Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft
File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json)
Hash identifier: vC5f6Qo1L0vChWrOnhBl3ti1SK9KGMkYYyHIH80To4w=
Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D
Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56
Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56
Certificate serial: 0561
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft
Manifest number: 055F
Signing time: Sun 01 Mar 2026 21:29:28 +0000
Manifest this update: Sun 01 Mar 2026 21:29:28 +0000
Manifest next update: Mon 02 Mar 2026 03:29:28 +0000
Files and hashes: 1: k2fsIbftQRjCuaw8vM9IdWoUcpg.roa (hash: QUuqwryAn7tNC/7s8b5C6mc0fqcFuWn03lmSuHGpGJ8=)
2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: uJSeGcrPRncKm7mhDQH1RGSPR3YDW3NcPBRRNny9qbs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56
Validity
Not Before: Mar 1 21:29:28 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc:
8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68:
fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1:
fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d:
85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7:
81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83:
4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20:
0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b:
d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2:
df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea:
eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3:
bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4:
24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44:
cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29:
fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d:
f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af:
0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D
X509v3 Authority Key Identifier:
keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8c:7d:54:32:ff:e0:25:06:f8:91:76:dd:49:67:69:29:a7:
93:b6:8e:c2:08:83:20:c2:b9:33:18:28:e6:4a:79:bc:6e:f1:
82:6c:17:60:db:8c:35:01:b7:33:92:3a:e8:7f:9a:1f:cb:64:
7c:e0:cd:72:03:da:05:28:8c:74:94:16:de:4d:c8:ac:15:c7:
d0:c9:74:e8:60:ec:2b:0e:69:18:7d:8b:3a:7e:ba:3e:45:a8:
fa:43:8e:d4:3c:0f:0a:7f:98:56:dd:97:8d:e5:f0:11:f4:8c:
fd:60:66:94:1f:e6:a4:af:17:12:47:81:18:8c:86:5b:39:34:
f2:8f:d3:d5:f8:b9:2f:f9:3d:44:63:20:08:00:17:e2:70:6f:
d1:8b:7f:66:23:67:30:75:a0:2c:0d:d6:31:df:93:cb:63:cb:
23:57:a4:92:d3:66:3c:7e:ff:95:3d:c1:05:90:cc:96:c5:3e:
de:30:62:6e:e1:7f:57:0b:5b:a2:d8:c4:13:03:96:6d:19:d3:
f7:e0:3a:66:5f:e4:b2:0c:cb:0a:2c:1a:35:bc:dd:cc:f1:43:
43:71:7f:4f:9c:51:07:ee:bd:06:79:b6:70:b0:45:50:ce:22:
ef:a6:a2:bf:d6:e7:24:53:7d:e0:7d:73:08:cc:a1:bf:61:50:
7a:49:86:26
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD
QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNjAzMDEy
MTI5MjhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz
NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X
xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb
p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE
ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs
qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE
Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g
BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx
Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF
NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHqMfVQy/+AlBviRdt1JZ2kpp5O2jsIIgyDCuTMYKOZKebxu8YJsF2DbjDUB
tzOSOuh/mh/LZHzgzXID2gUojHSUFt5NyKwVx9DJdOhg7CsOaRh9izp+uj5FqPpD
jtQ8Dwp/mFbdl43l8BH0jP1gZpQf5qSvFxJHgRiMhls5NPKP09X4uS/5PURjIAgA
F+Jwb9GLf2YjZzB1oCwN1jHfk8tjyyNXpJLTZjx+/5U9wQWQzJbFPt4wYm7hf1cL
W6LYxBMDlm0Z0/fgOmZf5LIMywosGjW83czxQ0Nxf0+cUQfuvQZ5tnCwRVDOIu+m
or/W5yRTfeB9cwjMob9hUHpJhiY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:57 2026 by rpki-client