Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft
File: zBtg6j6uZjJNZkoP-s-_dYid_qE.mft (raw, json)
Hash identifier: jGfkADcAX+HW6WvG9R0QBWsQDyUbLINkQt/RbO0KNIw=
Subject key identifier: 5F:A9:EC:A1:25:AC:69:35:21:14:EC:A2:C0:0C:2F:DE:55:20:34:7C
Authority key identifier: CC:1B:60:EA:3E:AE:66:32:4D:66:4A:0F:FA:CF:BF:75:88:9D:FE:A1
Certificate issuer: /CN=CC1B60EA3EAE66324D664A0FFACFBF75889DFEA1
Certificate serial: 09CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zBtg6j6uZjJNZkoP-s-_dYid_qE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft
Manifest number: 09CA
Signing time: Sun 22 Jun 2025 16:13:10 +0000
Manifest this update: Sun 22 Jun 2025 16:13:10 +0000
Manifest next update: Sun 22 Jun 2025 22:13:10 +0000
Files and hashes: 1: zBtg6j6uZjJNZkoP-s-_dYid_qE.crl (hash: mTS5NZ/VYZjYZP8h3YSx6bOdQCql4WinLF7iLzaKHiU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2506 (0x9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC1B60EA3EAE66324D664A0FFACFBF75889DFEA1
Validity
Not Before: Jun 22 16:13:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5FA9ECA125AC69352114ECA2C00C2FDE5520347C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:a8:55:0d:de:e6:44:9e:de:91:34:d5:87:
62:bd:59:01:78:3b:81:5f:0d:2c:14:be:60:10:72:
1f:07:6e:dd:f4:51:6d:f4:88:d3:8d:b8:2b:18:ab:
59:0e:05:22:59:8b:87:35:ff:56:c7:76:eb:77:70:
7d:5b:de:83:f3:bc:e2:39:3b:10:8c:5e:08:c8:e0:
82:1b:66:db:53:a2:cb:0c:02:c6:8a:99:c0:07:f1:
6f:c0:33:8d:8e:3b:15:72:ec:f8:fe:52:79:69:4c:
de:0e:39:55:df:96:c4:73:02:0f:13:7c:7a:8a:61:
96:c5:60:f5:df:3c:5f:e0:7d:3b:ae:09:7d:a4:0f:
37:c2:a1:76:30:2f:e3:a1:be:f2:d3:94:25:b8:55:
b8:4d:5c:3e:a8:02:97:e7:12:78:8d:47:58:33:d9:
dd:93:f9:91:f0:b7:92:e7:8f:21:8f:5a:f6:1d:ed:
71:f7:33:50:61:87:b2:62:a5:82:10:06:ac:6a:49:
e9:79:e8:9e:1f:9a:15:7b:4c:59:34:b0:ab:8b:0b:
ce:60:4f:85:0b:29:0b:4a:48:36:8c:1b:ea:9e:93:
ac:16:c0:aa:a1:e3:98:1c:ad:0e:3e:a3:29:46:fd:
e4:00:92:e3:4b:ab:de:e1:e4:d5:34:1b:7e:1b:cb:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:EC:A1:25:AC:69:35:21:14:EC:A2:C0:0C:2F:DE:55:20:34:7C
X509v3 Authority Key Identifier:
keyid:CC:1B:60:EA:3E:AE:66:32:4D:66:4A:0F:FA:CF:BF:75:88:9D:FE:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zBtg6j6uZjJNZkoP-s-_dYid_qE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/zBtg6j6uZjJNZkoP-s-_dYid_qE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:1c:0f:16:78:e6:75:a8:01:e6:83:23:dd:fb:d4:83:03:
c9:5a:cf:a3:0f:59:64:bb:3a:be:1d:32:3c:9a:ce:58:a1:a3:
5c:d9:94:a9:c4:22:61:5e:18:93:fc:78:59:fc:a2:5b:64:e5:
ef:4d:80:53:54:18:4c:65:85:74:8a:bd:c3:7d:aa:13:54:3b:
d5:42:d6:f3:df:8a:11:08:71:77:fa:1b:f5:99:6c:16:82:ab:
e0:dc:f4:a5:f0:eb:4d:78:53:8b:df:9a:aa:a1:78:20:9a:e0:
cb:1e:1b:66:2f:ef:5a:49:d8:cb:05:fe:d6:73:5c:6b:63:9a:
50:9f:9f:d3:5c:3e:38:0f:e5:19:dd:e2:20:6f:1e:a3:cf:42:
c5:ba:d1:97:bf:04:f9:e2:32:ef:0a:b3:bc:11:97:2d:85:91:
07:32:89:46:4d:f2:fe:25:e0:48:88:01:74:d8:c0:5f:c0:01:
a2:bd:3b:55:b6:20:36:fa:03:80:55:bf:cb:5f:7d:be:f3:ab:
4b:56:e1:87:98:24:fe:2d:3c:e6:23:83:2b:c7:63:78:e1:7f:
76:71:df:b8:83:e0:35:37:f8:a1:2d:17:ca:70:00:ac:d8:fa:
48:78:44:38:52:9c:ab:f0:cc:2a:90:2c:a1:ce:00:22:13:f3:
12:5c:9d:e3
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Mx
QjYwRUEzRUFFNjYzMjRENjY0QTBGRkFDRkJGNzU4ODlERkVBMTAeFw0yNTA2MjIx
NjEzMTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVGQTlFQ0ExMjVBQzY5
MzUyMTE0RUNBMkMwMEMyRkRFNTUyMDM0N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9LahVDd7mRJ7ekTTVh2K9WQF4O4FfDSwUvmAQch8Hbt30UW30
iNONuCsYq1kOBSJZi4c1/1bHdut3cH1b3oPzvOI5OxCMXgjI4IIbZttTossMAsaK
mcAH8W/AM42OOxVy7Pj+UnlpTN4OOVXflsRzAg8TfHqKYZbFYPXfPF/gfTuuCX2k
DzfCoXYwL+OhvvLTlCW4VbhNXD6oApfnEniNR1gz2d2T+ZHwt5LnjyGPWvYd7XH3
M1Bhh7JipYIQBqxqSel56J4fmhV7TFk0sKuLC85gT4ULKQtKSDaMG+qek6wWwKqh
45gcrQ4+oylG/eQAkuNLq97h5NU0G34by4bzAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUX6nsoSWsaTUhFOyiwAwv3lUgNHwwHwYDVR0jBBgwFoAUzBtg6j6uZjJNZkoP
+s+/dYid/qEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
NC96QnRnNmo2dVpqSk5aa29QLXMtX2RZaWRfcUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3pCdGc2ajZ1WmpKTlprb1Atcy1fZFlpZF9xRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjQvekJ0ZzZqNnVaakpO
WmtvUC1zLV9kWWlkX3FFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHlIHA8WeOZ1qAHmgyPd+9SDA8laz6MPWWS7Or4dMjyazliho1zZlKnEImFe
GJP8eFn8oltk5e9NgFNUGExlhXSKvcN9qhNUO9VC1vPfihEIcXf6G/WZbBaCq+Dc
9KXw6014U4vfmqqheCCa4MseG2Yv71pJ2MsF/tZzXGtjmlCfn9NcPjgP5Rnd4iBv
HqPPQsW60Ze/BPniMu8Ks7wRly2FkQcyiUZN8v4l4EiIAXTYwF/AAaK9O1W2IDb6
A4BVv8tffb7zq0tW4YeYJP4tPOYjgyvHY3jhf3Zx37iD4DU3+KEtF8pwAKzY+kh4
RDhSnKvwzCqQLKHOACIT8xJcneM=
-----END CERTIFICATE-----
Generated at Sun Jun 22 22:43:34 2025 by rpki-client