Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
File: tw-ay_EAFGtabH5NDOLP3_sXgA0.mft (raw, json)
Hash identifier: dZQyymGGx/ZgRgGAMVQr1WyqAbtLNz4cjvgY6XO22T4=
Subject key identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98
Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D
Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D
Certificate serial: 0831
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
Manifest number: 082B
Signing time: Sun 01 Mar 2026 16:30:48 +0000
Manifest this update: Sun 01 Mar 2026 16:30:48 +0000
Manifest next update: Sun 01 Mar 2026 22:30:48 +0000
Files and hashes: 1: 3MKzLGOz3QmJsUndF8T6ajoTyZo.roa (hash: 4L896dvdD7gisLHXlUGakF+hzI7CPBXQcnhbqjLHgUg=)
2: MF6XO1h5tWyAEoasS2UP8bCpZIE.roa (hash: KGjqOIiGrk5B0gayHXAIuw7MZZLoMtK6K+t0VnpthfQ=)
3: PyDtdEk7SDdInPirvHSeb0S9dyI.roa (hash: hrsai+CzpB3uEKss+zEh/wsa25ZUdMenLdtvBxZP5eY=)
4: QNmaUZ9odBUKr7-GsJabU8_NGAo.roa (hash: /2fTnVqeoPrkZWX481e++x3S/mGdslWVB79maUC1fA0=)
5: YP6HNtYypvunlSoIog3xO4pPY4s.roa (hash: UmvJWiELK+WAWticL7Y4JK3MuC5DFGT24tTfsDjGddw=)
6: tw-ay_EAFGtabH5NDOLP3_sXgA0.crl (hash: d8fdFXAsmFOgX/Bah9G8kGpU/idmTQx/UWOiKTNjuh8=)
7: xLHVFN7qgJxmVLccIkF7b6UCWvM.roa (hash: 0y2VZNE8QE1kcUhFGsB7s+y1CW28fjzlrS/rQsX8m2Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D
Validity
Not Before: Mar 1 16:30:48 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=54D82569197583EE89B0F404B8F55339789F8598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:e3:97:e5:d6:e5:7b:7a:46:f9:98:ea:1f:
ab:e8:67:42:de:c4:6e:6c:bd:f2:10:47:c7:39:80:
53:f3:3e:d9:9a:d5:c7:31:45:93:93:ee:25:13:97:
bb:87:0a:15:20:8b:a7:87:49:f1:43:17:4f:06:4b:
44:29:12:14:69:17:78:83:a2:3b:94:54:77:2a:a0:
f0:86:3d:50:52:06:7c:e3:4c:4c:2e:ba:89:34:ba:
48:d7:2a:87:92:cc:65:e0:eb:4c:8b:5c:ef:a6:30:
44:f2:de:a2:7b:1e:31:bd:d8:79:96:04:1f:74:c8:
6a:42:60:ff:4d:6f:63:36:92:df:f3:55:dd:90:e2:
65:01:3f:e2:88:91:1a:5a:63:74:c7:b1:e3:a8:d8:
9a:4d:ab:e2:24:b8:77:58:f2:db:25:53:a6:22:aa:
e5:d2:29:32:54:3c:2b:0c:53:be:dc:31:14:db:ec:
c1:00:6e:64:b8:3b:87:f7:f6:3a:bf:c1:0d:50:71:
2b:86:e6:3e:bd:b7:12:02:98:84:6d:e1:42:ea:08:
f2:15:47:4a:55:9a:2e:5c:02:3f:ac:cc:de:39:52:
e7:0d:d0:78:22:b6:b1:b3:13:a7:5f:73:27:b4:97:
e8:8f:0b:b2:9f:b0:a6:1b:4c:50:e2:56:05:09:0b:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98
X509v3 Authority Key Identifier:
keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:57:5e:9f:34:d2:14:a7:cc:97:5a:53:bf:fc:f3:21:75:a0:
80:bb:b8:f8:df:ed:18:77:47:7b:56:4f:36:34:c6:03:88:e0:
68:ab:ee:7f:ad:ad:d1:f0:fa:d5:0d:e0:a1:5b:fc:af:8d:26:
05:c6:03:6f:25:7f:37:c0:46:fd:f9:ff:ab:9d:65:9a:e1:43:
27:0d:09:71:cb:cc:8e:99:31:fd:49:de:0c:5e:a4:d2:21:20:
b3:d7:7e:6b:6b:47:b9:40:c2:1a:36:2b:de:91:f6:e8:52:2d:
56:bc:32:a9:83:69:13:d0:a4:77:f2:00:c2:34:17:99:69:3f:
db:44:17:a6:b0:b5:8a:08:2a:ab:d2:33:dd:4a:cc:d3:91:61:
5b:9e:9c:46:89:5c:ab:0e:3e:16:6d:f2:1b:0d:62:f7:3d:78:
92:5b:98:71:b1:52:c3:9f:42:5f:5c:06:39:7d:e0:e6:7c:8c:
a8:a0:d7:8f:69:6a:85:37:88:f4:2b:f4:29:5c:23:a2:b3:33:
10:09:5d:45:82:de:36:4e:0c:8d:6d:ae:56:c9:b3:90:56:e5:
5d:bc:e1:ac:93:fd:32:cf:71:c8:47:65:8e:62:1e:18:b2:b4:
26:ac:a6:82:83:34:58:d2:b0:65:0b:c7:c2:c1:de:a6:05:d0:
ca:4a:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:52:52 2026 by rpki-client