Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
File: K6tMFwMvC3Tx01c-eeloid-ypu4.mft (raw, json)
Hash identifier: x2Oov2QA9MsuoT93JwLGd+UZjmypqzv7UIsvEtl3AK8=
Subject key identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0
Authority key identifier: 2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE
Certificate issuer: /CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE
Certificate serial: 0654
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
Manifest number: 0654
Signing time: Wed 05 Nov 2025 10:12:50 +0000
Manifest this update: Wed 05 Nov 2025 10:12:50 +0000
Manifest next update: Wed 05 Nov 2025 16:12:50 +0000
Files and hashes: 1: K6tMFwMvC3Tx01c-eeloid-ypu4.crl (hash: M1c43lo3lUocv6LqmRRzQTe9AP9TA4tFZYET+NyGFnQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE
Validity
Not Before: Nov 5 10:12:50 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BE671BA73B86480189EF54ED7FEF88040D02D1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:18:79:57:d3:51:87:19:64:d4:2b:23:54:
8a:ac:f2:88:6d:a0:42:74:e0:65:b1:3b:ac:60:e5:
27:5b:40:9c:f9:f1:72:9b:0f:d0:ae:dd:56:b9:d3:
e0:f1:02:16:eb:b1:33:50:44:94:2c:d7:09:11:c5:
d0:bb:39:c1:09:55:17:68:ec:d0:69:25:42:b0:a8:
65:ec:e8:80:0c:0e:e5:2f:5c:d6:b3:5d:ae:24:9e:
45:97:66:32:17:b2:82:3f:6f:7b:94:54:d2:58:7e:
a7:50:23:74:2d:52:24:6e:73:51:95:71:d0:bc:fd:
f3:c3:41:d2:84:41:a9:65:82:fb:1d:df:bd:08:a9:
83:29:47:d0:76:fc:a7:f3:04:2f:e2:4f:f7:3e:92:
8d:84:db:0d:eb:71:7e:d6:d8:7e:de:2c:44:d0:53:
3c:36:d6:1f:63:5d:01:bb:53:89:e9:da:d8:e2:0c:
7b:3c:ed:a6:8d:91:9c:55:e7:33:7e:ad:7e:46:9c:
54:c4:c3:b8:f0:8e:68:f9:4e:9d:f6:aa:fc:b9:d0:
9f:a8:be:a4:22:4f:72:15:98:47:c7:fc:38:f4:d3:
3b:56:d5:02:ea:ca:7b:80:63:a5:5a:f7:0d:97:0d:
30:fd:e2:4e:ba:23:23:81:db:dd:28:9c:ee:76:fe:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0
X509v3 Authority Key Identifier:
keyid:2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5d:f7:70:6a:c7:d8:32:d5:c6:0f:54:05:99:e3:f2:c0:65:
0f:37:63:7f:5d:17:0f:db:f3:8e:68:98:2a:90:23:10:25:36:
df:78:6a:01:e0:09:3d:5d:53:9d:cf:b4:6d:ff:ba:e6:ab:c8:
8f:c0:3a:01:2f:01:51:f5:a5:d9:27:10:24:eb:62:5d:5e:21:
f6:0e:e3:bf:87:dc:41:5a:74:06:e9:9f:c1:34:cc:73:34:06:
3a:1f:9c:1b:09:34:ea:c4:50:0b:36:b2:1a:6e:c4:cc:a4:d4:
f2:87:31:8d:4b:cb:41:61:0b:09:f7:86:3b:f2:af:a6:f1:cb:
14:b6:9f:97:cf:c3:5a:0c:f7:34:01:fb:39:13:a4:79:6b:58:
89:41:da:4a:0e:53:ff:89:0c:bd:ec:9a:06:4b:2d:1c:93:d2:
75:68:53:78:41:94:27:5e:50:ec:35:98:91:55:f5:f7:ad:3a:
27:b3:d1:52:8b:5b:22:30:3a:75:bb:04:a5:ad:b4:bc:c2:5c:
c8:4b:0f:b9:6e:07:1c:ab:e6:3e:13:7d:37:f2:dc:72:98:8a:
c5:ce:5a:b9:68:8f:03:97:87:a8:e6:a9:3a:da:17:9b:d1:0b:
28:a8:3f:e1:8d:50:e9:59:d6:95:7e:0d:d2:86:46:eb:37:99:
34:e8:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:28:41 2025 by rpki-client