Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft (raw, json)
Hash identifier: AXDB20E8FBLahZcWmOsUelrs1nSrtIFWqsafruILi1Y=
Subject key identifier: 7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
Authority key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Certificate issuer: /CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Certificate serial: 0867
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
Manifest number: 0867
Signing time: Wed 05 Nov 2025 15:15:22 +0000
Manifest this update: Wed 05 Nov 2025 15:15:22 +0000
Manifest next update: Wed 05 Nov 2025 21:15:22 +0000
Files and hashes: 1: nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl (hash: QwYCcedz5z6yLhm/3vmQUlm+YSVBlqkymWD4BQsImmk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Validity
Not Before: Nov 5 15:15:22 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=7A5721AFCD60A6A8A605AFB2ED2F290CDB873B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:d9:92:c7:fd:89:93:04:00:e3:6d:1f:f9:
8d:7a:54:07:e3:48:eb:59:16:8a:db:e3:6f:93:b3:
49:bf:1f:ed:1f:41:03:4e:ae:18:7b:1b:cc:7e:ee:
2f:28:96:5f:f4:27:03:d6:ed:14:5f:23:bf:70:17:
71:72:1e:a1:ff:74:9c:09:59:6a:b4:f3:d3:cb:de:
43:68:17:f0:c9:b7:b9:f2:3a:d9:1d:25:78:6a:19:
2a:71:0b:06:e7:82:88:f0:48:72:32:fb:fc:92:fe:
91:62:b9:15:ed:84:92:a0:28:f6:4d:b5:c6:0b:e5:
3d:c2:19:de:17:8d:73:2f:98:b8:3e:a6:1d:ea:a4:
20:df:82:f0:1b:3f:c1:20:51:fb:cd:ff:48:ec:1a:
5b:e1:82:14:dd:dd:f9:70:bd:b9:97:73:3a:93:36:
40:c4:d2:40:75:1a:e9:23:9a:22:7c:62:99:a9:e7:
3e:9d:f3:2d:e6:da:90:57:de:50:a2:cb:7d:1d:cf:
d5:fd:45:32:45:b3:e0:3e:5d:39:ba:06:12:4a:c9:
d3:2a:00:75:95:0c:ee:93:5f:c4:a3:3c:94:4c:a1:
94:11:fa:2a:4b:71:10:d6:fd:d4:a9:7e:12:be:f5:
7f:9b:92:ee:c8:81:9f:c4:2e:37:ef:c9:ce:9f:d9:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
X509v3 Authority Key Identifier:
keyid:9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:da:2a:92:7b:65:65:fd:31:53:5c:c3:52:f3:23:7b:33:
4d:3a:82:56:b4:5a:3b:8e:64:ae:6d:bd:38:c6:07:07:9c:5f:
ff:48:8b:38:3b:0c:ab:79:c7:86:4a:60:33:ca:12:fa:0d:06:
2b:47:f2:e5:fa:69:84:b0:ac:33:73:8e:d3:80:c7:79:51:69:
33:5a:d6:45:e5:49:4e:0f:cc:f9:92:7b:58:0e:e0:8e:73:c4:
41:76:7e:74:e3:30:66:a3:97:8d:be:1c:88:6b:6f:3a:c7:9c:
05:4f:73:6c:7e:9a:3b:05:60:cf:38:a7:9e:c0:82:bb:e6:75:
43:01:07:1b:3c:ac:a1:4e:ea:67:f3:d8:70:c2:58:d1:df:80:
c5:02:6d:7f:95:9a:75:a2:a7:2c:21:5a:82:91:38:8e:87:db:
8e:cc:76:3f:66:f9:56:02:05:bd:c5:61:0a:ac:99:d2:9e:40:
d8:db:a3:b5:e8:26:63:14:0f:a3:61:22:0d:a9:91:a1:c7:72:
6d:86:c2:56:da:a8:52:bd:22:62:13:02:2f:fd:70:01:e0:fa:
32:fb:16:a4:e2:77:5f:c1:35:7d:b1:1d:6a:fd:9a:2d:b0:9e:
3c:5a:56:df:bb:b8:37:83:17:87:12:a7:69:e6:20:75:95:e6:
de:d3:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:16:40 2025 by rpki-client