Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft (raw, json)
Hash identifier: 8iJ6w0wNpAY4nrNKdiaRKJj6D7pQv8TnTRSqAUKhvB0=
Subject key identifier: 7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
Authority key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
Certificate issuer: /CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Certificate serial: 04F0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
Manifest number: 04F0
Signing time: Sat 21 Jun 2025 06:44:27 +0000
Manifest this update: Sat 21 Jun 2025 06:44:27 +0000
Manifest next update: Sat 21 Jun 2025 12:44:27 +0000
Files and hashes: 1: o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl (hash: +E4aB3a1/ZhnhJsa+jqq6iDO0AENNZTA1RQhf80Uu8I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Validity
Not Before: Jun 21 06:44:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7DBCF4A1EA8EEB3E124E8E23CE7F82EEDDF04BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:95:67:6c:b0:cd:c7:64:a1:13:8e:d9:0d:
8d:96:58:1d:08:c8:2c:68:59:8a:4b:2a:92:76:32:
07:01:1d:ab:14:13:b2:ce:a1:06:a5:9b:84:5c:1c:
f8:a3:c2:22:9f:6a:5c:0e:f5:95:3b:4e:55:01:2e:
6e:17:d8:04:f1:c3:43:91:0a:b6:4e:01:cc:4d:6d:
66:ba:99:a5:a1:dd:0f:92:6e:ef:fa:55:e4:3f:16:
12:1d:85:09:6d:29:a0:57:1c:07:8f:a9:6b:ee:4f:
c7:ec:36:26:a6:f8:5a:0f:2b:24:7a:7c:c7:72:f4:
48:42:89:55:2d:21:d0:fe:de:be:51:86:02:d6:19:
38:32:ad:02:c7:d7:68:d5:7e:76:47:39:5d:01:42:
ed:ff:a1:f2:d8:e7:c3:ba:48:2b:e7:1b:ed:85:14:
23:56:60:aa:7b:95:6d:c7:1d:bf:f3:0a:a7:00:95:
ff:23:69:7a:be:8a:5c:7e:4c:ef:e5:12:77:c5:a5:
d1:44:61:77:6f:31:7a:8c:ed:49:3e:c9:2f:bd:ed:
ab:e6:75:17:61:3a:d3:ea:ef:6a:fe:74:9e:53:95:
be:f1:c7:28:dc:18:2d:c5:76:f8:15:59:77:df:c2:
8e:b3:19:c7:7e:0a:8e:d1:3d:6e:f5:87:c0:6e:42:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
X509v3 Authority Key Identifier:
keyid:A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2c:ae:72:7e:4a:09:7c:c8:3e:f6:14:eb:05:7a:58:9a:d6:
8e:25:67:bf:c7:95:4a:53:ae:e3:19:7a:4c:e0:7b:4c:e9:d8:
08:11:66:cd:8b:7a:5b:6c:6c:45:16:63:5c:b9:79:ba:08:a0:
f6:b6:03:07:f8:0b:78:e4:d6:85:65:36:45:fa:66:b3:22:03:
fc:7e:9c:88:37:de:34:36:0a:66:99:fb:4c:f1:e2:73:33:42:
06:fa:f4:f9:93:0b:ae:72:9e:04:59:c2:50:eb:53:55:de:2c:
de:1a:2c:d6:8c:27:38:04:94:41:53:1e:ba:75:e9:d8:cc:f0:
70:99:3c:12:c4:78:cb:d2:ce:62:f4:d4:b2:ff:e5:cb:53:88:
f5:43:c4:e0:b0:3a:2f:8a:c2:1d:ed:ff:c9:6a:90:fe:c1:3a:
a6:42:b6:42:b6:e4:44:c4:f6:38:cd:75:59:8d:e6:30:62:c2:
90:14:6c:6f:a7:17:e3:0b:e4:f8:c0:a6:46:e7:0a:38:ef:d0:
68:29:19:b2:c9:01:3d:00:51:10:97:8b:16:09:b3:3e:c6:33:
35:98:5e:1a:7b:dc:d7:f4:9a:e5:9d:15:e2:46:c9:39:20:a8:
47:9f:f7:95:dc:7f:33:35:cd:d7:5c:31:87:a9:e7:ee:8c:2c:
56:b2:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:59:36 2025 by rpki-client