Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json)
Hash identifier: sugtP80mCdvMUdAbobQDbVpIVhrKeMG5eoSZrES5kFk=
Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7
Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
Certificate serial: 0B32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
Manifest number: 0B32
Signing time: Wed 05 Nov 2025 12:41:07 +0000
Manifest this update: Wed 05 Nov 2025 12:41:07 +0000
Manifest next update: Wed 05 Nov 2025 18:41:07 +0000
Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: 4RpvPc75VzV7Ik7DT9C57LbATTk+N0+GINsvqEGV0/0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2866 (0xb32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
Validity
Not Before: Nov 5 12:41:07 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f:
59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50:
5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd:
ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b:
03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42:
b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51:
f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da:
92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c:
b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db:
7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7:
89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f:
ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be:
c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc:
66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54:
7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f:
e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57:
39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
X509v3 Authority Key Identifier:
keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:43:57:04:57:14:02:6e:ee:0c:bf:22:9e:7b:fd:1b:8e:83:
7a:8b:68:a4:92:8e:f7:08:00:f0:78:1b:b0:60:39:64:d6:c1:
48:93:eb:c1:f3:76:20:1d:b5:ba:0a:07:31:67:be:b6:c4:03:
51:40:1e:89:77:32:6f:4b:c1:9c:de:80:e3:5f:c2:98:2b:5f:
71:ea:11:35:ca:43:11:10:00:9d:b8:33:c9:47:5c:5f:bf:c5:
73:62:d0:2d:a5:9a:59:e1:26:37:1c:95:86:08:aa:78:cd:1b:
6e:34:ce:0b:c2:10:95:f8:85:e3:ce:dd:45:4c:e2:bc:3a:94:
d9:97:5b:14:bf:7b:a3:81:31:af:85:d2:1b:ee:0f:12:7a:18:
a4:2f:7f:83:9c:67:ab:92:d3:e8:80:0e:bc:41:2d:bf:2c:dc:
40:02:f9:b3:64:4b:21:f3:2a:f7:b6:cd:95:bc:46:5f:59:94:
d8:50:dc:8c:fc:80:9b:c9:a8:bc:4a:81:c1:22:13:3b:89:0b:
84:86:aa:b5:65:73:de:0c:90:dd:2c:3c:83:d1:f3:56:90:36:
83:16:d1:d0:f1:36:a9:4b:c7:90:76:c8:b8:d5:b0:19:4c:06:
bc:8b:8b:a9:11:9e:8a:9b:9f:13:2c:ee:40:30:8d:ef:f3:88:
57:5e:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:08 2025 by rpki-client