Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
File: -apYG28sznwRZ_8uDAIJY5n_aHQ.mft (raw, json)
Hash identifier: a6jGxgKDsrVCe/nbMJlXzH3EqTPUIRABgtv5gE/aNGY=
Subject key identifier: F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
Authority key identifier: F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
Certificate issuer: /CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Certificate serial: 09FC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
Manifest number: 09FC
Signing time: Wed 05 Nov 2025 12:41:33 +0000
Manifest this update: Wed 05 Nov 2025 12:41:33 +0000
Manifest next update: Wed 05 Nov 2025 18:41:33 +0000
Files and hashes: 1: -apYG28sznwRZ_8uDAIJY5n_aHQ.crl (hash: CD7Vm0xGSbM7kXsTeUdnNdMy0YnVr1E+0jbD0GdMzP0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2556 (0x9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Validity
Not Before: Nov 5 12:41:33 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=F6BE244A9EA105ACF95769A4EE1FE02A7635E532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ac:c3:8a:ec:46:74:e6:0f:fd:0b:2c:51:
0e:25:65:06:03:2f:b6:88:d0:2d:b7:b4:5c:11:2a:
c1:9c:81:61:5f:b8:c5:76:cf:d0:66:9d:49:1b:75:
39:e5:76:e3:07:4c:bb:98:71:9b:c1:b1:19:7d:b2:
47:f7:aa:25:c9:95:fc:15:8c:75:f3:d9:7f:02:26:
54:04:8b:25:4c:01:0d:9c:cf:34:6e:c8:9a:a5:3f:
a7:b9:27:63:76:cd:0c:f7:2d:e0:4d:43:fa:30:55:
c3:ca:59:eb:d9:1d:be:74:84:b4:c9:c5:55:62:40:
c4:ef:aa:3b:3a:c2:42:a2:59:e8:81:e8:ed:df:87:
4c:ae:a7:a9:23:d6:4d:8b:7a:e8:ff:91:15:c4:73:
84:02:79:2d:28:57:ec:8a:9e:ee:52:08:23:0b:9f:
26:2c:73:44:db:61:e4:db:5a:5d:80:b9:53:ca:c4:
29:a5:cf:c1:3a:73:c1:89:ea:49:38:d2:3f:f8:3f:
1e:99:df:a4:09:fd:5c:e4:0c:83:e9:48:2d:c4:72:
1d:65:92:82:40:12:e9:4e:d8:f0:db:85:a5:85:0e:
e6:7c:cb:26:76:69:44:4f:16:44:5e:8e:49:3e:7e:
74:eb:16:87:d6:8b:b9:d7:2b:6f:51:85:0b:66:d3:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
X509v3 Authority Key Identifier:
keyid:F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b1:01:a2:ef:fa:8a:96:0a:d7:c7:e0:ff:b2:22:67:85:7a:
69:e2:15:d7:65:e7:b5:c9:76:8d:e8:07:0b:1c:b9:22:a5:a6:
a6:14:8f:ce:c9:7a:9e:65:61:69:24:71:ea:2c:d4:1f:8a:97:
e0:c9:d2:12:4d:1e:83:08:96:48:77:14:f2:86:1a:ab:ef:69:
1c:92:81:8c:90:48:05:af:a0:9d:c0:33:7d:90:a2:0e:ff:b4:
2b:cc:ca:87:6e:c0:7a:5b:c9:c4:15:f7:61:5f:a0:29:20:5a:
53:12:06:f0:51:97:d2:39:f1:23:d5:a5:3f:4a:3d:f3:01:b9:
43:bc:a9:40:ca:43:d0:68:94:bb:26:99:71:ea:d3:bf:d7:0c:
1d:25:a5:a2:55:4d:7c:b8:62:a7:0c:6d:5a:85:62:a0:7b:72:
97:9e:31:90:b6:b8:e9:30:8d:7f:58:fc:f2:2b:6f:1b:0f:95:
bb:ba:25:29:45:91:b3:85:97:28:0a:5d:f1:b6:40:6f:ac:59:
18:2c:c0:1d:6b:c6:eb:24:9e:8d:06:3e:ea:b6:e8:f1:4a:77:
7b:06:8e:91:33:4b:ed:60:c6:ec:5d:25:03:de:b7:59:cf:47:
d3:dc:38:c9:89:48:2c:ce:e0:cd:4b:9d:37:06:ad:40:0d:7f:
ab:b0:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:49 2025 by rpki-client