Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json)
Hash identifier: T6RF83C6MPanJCYnAY+jE0UWxBznZ03XYJpG9/oUifw=
Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Certificate serial: 07EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
Manifest number: 07EE
Signing time: Sun 22 Jun 2025 02:11:03 +0000
Manifest this update: Sun 22 Jun 2025 02:11:03 +0000
Manifest next update: Sun 22 Jun 2025 08:11:03 +0000
Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: 5+hQCpZ5G+Ejx3mXoIQkBbUj2qphiRrhLdqRtlStuSE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Validity
Not Before: Jun 22 02:11:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1A96673E80786404FE296B91E5825FA196604F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95:
b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56:
ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb:
3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a:
a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d:
80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74:
3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d:
dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80:
69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08:
09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5:
af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36:
71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b:
4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81:
3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94:
06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9:
23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37:
2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
X509v3 Authority Key Identifier:
keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:bc:f9:e7:05:11:45:06:a4:1c:62:b0:34:28:89:d9:09:7a:
22:bb:1f:d5:94:dc:7f:da:ab:9f:64:60:13:8d:b0:b2:c2:7e:
2f:dc:f3:c2:34:e3:50:46:f0:81:d1:3e:da:78:9b:17:91:6a:
c0:d1:99:81:f7:7f:08:2e:5c:af:44:c0:06:5e:2f:7a:58:4e:
25:6c:72:b0:f3:63:f6:da:fe:29:b6:d6:31:bc:d2:52:73:52:
0e:58:1f:06:fe:0d:4d:5a:c4:48:a8:cf:89:76:74:8d:71:42:
a6:61:1f:bf:37:9d:c4:95:c2:9b:21:21:b0:26:06:21:f4:d5:
18:8f:84:f7:8d:8b:87:cd:95:33:c3:b5:9e:85:06:a2:1e:79:
6f:2d:27:5b:59:ec:54:61:55:74:e9:e2:34:d4:2a:b2:0c:d8:
a5:26:8e:53:62:ac:dd:1e:8a:5e:bd:bb:22:8f:ca:9a:45:01:
a9:1b:1e:76:be:a5:1f:8e:7c:11:aa:7c:e8:5f:d7:3f:35:4d:
45:ba:88:98:f9:ac:a7:d6:52:c1:c0:21:0a:71:87:92:91:06:
a1:de:a9:78:5e:1c:f7:94:97:84:92:b2:53:4f:bf:97:92:48:
39:23:eb:07:64:b0:e5:ab:8b:eb:7b:75:78:c3:84:09:fc:4b:
44:05:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:01:13 2025 by rpki-client