Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
File: HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft (raw, json)
Hash identifier: UTOslux8M4sg8NpY01ghXUtvB6CPasiKoSdfpp7iIPk=
Subject key identifier: 41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D
Authority key identifier: 1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79
Certificate issuer: /CN=1C6595A42ACE3853C7876704E65BE85F5C185279
Certificate serial: 03DF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
Manifest number: 03DF
Signing time: Sat 21 Jun 2025 06:42:59 +0000
Manifest this update: Sat 21 Jun 2025 06:42:59 +0000
Manifest next update: Sat 21 Jun 2025 12:42:59 +0000
Files and hashes: 1: HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl (hash: YBOKsexew0trQSHvV8YD35Jy5AMMqG79+8qAxiW1zWU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C6595A42ACE3853C7876704E65BE85F5C185279
Validity
Not Before: Jun 21 06:42:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=41C0BC01D3A531043842939AB41FF3CCBF84D82D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:55:27:89:99:f7:37:b9:b9:5e:cf:49:bb:
94:59:c4:73:e2:c1:71:d4:3f:31:0c:b0:17:3d:ba:
4d:69:ae:dd:e1:76:d1:d9:e2:59:01:3c:cf:10:37:
b1:a9:2a:c7:65:16:bb:f7:e8:79:da:9c:65:0d:9f:
88:00:b4:f9:07:f9:48:81:b2:53:45:36:10:ba:af:
1f:06:98:d4:69:77:37:67:f5:30:2b:f7:42:3a:2e:
a0:03:cf:8e:52:ae:28:e3:13:65:a3:e2:0e:ff:7e:
ab:9a:9f:e5:00:ff:b7:e4:93:12:a7:8c:82:a4:89:
ae:15:5e:72:b1:5f:ea:2c:be:e2:15:55:2f:32:ca:
3d:d1:ab:cb:51:6d:3d:d4:9f:56:07:1d:d1:16:89:
73:a3:2b:09:61:16:3c:af:ee:b7:01:98:d3:4e:d3:
d9:fd:6f:e8:66:7d:3c:97:d2:a7:bc:70:7b:63:d8:
60:60:4f:09:08:cb:c0:f0:f6:99:be:a3:43:f6:5e:
b8:18:f3:fd:fe:f2:67:af:8d:e1:3c:46:8e:b8:0c:
e9:6f:23:8a:c3:38:92:47:98:6e:14:6f:7e:52:4c:
93:7b:3b:e3:35:bc:6b:40:2a:26:fb:79:94:39:57:
4b:ab:1e:e2:e2:71:dc:57:c3:b0:15:35:52:2a:7f:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D
X509v3 Authority Key Identifier:
keyid:1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4f:38:99:eb:34:20:b7:d2:e9:56:28:37:5f:86:6d:4a:a4:
2a:ba:e2:9d:d2:c8:51:c5:a7:30:2e:ee:17:f8:00:5f:a8:e9:
3e:81:34:50:6b:d1:85:b7:ee:8b:bf:97:5d:eb:86:3b:86:3c:
db:2c:7d:08:f6:70:a9:5c:64:f8:84:c6:98:28:b3:a8:8d:90:
2a:b7:e8:44:14:e9:39:a8:fd:8e:47:22:f8:a2:ea:a5:00:2a:
65:38:b8:40:80:33:32:a2:1f:48:b9:44:b0:b6:3e:eb:ea:f7:
67:42:44:00:b6:3e:89:fa:6b:69:a6:2c:b2:47:43:00:c7:68:
ff:76:04:b5:b0:1c:bd:fd:2f:3c:cd:6c:85:77:ab:60:75:b0:
31:df:e7:7d:1d:3d:20:0d:da:18:7b:d7:ab:a5:5d:25:6a:35:
d2:06:f8:c8:5e:74:f3:77:3d:09:9a:c8:4d:62:70:af:fd:72:
98:06:eb:72:e6:46:3b:94:ef:e0:71:78:10:db:52:47:88:82:
ed:8b:79:03:9d:e0:0d:ef:e6:73:ac:e3:fe:c9:e5:34:b9:5d:
e7:0c:99:ce:5b:33:fa:15:0f:62:05:a8:ba:66:fc:93:34:3d:
87:e9:c1:06:81:ca:a8:b9:e0:46:35:83:e0:69:c2:4d:87:05:
a1:7b:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 13:17:25 2025 by rpki-client