Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json)
Hash identifier: PXPwDqqtcNRUsOHLHdL3w0cT4OKVckI0xSAi8E2FI10=
Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Certificate serial: 0477
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
Manifest number: 0477
Signing time: Mon 11 Aug 2025 04:05:14 +0000
Manifest this update: Mon 11 Aug 2025 04:05:14 +0000
Manifest next update: Mon 11 Aug 2025 10:05:14 +0000
Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: ug0GchAKUnENfTN//uudb4w9yrrHY290howQXYWUMIw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Validity
Not Before: Aug 11 04:05:14 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83:
20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4:
66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71:
86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59:
a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81:
43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0:
d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50:
78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1:
2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45:
d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68:
4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f:
c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07:
60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d:
cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88:
31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3:
ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2:
fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
X509v3 Authority Key Identifier:
keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:8f:aa:ef:55:41:df:ac:ea:0a:a2:b7:dd:81:64:db:2f:
fd:72:e7:71:ec:19:2e:0c:08:e5:6d:5a:ad:54:f2:87:ef:5b:
83:e0:40:68:b7:97:1e:31:79:02:32:9e:ef:3e:96:bf:34:de:
71:d7:73:7e:03:2a:cb:15:55:a1:91:c8:75:79:7b:52:85:93:
58:1e:14:43:9c:7f:34:9c:07:b2:39:3f:96:d9:d8:9e:11:1a:
6a:1a:27:0b:25:2f:99:d3:53:41:9d:a9:2a:96:4c:ec:09:a2:
1e:d7:4a:1a:f1:5d:2a:b6:f1:c1:78:f1:95:ca:e9:4f:02:8c:
4e:09:50:d3:fa:0e:e0:ac:8a:cf:3f:e9:ad:e5:ce:39:d1:a6:
59:a5:ac:22:aa:09:b9:37:18:00:b2:c6:57:29:c4:53:ad:a7:
8a:3f:9f:fe:35:46:69:9c:cb:12:3e:10:74:91:53:78:d1:fe:
05:80:d4:54:42:99:d5:dd:cf:00:62:71:bd:05:3e:b4:b9:0c:
55:ac:88:11:76:7f:2a:0b:98:75:88:1e:d5:68:aa:60:4b:b1:
a6:02:a3:e0:c6:37:12:3a:f6:b6:4d:f4:49:6f:2d:db:5d:87:
ca:85:a8:f3:cc:4a:2e:32:55:6f:cf:aa:87:a3:6b:20:c3:ab:
56:d3:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:34:17 2025 by rpki-client