Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
File: iY_NiB8trZUa3DHkgcTtyCCTGtM.mft (raw, json)
Hash identifier: RgXyWydRiyEoJUEcccORh7pRpXq2YlbR8yqbxrW4HhY=
Subject key identifier: 26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
Authority key identifier: 89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
Certificate issuer: /CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Certificate serial: 1B41
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
Manifest number: 1B3D
Signing time: Wed 13 Aug 2025 13:02:28 +0000
Manifest this update: Wed 13 Aug 2025 13:02:28 +0000
Manifest next update: Wed 13 Aug 2025 19:02:28 +0000
Files and hashes: 1: Wzii9_QWmSVl-N_6G91avja0YOc.roa (hash: J4Y7c48I7hy7enjeQZaFVZFGM2fxvpU0zMufHNQ7zqQ=)
2: iY_NiB8trZUa3DHkgcTtyCCTGtM.crl (hash: oNHcOtJIWsSRqgwzNRQ955ZuxUajJxNKfSDD6zKVVqg=)
3: uM6Bqukp71aahKZqrWcNnfGwOYI.roa (hash: H3DFr6Y9Y8ld4YjkkbdfArBir243O4bRpYhIkO/uIQ0=)
4: z8nEI0PVZKixUPYdOSjsiaDkmF4.roa (hash: iqSQUxk8APbiU25wwbDe3cNxYBayQ78aqZz8203Okhk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6977 (0x1b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Validity
Not Before: Aug 13 13:02:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=26D5A2250C9C07F5B0C055570D9FF4BBDA7D20B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:a5:d2:e2:cc:2c:37:c8:aa:43:13:1a:2c:
9e:fb:21:87:69:c8:00:c4:83:45:43:c3:87:cf:ed:
29:50:14:42:61:c4:66:ce:6d:c5:59:9d:2a:9f:f5:
67:c5:ae:17:f8:1b:2c:75:60:2b:dd:bf:b3:fe:59:
02:7a:11:d2:9a:11:21:36:5f:cc:8b:3b:2c:5b:8c:
d4:bb:20:52:8e:a0:62:a2:dc:14:29:42:26:97:7c:
8e:fc:af:7b:14:b3:8d:df:61:27:09:8f:a5:1f:f8:
e9:93:a3:ba:ab:cb:79:80:5b:c9:45:d3:bb:50:d8:
ce:eb:7c:84:95:48:98:37:e8:22:8a:cd:36:85:2b:
c1:56:70:63:86:c1:cb:55:20:10:42:5e:ad:98:9b:
d2:ac:c2:40:1b:3e:66:55:7e:6e:49:9d:1c:8a:75:
c7:5b:e5:2f:77:8d:20:67:2c:a6:aa:d6:f8:b4:d1:
40:47:e2:71:23:01:9a:19:7f:9e:ff:62:95:a1:39:
e9:1a:c6:76:14:3a:93:c2:13:9f:4e:5c:81:88:80:
f6:e4:0c:d9:2a:b6:c9:98:88:1e:d8:e0:53:92:bb:
e7:43:08:67:11:12:ed:90:b3:45:9d:3f:ae:be:a5:
6d:91:1f:d9:b3:9a:8d:d2:bf:4e:09:a1:76:43:b3:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
X509v3 Authority Key Identifier:
keyid:89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:98:56:c8:dd:a1:de:5b:b7:e0:57:49:1d:62:f1:d3:cf:
85:21:f3:46:44:b8:ad:0c:ff:8c:9e:b2:13:2a:04:eb:6b:cd:
49:2a:97:99:c9:26:f1:3c:60:5f:20:d0:16:82:e9:77:a1:3d:
84:a2:25:ed:5c:00:a9:ab:f6:0c:4f:fe:84:0e:57:e8:4d:79:
76:29:d0:35:56:29:27:93:78:21:99:b5:39:5a:d5:66:ab:c2:
f0:18:45:1a:5e:27:18:07:ac:5a:54:83:12:3c:3e:75:66:d3:
a9:e7:e6:af:d3:fb:93:82:72:91:a9:df:87:89:0a:db:9b:6f:
33:42:d4:c0:54:3a:ed:bf:4d:89:ce:a6:f6:60:c7:ec:d7:f6:
e5:45:aa:8f:15:75:43:14:10:65:c9:31:d8:98:79:98:49:df:
bf:99:df:9d:66:9e:9d:99:b8:c4:e2:b6:74:15:0b:bf:a8:f5:
8d:24:61:05:b2:35:d9:69:fd:09:c8:f8:b2:8b:1a:8a:03:8c:
a3:2d:44:d4:3e:6b:f8:d3:9c:ad:21:e0:fc:7d:cd:c1:d2:e2:
82:45:0b:6e:db:53:7c:ca:3a:42:94:2c:ef:e6:00:af:f7:ce:
2b:e6:b4:90:4f:ae:b3:b6:3d:1a:c2:5e:2f:00:31:96:45:6d:
41:8d:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:16:37 2025 by rpki-client