Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
File: hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft (raw, json)
Hash identifier: MGDEAlbM7SOslwbW3XSCyjCBA7AjLsmrOzKGK7wpGns=
Subject key identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
Authority key identifier: 85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
Certificate issuer: /CN=853C52D1A84142137981B9051E924A4B32915C66
Certificate serial: 046D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
Manifest number: 046D
Signing time: Sat 21 Jun 2025 20:15:27 +0000
Manifest this update: Sat 21 Jun 2025 20:15:27 +0000
Manifest next update: Sun 22 Jun 2025 02:15:27 +0000
Files and hashes: 1: hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl (hash: wQIfRK8UQznaILki9Am/2AqNyhz0ltos1cIgKxMJzdE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853C52D1A84142137981B9051E924A4B32915C66
Validity
Not Before: Jun 21 20:15:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BED925DE392AE86E118156164F491259384C5C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:4c:3b:16:5a:51:15:14:ad:a8:2c:93:64:
4a:3e:6e:88:fd:04:ea:22:b3:8d:d4:6c:4f:43:7a:
f1:99:c4:0f:4a:c7:7b:77:ac:d9:1c:8b:8c:f6:86:
53:29:47:2e:39:30:3b:22:77:5d:ba:04:09:b2:bf:
42:58:53:1c:18:43:9f:d5:34:7e:4c:1b:e7:85:73:
51:fa:33:f3:d2:75:cf:39:5e:3f:13:3d:e9:0c:ce:
ed:33:af:4c:63:cd:2e:c7:08:2a:07:5a:6d:64:d5:
54:9f:d2:58:bd:99:a4:f1:b4:cb:b4:d8:e8:ad:ca:
61:f8:ca:ff:bc:6d:36:91:08:40:d3:b6:c9:b6:4d:
cd:e1:35:1b:7e:14:21:76:dc:db:58:ef:d0:48:9e:
bb:ff:25:19:05:6d:f5:32:fa:52:8b:3f:42:21:0a:
f7:05:84:f7:b5:5c:73:9b:3c:aa:8c:ab:1b:4e:98:
3f:32:db:28:18:b5:86:3b:63:cf:fb:fb:87:70:c4:
68:a1:86:c5:b7:9a:39:b8:92:d8:38:54:ef:15:29:
21:50:6d:bd:12:5e:70:65:e4:da:dd:66:3a:9e:76:
46:b8:8b:d7:58:c2:7a:9e:fd:da:72:a9:ac:27:aa:
4f:c9:be:4b:f6:42:64:e1:16:b9:d9:b8:11:ff:dd:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
X509v3 Authority Key Identifier:
keyid:85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:ef:6f:1c:cd:70:b9:b4:4e:96:bb:64:ea:1d:1a:c8:44:
fd:37:fe:71:7e:58:bc:9e:7b:00:c7:53:94:3b:d5:a0:01:f1:
b9:7e:14:27:7b:fc:f1:00:1f:dc:19:84:d5:f9:14:0c:b9:05:
fe:a3:57:45:b3:75:02:02:20:93:3c:c6:7e:b1:60:9a:e6:2a:
dd:eb:6a:ba:8c:76:c5:14:0f:3c:9f:c5:e3:eb:f5:4d:65:99:
9b:02:36:e9:19:54:0a:1e:12:fa:aa:a9:60:a7:d6:8c:e7:17:
1a:47:19:98:86:58:31:67:95:1e:f8:d8:3c:95:69:bf:a2:9c:
05:42:74:bf:50:4a:54:0a:dd:ff:0b:81:22:ea:4f:21:82:32:
f5:ed:4e:f9:5d:2f:13:fc:43:d0:ad:7b:da:51:41:ad:65:4b:
df:b5:cc:92:61:71:02:b3:09:73:58:7c:6e:5a:31:77:58:f0:
77:5e:61:a6:3c:a4:50:15:d2:34:b1:d6:e6:dc:b1:f4:6c:86:
6b:06:cf:cc:38:0e:aa:d6:0e:dd:3c:2e:26:49:c4:f0:c3:65:
29:40:71:d2:11:09:5b:f0:18:9a:8d:7e:bd:e6:b0:da:84:7b:
a5:69:dc:38:62:50:67:05:b8:74:37:a0:cf:ce:13:c3:32:84:
cf:38:07:c7
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODUz
QzUyRDFBODQxNDIxMzc5ODFCOTA1MUU5MjRBNEIzMjkxNUM2NjAeFw0yNTA2MjEy
MDE1MjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJFRDkyNURFMzkyQUU4
NkUxMTgxNTYxNjRGNDkxMjU5Mzg0QzVDNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4+Ew7FlpRFRStqCyTZEo+boj9BOois43UbE9DevGZxA9Kx3t3
rNkci4z2hlMpRy45MDsid126BAmyv0JYUxwYQ5/VNH5MG+eFc1H6M/PSdc85Xj8T
PekMzu0zr0xjzS7HCCoHWm1k1VSf0li9maTxtMu02OitymH4yv+8bTaRCEDTtsm2
Tc3hNRt+FCF23NtY79BInrv/JRkFbfUy+lKLP0IhCvcFhPe1XHObPKqMqxtOmD8y
2ygYtYY7Y8/7+4dwxGihhsW3mjm4ktg4VO8VKSFQbb0SXnBl5NrdZjqedka4i9dY
wnqe/dpyqawnqk/Jvkv2QmThFrnZuBH/3bClAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUvtkl3jkq6G4RgVYWT0kSWThMXFowHwYDVR0jBBgwFoAUhTxS0ahBQhN5gbkF
HpJKSzKRXGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
Ny9oVHhTMGFoQlFoTjVnYmtGSHBKS1N6S1JYR1kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2hUeFMwYWhCUWhONWdia0ZIcEpLU3pLUlhHWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjcvaFR4UzBhaEJRaE41
Z2JrRkhwSktTektSWEdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABqC728czXC5tE6Wu2TqHRrIRP03/nF+WLyeewDHU5Q71aAB8bl+FCd7/PEA
H9wZhNX5FAy5Bf6jV0WzdQICIJM8xn6xYJrmKt3rarqMdsUUDzyfxePr9U1lmZsC
NukZVAoeEvqqqWCn1oznFxpHGZiGWDFnlR742DyVab+inAVCdL9QSlQK3f8LgSLq
TyGCMvXtTvldLxP8Q9Cte9pRQa1lS9+1zJJhcQKzCXNYfG5aMXdY8HdeYaY8pFAV
0jSx1ubcsfRshmsGz8w4DqrWDt08LiZJxPDDZSlAcdIRCVvwGJqNfr3msNqEe6Vp
3DhiUGcFuHQ3oM/OE8MyhM84B8c=
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:15:57 2025 by rpki-client