Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
File: th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft (raw, json)
Hash identifier: dMdyLaefEne8dgUCvGhzztKnxRXakfRx5eExF/OrEzo=
Subject key identifier: 18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
Authority key identifier: B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
Certificate issuer: /CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Certificate serial: 082C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
Manifest number: 082B
Signing time: Mon 02 Mar 2026 02:30:50 +0000
Manifest this update: Mon 02 Mar 2026 02:30:50 +0000
Manifest next update: Mon 02 Mar 2026 08:30:50 +0000
Files and hashes: 1: JgjWkLdCFleawVTGhEhJNpE74sI.roa (hash: N9APigkUnifz939TtzUKxhKyyn8AOmLm5xRTMW8fCf8=)
2: th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl (hash: 7FKXtS3ch00Z5DlBECCRU4KxuDMrDZNkF164PI2uxL8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Validity
Not Before: Mar 2 02:30:50 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=186E78B45B3C95AF28F99FC95D6D94940A37551B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:c6:9f:2c:76:70:3d:16:0a:60:0c:28:9d:
0b:6e:02:15:0e:70:04:d0:29:47:03:3c:0b:c3:d4:
2e:d2:75:0e:ae:c0:63:70:93:c2:34:17:5a:cc:ce:
15:f6:7a:c8:84:9a:ac:9e:6b:a3:69:2c:43:28:77:
d9:af:a0:84:40:eb:b2:39:05:b9:b8:ba:c6:a3:9d:
02:aa:02:c0:33:24:9c:05:b7:eb:04:7a:98:0e:0a:
f3:2d:a9:c4:59:52:36:21:d2:c0:39:47:e2:13:81:
57:60:4f:a8:7b:6c:4e:f8:26:f8:15:f8:aa:b1:21:
91:c7:63:e8:23:65:39:20:4e:1a:ff:13:66:69:bf:
f6:22:44:57:bf:17:8c:bd:e4:d1:51:45:63:7a:e3:
5c:cd:2f:bc:fa:33:3f:9b:12:3e:2c:80:d9:3d:64:
81:00:bc:71:04:f9:4c:3d:00:8f:dd:ee:5a:83:0a:
84:34:cd:b6:39:52:8e:bf:af:6a:c4:4a:86:24:17:
fd:b6:cf:8a:46:d6:c9:1e:12:b4:95:2e:54:a3:10:
33:fa:36:8e:c2:4a:a8:d5:ac:0e:ef:73:3f:d1:1c:
ed:44:b6:f5:80:fa:02:da:cf:06:f8:a4:cd:0f:3b:
b1:27:10:ec:52:61:b6:bc:94:7a:f8:00:32:6f:fd:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
X509v3 Authority Key Identifier:
keyid:B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:68:3e:52:c5:07:b0:0e:03:ab:88:78:ce:70:04:1a:68:20:
e7:f6:29:ba:e3:d7:65:30:2d:c8:cf:23:43:9d:d5:bb:de:bb:
6b:ae:bc:7c:09:00:6f:f1:6c:c7:a1:8d:cf:2b:7c:d7:01:d4:
2c:9e:0a:11:e8:dd:2b:96:9e:89:e2:1e:f6:52:00:01:d0:46:
2d:67:d8:8c:ed:6f:31:d9:40:70:28:da:50:10:f5:dd:12:20:
11:5e:83:2e:5d:72:72:9b:d2:0d:1f:29:f7:5c:b8:e1:f1:cb:
c6:79:a3:14:09:19:22:7f:d9:00:e4:74:9c:c9:46:5a:07:93:
07:0f:ee:6b:9f:b1:1a:f4:18:7a:80:88:dd:87:e0:d9:62:d9:
49:31:0b:9d:3f:74:df:70:db:d9:41:3e:0a:62:5e:e2:cf:32:
52:c9:f9:3d:af:7b:41:80:3b:ee:b0:31:a2:c6:bf:b5:ce:6e:
66:65:24:20:0c:e2:cd:86:18:a8:aa:4c:cb:76:9e:69:16:e2:
fb:0c:21:ed:72:43:9c:4a:4a:93:f2:ba:5e:95:bf:99:fd:45:
34:d2:06:fc:9c:af:a7:96:be:a7:30:14:c6:f8:c4:94:e2:87:
7c:6e:db:89:c9:eb:f3:21:3d:a9:6a:32:88:b5:a4:84:a5:9a:
c6:2d:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:46:50 2026 by rpki-client