Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft
File: YSzbncPTddppVnrclwg281suC-I.mft (raw, json)
Hash identifier: pTogT3q2ADXCEg2FoK/iwDGZGbbm+Mp6Rq7rFThU0nE=
Subject key identifier: 4C:E7:52:52:D6:88:D8:E8:FF:42:BA:C6:19:39:41:F6:5F:87:09:60
Authority key identifier: 61:2C:DB:9D:C3:D3:75:DA:69:56:7A:DC:97:08:36:F3:5B:2E:0B:E2
Certificate issuer: /CN=612CDB9DC3D375DA69567ADC970836F35B2E0BE2
Certificate serial: 03E4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YSzbncPTddppVnrclwg281suC-I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft
Manifest number: 03E4
Signing time: Mon 02 Mar 2026 02:29:03 +0000
Manifest this update: Mon 02 Mar 2026 02:29:03 +0000
Manifest next update: Mon 02 Mar 2026 08:29:03 +0000
Files and hashes: 1: YSzbncPTddppVnrclwg281suC-I.crl (hash: 8npnmIjGfVmoh9YGiGNDU4QWTGrDtOE6Diy39f2tvEo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612CDB9DC3D375DA69567ADC970836F35B2E0BE2
Validity
Not Before: Mar 2 02:29:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=4CE75252D688D8E8FF42BAC6193941F65F870960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:8f:ad:42:77:b4:a8:92:91:58:85:41:1f:
ab:a5:5b:3e:6a:b8:b5:12:c0:05:86:8b:f8:29:6e:
be:bd:15:d5:ff:24:77:a9:e4:a0:8c:47:97:f7:32:
b0:02:c6:a4:72:a8:fa:f3:4b:24:51:cc:2d:1a:52:
e9:1f:9e:06:02:8a:7d:ab:01:f9:23:99:b6:e1:40:
97:29:1e:cd:a2:41:54:ba:31:f4:89:86:10:21:e4:
90:10:7f:ef:af:b6:0d:1d:8a:a7:d5:79:71:b5:c7:
f0:be:35:8f:01:1d:15:72:47:c7:95:e9:b4:3c:3c:
53:c2:8e:11:9f:fc:c5:5c:d6:19:09:ea:42:0f:98:
b6:ad:31:dc:ef:a1:9d:c8:92:bf:ec:ca:4c:89:b3:
a2:10:dc:82:3f:c2:19:c1:2a:fc:4d:f7:b8:c7:59:
31:6e:80:0a:5d:df:0e:d0:f7:4e:06:cc:d8:cf:fb:
18:35:3b:e6:2d:57:c9:d2:7f:4b:65:39:d5:c9:02:
71:6b:97:fb:ca:e7:d2:96:3c:39:9b:32:c4:1c:50:
ab:a9:b3:54:85:dc:f3:2a:8a:86:45:df:20:ac:1e:
62:a1:53:dd:12:0d:cf:59:ca:1b:e9:18:8e:63:2b:
41:6e:b5:99:dc:e9:54:ff:30:33:e0:61:99:05:3e:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:52:52:D6:88:D8:E8:FF:42:BA:C6:19:39:41:F6:5F:87:09:60
X509v3 Authority Key Identifier:
keyid:61:2C:DB:9D:C3:D3:75:DA:69:56:7A:DC:97:08:36:F3:5B:2E:0B:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YSzbncPTddppVnrclwg281suC-I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1b:4b:00:ec:03:9a:47:a2:20:50:40:26:3e:66:c8:99:bc:
ab:ea:dc:22:d0:c1:11:8e:6c:03:ec:17:e8:bd:29:88:fc:2a:
d3:82:fc:ef:82:8a:30:3f:63:af:80:75:11:dc:26:f0:63:78:
7a:2e:b2:ce:e9:fb:a1:32:39:9d:91:30:72:a0:9d:e0:91:36:
9b:51:39:f0:bf:40:cb:c6:d0:b7:aa:1e:c5:92:13:76:0a:6b:
75:16:a5:99:23:95:e1:93:2e:34:88:d9:f8:52:86:5f:97:34:
90:44:df:c3:81:92:e1:75:27:ad:70:3d:81:4b:b0:61:ba:b5:
51:2f:3f:e8:66:72:a5:2f:6d:3a:1e:5f:7e:50:60:e5:2b:7b:
69:1e:7c:30:5b:b5:26:18:85:33:bd:77:30:90:8e:09:30:78:
65:10:84:24:c1:e6:e3:59:6f:c2:67:c7:ba:67:2b:7c:df:af:
8e:4f:c3:c3:10:97:65:3c:f0:31:f4:78:cf:fd:bb:42:4a:2d:
22:9e:4f:b9:c6:7f:ee:bf:b4:31:ce:7a:9f:6a:74:3e:46:d3:
24:9e:a0:f9:e7:6b:dc:b9:b3:a5:3e:54:1d:bb:de:36:1d:f0:
58:4f:e5:cc:68:80:18:4e:2e:2e:7a:4e:df:50:9a:ec:f2:6f:
03:39:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:51 2026 by rpki-client