Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft
File: VXtsbLEjoSwu4XgmgJvlOtqpROY.mft (raw, json)
Hash identifier: Z1UPjC12n3BzeL5v9HGgzUi8kd+sS9mv9f0RuBR7J5Q=
Subject key identifier: B5:05:35:D0:67:CC:4B:6F:E2:17:C4:84:76:67:0E:05:4A:96:E3:56
Authority key identifier: 55:7B:6C:6C:B1:23:A1:2C:2E:E1:78:26:80:9B:E5:3A:DA:A9:44:E6
Certificate issuer: /CN=557B6C6CB123A12C2EE17826809BE53ADAA944E6
Certificate serial: 33
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VXtsbLEjoSwu4XgmgJvlOtqpROY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft
Manifest number: 33
Signing time: Sun 22 Jun 2025 08:11:47 +0000
Manifest this update: Sun 22 Jun 2025 08:11:47 +0000
Manifest next update: Sun 22 Jun 2025 14:11:47 +0000
Files and hashes: 1: VXtsbLEjoSwu4XgmgJvlOtqpROY.crl (hash: P93Syo6wnEJfkvKqe8Rsj3eFMi5jXEUTqhsoXnIQy/U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557B6C6CB123A12C2EE17826809BE53ADAA944E6
Validity
Not Before: Jun 22 08:11:47 2025 GMT
Not After : Jun 12 08:37:11 2026 GMT
Subject: CN=B50535D067CC4B6FE217C48476670E054A96E356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:61:75:60:6b:c8:eb:3b:90:e9:bb:bc:56:
2d:37:1e:1c:8d:8a:bc:fb:65:79:2e:9b:d1:c0:6e:
f0:1c:e1:4c:57:5d:8c:f7:c8:f5:1b:cf:c9:81:5d:
93:5d:59:60:43:4e:31:81:12:e8:23:17:8a:2d:68:
10:63:6c:40:9f:54:f2:b3:0b:9a:7f:49:c3:af:01:
6d:0c:5f:45:57:28:e8:4d:23:8b:d8:94:6e:b2:8a:
9d:74:3f:3b:67:6a:db:27:2d:6f:a9:f3:8c:a5:a7:
92:e2:37:8d:a6:cc:c2:fc:7f:b9:6f:98:1c:66:12:
90:41:ce:eb:da:5c:82:37:43:8a:3b:e0:6f:7b:a0:
e1:90:54:84:e1:9d:59:93:bb:ed:ad:58:55:9a:22:
2f:c8:ba:29:a7:29:34:b0:25:78:a6:6f:d8:23:2d:
d2:cf:28:b8:6b:54:f0:a3:10:72:27:c0:ed:20:3f:
3c:39:d9:2c:dc:4f:b9:26:e7:c8:7b:ff:91:dd:24:
74:7d:d5:5f:9d:10:71:31:6e:ef:45:83:96:65:48:
70:0e:c3:0b:05:6a:d6:83:32:4f:13:61:9f:63:d1:
bb:ef:0d:89:4d:ba:c3:74:c3:06:d9:45:dc:37:dc:
24:b0:b1:64:75:ea:5a:83:68:0f:ea:59:ec:4a:a4:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:05:35:D0:67:CC:4B:6F:E2:17:C4:84:76:67:0E:05:4A:96:E3:56
X509v3 Authority Key Identifier:
keyid:55:7B:6C:6C:B1:23:A1:2C:2E:E1:78:26:80:9B:E5:3A:DA:A9:44:E6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VXtsbLEjoSwu4XgmgJvlOtqpROY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:2f:3e:7b:01:38:6a:eb:4c:60:10:67:5a:b9:c6:5c:12:
7e:05:35:d6:6f:7f:ce:04:d2:9f:88:99:79:0d:55:7f:62:2e:
21:9b:01:ac:cb:dc:5e:38:5f:ce:c7:59:2e:f8:62:e5:18:cd:
5e:6f:25:f5:94:b7:9f:e0:77:8d:0a:c5:67:e1:33:c8:90:2c:
a5:41:e6:ed:fa:bd:af:e2:84:dc:33:83:cc:23:67:33:8f:f9:
39:af:bd:61:50:c5:a9:b6:53:37:21:77:9b:be:53:9f:41:b7:
8a:b4:62:8c:2f:00:24:d8:3c:a1:2e:c9:4a:67:a8:4b:aa:e6:
04:fe:ff:b6:44:07:34:38:8f:ce:6b:f2:69:b4:dd:18:b7:84:
22:b4:7d:99:ea:44:ae:99:50:41:49:f2:f1:c8:a8:c5:2d:70:
30:78:03:db:73:39:b9:6f:c8:68:cf:0f:78:2d:a7:c0:47:8b:
1a:6c:31:0e:62:e5:3d:e7:0f:c2:d9:71:eb:27:5a:9a:6f:9c:
bd:a0:52:12:70:99:80:35:df:50:9a:6f:19:e6:c1:e2:5e:c7:
30:ec:28:b7:5d:fa:66:3f:ca:5f:c4:1d:8b:fb:9d:2d:4e:7f:
0e:e5:66:6b:4b:3e:8b:51:0d:77:ce:f7:a6:d1:77:25:66:40:
e9:dd:a6:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTdC
NkM2Q0IxMjNBMTJDMkVFMTc4MjY4MDlCRTUzQURBQTk0NEU2MB4XDTI1MDYyMjA4
MTE0N1oXDTI2MDYxMjA4MzcxMVowMzExMC8GA1UEAxMoQjUwNTM1RDA2N0NDNEI2
RkUyMTdDNDg0NzY2NzBFMDU0QTk2RTM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALD/YXVga8jrO5Dpu7xWLTceHI2KvPtleS6b0cBu8BzhTFddjPfI
9RvPyYFdk11ZYENOMYES6CMXii1oEGNsQJ9U8rMLmn9Jw68BbQxfRVco6E0ji9iU
brKKnXQ/O2dq2yctb6nzjKWnkuI3jabMwvx/uW+YHGYSkEHO69pcgjdDijvgb3ug
4ZBUhOGdWZO77a1YVZoiL8i6KacpNLAleKZv2CMt0s8ouGtU8KMQcifA7SA/PDnZ
LNxPuSbnyHv/kd0kdH3VX50QcTFu70WDlmVIcA7DCwVq1oMyTxNhn2PRu+8NiU26
w3TDBtlF3DfcJLCxZHXqWoNoD+pZ7EqkQVMCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBS1BTXQZ8xLb+IXxIR2Zw4FSpbjVjAfBgNVHSMEGDAWgBRVe2xssSOhLC7heCaA
m+U62qlE5jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc1
L1ZYdHNiTEVqb1N3dTRYZ21nSnZsT3RxcFJPWS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvVlh0c2JMRWpvU3d1NFhnbWdKdmxPdHFwUk9ZLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3NS9WWHRzYkxFam9Td3U0
WGdtZ0p2bE90cXBST1kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN4UvPnsBOGrrTGAQZ1q5xlwSfgU11m9/zgTSn4iZeQ1Vf2IuIZsBrMvcXjhf
zsdZLvhi5RjNXm8l9ZS3n+B3jQrFZ+EzyJAspUHm7fq9r+KE3DODzCNnM4/5Oa+9
YVDFqbZTNyF3m75Tn0G3irRijC8AJNg8oS7JSmeoS6rmBP7/tkQHNDiPzmvyabTd
GLeEIrR9mepErplQQUny8cioxS1wMHgD23M5uW/IaM8PeC2nwEeLGmwxDmLlPecP
wtlx6ydamm+cvaBSEnCZgDXfUJpvGebB4l7HMOwot136Zj/KX8Qdi/udLU5/DuVm
a0s+i1ENd873ptF3JWZA6d2mgw==
-----END CERTIFICATE-----
Generated at Sun Jun 22 14:59:08 2025 by rpki-client