Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft (raw, json)
Hash identifier: ls7MU33RUzlleqLvDAC0kA6AwwtL4qCUrH00m7PrQR0=
Subject key identifier: 7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
Authority key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
Certificate issuer: /CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Certificate serial: 05EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
Manifest number: 05EB
Signing time: Mon 11 Aug 2025 04:05:29 +0000
Manifest this update: Mon 11 Aug 2025 04:05:29 +0000
Manifest next update: Mon 11 Aug 2025 10:05:29 +0000
Files and hashes: 1: o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl (hash: GXbUb4lUyTG9OuN0YR639jbYdYM0lOVGvbUGfudwFU8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Validity
Not Before: Aug 11 04:05:29 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7DBCF4A1EA8EEB3E124E8E23CE7F82EEDDF04BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:95:67:6c:b0:cd:c7:64:a1:13:8e:d9:0d:
8d:96:58:1d:08:c8:2c:68:59:8a:4b:2a:92:76:32:
07:01:1d:ab:14:13:b2:ce:a1:06:a5:9b:84:5c:1c:
f8:a3:c2:22:9f:6a:5c:0e:f5:95:3b:4e:55:01:2e:
6e:17:d8:04:f1:c3:43:91:0a:b6:4e:01:cc:4d:6d:
66:ba:99:a5:a1:dd:0f:92:6e:ef:fa:55:e4:3f:16:
12:1d:85:09:6d:29:a0:57:1c:07:8f:a9:6b:ee:4f:
c7:ec:36:26:a6:f8:5a:0f:2b:24:7a:7c:c7:72:f4:
48:42:89:55:2d:21:d0:fe:de:be:51:86:02:d6:19:
38:32:ad:02:c7:d7:68:d5:7e:76:47:39:5d:01:42:
ed:ff:a1:f2:d8:e7:c3:ba:48:2b:e7:1b:ed:85:14:
23:56:60:aa:7b:95:6d:c7:1d:bf:f3:0a:a7:00:95:
ff:23:69:7a:be:8a:5c:7e:4c:ef:e5:12:77:c5:a5:
d1:44:61:77:6f:31:7a:8c:ed:49:3e:c9:2f:bd:ed:
ab:e6:75:17:61:3a:d3:ea:ef:6a:fe:74:9e:53:95:
be:f1:c7:28:dc:18:2d:c5:76:f8:15:59:77:df:c2:
8e:b3:19:c7:7e:0a:8e:d1:3d:6e:f5:87:c0:6e:42:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
X509v3 Authority Key Identifier:
keyid:A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:35:a1:cd:1d:aa:54:b2:e6:e6:00:34:47:78:f2:ba:d0:
f4:f3:4b:86:91:2d:a2:7d:14:42:4a:c0:be:fc:79:1b:bc:a9:
7d:f3:b2:44:85:bd:cd:fc:ad:b1:c8:d2:d0:a7:7b:68:64:0b:
a6:93:26:24:f5:90:29:92:d3:4c:62:f9:49:f1:f6:92:f7:28:
6b:0c:b0:ef:34:d6:a6:02:2f:19:21:1d:d1:f3:99:e7:17:75:
2f:bc:70:a9:35:e9:a4:3d:7d:27:b2:eb:fc:72:c3:77:27:24:
4b:6a:05:92:a6:dd:be:d3:52:6e:b4:c9:e4:c7:e7:4f:09:3d:
b2:58:f4:cb:61:3d:b8:fd:55:fa:ce:c8:65:c3:aa:3b:d8:06:
dc:ae:b4:42:9c:dd:ad:58:3f:c2:03:9a:83:ff:76:e4:c8:02:
04:40:d0:ab:b8:fb:83:0d:33:8e:e7:54:01:e6:85:8a:1b:b3:
1f:bb:58:ea:01:fa:ee:d9:38:d4:bf:81:5a:7a:86:0a:c1:8f:
e9:e0:32:2c:4d:9f:31:d4:8f:01:91:17:aa:97:0f:1c:e8:a8:
cd:ef:4c:57:8a:a9:3f:89:fd:4e:15:89:8c:59:8b:ad:34:66:
ba:9f:0b:9b:71:e4:31:f4:cf:53:d6:a5:cd:21:d7:60:74:28:
74:38:c6:94
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM4
RDVGM0VBNjU0QUQ4QzZENjU0REE1QkU5MDhBNjU4RjI2NkU2NDAeFw0yNTA4MTEw
NDA1MjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdEQkNGNEExRUE4RUVC
M0UxMjRFOEUyM0NFN0Y4MkVFRERGMDRCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXtJVnbLDNx2ShE47ZDY2WWB0IyCxoWYpLKpJ2MgcBHasUE7LO
oQalm4RcHPijwiKfalwO9ZU7TlUBLm4X2ATxw0ORCrZOAcxNbWa6maWh3Q+Sbu/6
VeQ/FhIdhQltKaBXHAePqWvuT8fsNiam+FoPKyR6fMdy9EhCiVUtIdD+3r5RhgLW
GTgyrQLH12jVfnZHOV0BQu3/ofLY58O6SCvnG+2FFCNWYKp7lW3HHb/zCqcAlf8j
aXq+ilx+TO/lEnfFpdFEYXdvMXqM7Uk+yS+97avmdRdhOtPq72r+dJ5Tlb7xxyjc
GC3FdvgVWXffwo6zGcd+Co7RPW71h8BuQmDbAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUfbz0oeqO6z4STo4jzn+C7t3wS8AwHwYDVR0jBBgwFoAUo41fPqZUrYxtZU2l
vpCKZY8mbmQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx
OS9vNDFmUHFaVXJZeHRaVTJsdnBDS1pZOG1ibVEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL280MWZQcVpVcll4dFpVMmx2cENLWlk4bWJtUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvbzQxZlBxWlVyWXh0
WlUybHZwQ0taWThtYm1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKkXNaHNHapUsubmADRHePK60PTzS4aRLaJ9FEJKwL78eRu8qX3zskSFvc38
rbHI0tCne2hkC6aTJiT1kCmS00xi+Unx9pL3KGsMsO801qYCLxkhHdHzmecXdS+8
cKk16aQ9fSey6/xyw3cnJEtqBZKm3b7TUm60yeTH508JPbJY9MthPbj9VfrOyGXD
qjvYBtyutEKc3a1YP8IDmoP/duTIAgRA0Ku4+4MNM47nVAHmhYobsx+7WOoB+u7Z
ONS/gVp6hgrBj+ngMixNnzHUjwGRF6qXDxzoqM3vTFeKqT+J/U4ViYxZi600Zrqf
C5tx5DH0z1PWpc0h12B0KHQ4xpQ=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:33:06 2025 by rpki-client