifier:          3bzINttDhyFiH/72XwM+Hy2aO2trGDbYMa/bkvc9yKM=
Subject key identifier:   96:E7:62:22:DE:BA:86:4E:37:12:32:A2:D7:9E:5C:5D:63:75:B6:A0
Authority key identifier: E6:B1:84:FA:72:94:B6:78:8F:00:46:73:79:69:A1:08:EA:60:50:20
Certificate issuer:       /CN=E6B184FA7294B6788F0046737969A108EA605020
Certificate serial:       0EA6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rGE-nKUtniPAEZzeWmhCOpgUCA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft
Manifest number:          0EA6
Signing time:             Sun 01 Mar 2026 21:28:36 +0000
Manifest this update:     Sun 01 Mar 2026 21:28:36 +0000
Manifest next update:     Mon 02 Mar 2026 03:28:36 +0000
Files and hashes:         1: 5rGE-nKUtniPAEZzeWmhCOpgUCA.crl (hash: xtqssq5DQDrMipdM7g0C5sXhEB+4tgxZuXXrJ/PT7qk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3750 (0xea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B184FA7294B6788F0046737969A108EA605020
        Validity
            Not Before: Mar  1 21:28:36 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=96E76222DEBA864E371232A2D79E5C5D6375B6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:40:a3:be:35:60:7d:93:95:6a:8e:9e:9c:
                    a7:e4:96:8b:64:6f:04:38:fd:5b:a5:57:d6:bf:5b:
                    10:8f:20:de:d1:da:88:4a:e4:de:d0:88:84:04:90:
                    a3:ee:87:32:48:8c:7e:c7:7b:36:ad:89:1f:be:59:
                    06:c6:46:b6:f4:a2:d2:10:77:d1:14:29:24:f3:77:
                    03:f5:ca:09:54:21:ad:92:62:d4:82:8d:30:a3:9a:
                    f7:c9:da:2b:7d:6c:51:00:5b:de:33:80:4c:08:16:
                    25:e9:2e:3c:f4:0d:42:98:2a:f9:7c:1a:c3:a3:57:
                    44:86:6e:25:d5:d4:b2:3a:cf:b7:43:48:ab:9a:ef:
                    0b:b0:92:69:5f:03:3d:73:8b:ed:7b:b2:3f:0b:9a:
                    dd:17:5a:8d:7c:81:d5:8c:f8:25:fe:86:2e:cf:77:
                    55:c2:fc:8b:e2:d4:83:e1:49:bc:9a:c9:08:aa:e6:
                    00:c5:c7:98:86:d4:0d:1e:14:e5:34:fa:25:ce:d9:
                    55:f5:c8:2f:09:16:4c:32:d5:48:36:ba:56:03:67:
                    6e:63:88:6f:91:ab:20:b5:2d:86:d2:68:56:1e:26:
                    42:b2:ff:e3:4c:d2:65:3e:92:bc:ac:47:82:3f:69:
                    d6:fc:40:3d:1b:36:56:1d:a4:a2:ea:13:f7:7e:98:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:62:22:DE:BA:86:4E:37:12:32:A2:D7:9E:5C:5D:63:75:B6:A0
            X509v3 Authority Key Identifier:
                keyid:E6:B1:84:FA:72:94:B6:78:8F:00:46:73:79:69:A1:08:EA:60:50:20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rGE-nKUtniPAEZzeWmhCOpgUCA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:2a:9b:eb:d1:5e:28:e0:f5:54:6d:82:37:65:52:a4:91:
         33:74:09:d6:4a:2b:db:7f:b6:37:fa:19:76:6e:b8:74:fd:ba:
         c2:c9:0c:2f:50:41:a4:5e:c4:6b:c8:64:45:25:79:cc:aa:27:
         5a:92:ec:20:50:b7:5e:b5:aa:5e:58:62:6d:03:aa:2f:e3:6f:
         01:a9:03:8c:4e:c6:cd:d1:06:f6:25:40:99:4a:9c:c5:d9:30:
         a8:16:c1:97:c7:25:00:1e:06:41:26:2e:a2:1e:4d:bf:62:d0:
         ca:69:4f:b8:51:fb:a4:eb:77:6b:c2:56:31:55:07:9b:9d:3e:
         12:d6:7a:fd:90:b7:18:9e:7b:a1:53:71:81:20:0c:17:c8:fa:
         b8:86:ee:cb:35:c8:13:dd:04:c2:5b:a9:c8:13:f7:07:d3:35:
         72:e4:fb:f1:2e:59:5d:be:59:19:cc:4d:aa:68:39:fb:56:69:
         0e:42:f6:7b:7c:5b:79:d4:89:07:7c:37:66:d8:cd:0b:26:f4:
         05:aa:08:0a:73:72:25:8e:1a:51:7e:42:f5:cd:82:5c:cb:f9:
         5c:d4:9b:48:91:4e:c5:ac:34:c5:4a:68:ff:56:b3:46:ea:37:
         4b:e9:9c:70:65:e3:71:b7:6d:26:45:44:1e:df:49:29:c4:6c:
         ac:66:08:c7
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTZC
MTg0RkE3Mjk0QjY3ODhGMDA0NjczNzk2OUExMDhFQTYwNTAyMDAeFw0yNjAzMDEy
MTI4MzZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk2RTc2MjIyREVCQTg2
NEUzNzEyMzJBMkQ3OUU1QzVENjM3NUI2QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgDECjvjVgfZOVao6enKfklotkbwQ4/VulV9a/WxCPIN7R2ohK
5N7QiIQEkKPuhzJIjH7HezatiR++WQbGRrb0otIQd9EUKSTzdwP1yglUIa2SYtSC
jTCjmvfJ2it9bFEAW94zgEwIFiXpLjz0DUKYKvl8GsOjV0SGbiXV1LI6z7dDSKua
7wuwkmlfAz1zi+17sj8Lmt0XWo18gdWM+CX+hi7Pd1XC/Ivi1IPhSbyayQiq5gDF
x5iG1A0eFOU0+iXO2VX1yC8JFkwy1Ug2ulYDZ25jiG+RqyC1LYbSaFYeJkKy/+NM
0mU+krysR4I/adb8QD0bNlYdpKLqE/d+mJC1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUludiIt66hk43EjKi155cXWN1tqAwHwYDVR0jBBgwFoAU5rGE+nKUtniPAEZz
eWmhCOpgUCAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
My81ckdFLW5LVXRuaVBBRVp6ZVdtaENPcGdVQ0EuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzVyR0UtbktVdG5pUEFFWnplV21oQ09wZ1VDQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjMvNXJHRS1uS1V0bmlQ
QUVaemVXbWhDT3BnVUNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJt8Kpvr0V4o4PVUbYI3ZVKkkTN0CdZKK9t/tjf6GXZuuHT9usLJDC9QQaRe
xGvIZEUlecyqJ1qS7CBQt161ql5YYm0Dqi/jbwGpA4xOxs3RBvYlQJlKnMXZMKgW
wZfHJQAeBkEmLqIeTb9i0MppT7hR+6Trd2vCVjFVB5udPhLWev2Qtxiee6FTcYEg
DBfI+riG7ss1yBPdBMJbqcgT9wfTNXLk+/EuWV2+WRnMTapoOftWaQ5C9nt8W3nU
iQd8N2bYzQsm9AWqCApzciWOGlF+QvXNglzL+VzUm0iRTsWsNMVKaP9Ws0bqN0vp
nHBl43G3bSZFRB7fSSnEbKxmCMc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:32 2026 by rpki-client