Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.mft
File: UgcnAEPag5sInL-JHVe0GrI5rYo.mft (raw, json)
Hash identifier: bWDDLXb9N8FmNLZyKaIOTA3xmO/Wo1lIFN1SLJYgYcI=
Subject key identifier: 07:6B:FC:AB:6C:1B:91:6D:A2:F5:0F:1A:9F:03:3F:91:66:7C:4A:22
Authority key identifier: 52:07:27:00:43:DA:83:9B:08:9C:BF:89:1D:57:B4:1A:B2:39:AD:8A
Certificate issuer: /CN=5207270043DA839B089CBF891D57B41AB239AD8A
Certificate serial: 08D3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UgcnAEPag5sInL-JHVe0GrI5rYo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.mft
Manifest number: 08D3
Signing time: Sat 21 Jun 2025 20:14:24 +0000
Manifest this update: Sat 21 Jun 2025 20:14:24 +0000
Manifest next update: Sun 22 Jun 2025 02:14:24 +0000
Files and hashes: 1: UgcnAEPag5sInL-JHVe0GrI5rYo.crl (hash: Dch7lUAPyryhhfmxU2zsAhTN09uCOXpUePprCMLgvZo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5207270043DA839B089CBF891D57B41AB239AD8A
Validity
Not Before: Jun 21 20:14:24 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=076BFCAB6C1B916DA2F50F1A9F033F91667C4A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:7c:17:61:a5:b7:97:2d:83:0c:08:aa:14:
d8:8c:da:f3:0e:a4:fc:c6:60:69:23:35:d3:df:a5:
20:17:4c:f8:ca:fd:24:d5:c1:f9:f7:8c:87:fd:a4:
13:37:70:b9:a7:1a:c6:76:5a:ff:65:eb:00:3b:cb:
ad:70:e4:62:6e:f6:50:78:0e:c8:91:02:42:ec:a8:
27:89:a2:d7:b2:94:c8:85:90:8f:2a:4c:b5:19:14:
42:33:cb:83:e8:38:27:72:1b:29:71:b5:41:2e:0f:
54:25:dd:8b:f0:ef:4b:32:1f:5f:12:dd:c7:d0:7f:
4a:db:7b:a1:21:0e:dd:b8:75:97:d2:05:98:95:13:
81:44:09:41:d6:8a:14:c0:b5:a1:f0:1c:8c:a1:a3:
d5:ad:fe:da:d8:ac:a9:6b:bf:54:27:b1:96:6b:88:
3b:60:23:36:5e:d1:5d:7a:7c:80:9c:f6:84:40:c8:
2f:88:31:94:f7:9e:bc:50:d2:2e:15:9a:23:df:9c:
20:39:42:88:d7:c5:d7:1a:10:b1:2c:7a:0f:e3:ed:
0d:d9:d7:c2:6f:be:8b:a0:84:51:8f:b2:97:b8:54:
00:f4:b8:7f:3a:44:5d:5f:5d:2b:6a:25:01:02:73:
4c:71:ea:b9:7a:64:61:27:ca:ec:99:79:8a:c1:83:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:FC:AB:6C:1B:91:6D:A2:F5:0F:1A:9F:03:3F:91:66:7C:4A:22
X509v3 Authority Key Identifier:
keyid:52:07:27:00:43:DA:83:9B:08:9C:BF:89:1D:57:B4:1A:B2:39:AD:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UgcnAEPag5sInL-JHVe0GrI5rYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:07:e9:c4:ff:31:cd:19:f0:d8:1e:22:64:23:3d:a9:77:2c:
15:2c:e7:36:84:46:96:26:43:4f:9f:de:a5:24:7c:04:3b:59:
7b:3d:cd:79:58:8c:63:77:92:18:a3:e0:b9:d5:84:a6:5e:f2:
9f:bd:42:3b:af:01:8c:8d:06:88:93:12:ba:53:7d:64:2d:36:
7a:2d:f6:ea:95:73:cc:e2:42:39:f7:19:57:0e:e2:0a:8b:89:
56:31:6c:c4:81:bf:89:b7:59:ab:91:2a:43:6d:6e:7c:49:88:
a2:21:73:99:0a:b4:ed:1b:77:ef:89:17:5a:2c:e5:0b:c3:60:
f3:35:fe:12:3c:8f:6d:a1:c7:d8:26:66:71:d1:84:34:e4:ec:
4c:ac:37:ec:aa:f3:97:c8:4d:4a:d2:7d:a7:52:4e:ea:3e:1d:
40:a7:b8:32:f2:4f:ba:53:85:f0:49:a1:24:c5:4f:ef:64:6b:
59:59:7f:25:3f:e0:df:e0:b1:03:e6:3b:55:1e:ed:51:bd:dc:
06:7b:12:c7:3d:f3:ce:10:dd:0b:a3:e8:1d:13:5d:3a:5e:ce:
3b:1b:22:4c:31:0c:e8:8e:70:2d:0a:bd:a9:13:55:f7:5b:b4:
cc:bf:1f:39:6d:f2:93:bf:30:b7:50:54:97:b0:52:c0:d6:1a:
43:f7:2e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:14:57 2025 by rpki-client