Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json)
Hash identifier: g5c+x/bP4n1QjqZylbJGeJCNL6+BjIc5tM6r7hXg1Os=
Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Certificate serial: 23
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
Manifest number: 21
Signing time: Wed 13 Aug 2025 14:02:47 +0000
Manifest this update: Wed 13 Aug 2025 14:02:47 +0000
Manifest next update: Wed 13 Aug 2025 20:02:47 +0000
Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=)
2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=)
3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: 44ksyWQ5RK1b/oARuV0HjOb1ohf92jq3jckU10ggt+Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
Validity
Not Before: Aug 13 14:02:47 2025 GMT
Not After : Aug 7 05:14:01 2026 GMT
Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f:
f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a:
b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d:
ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d:
40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8:
b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c:
d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32:
da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed:
5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5:
b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53:
b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af:
43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac:
5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5:
61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73:
22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6:
bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99:
4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D
X509v3 Authority Key Identifier:
keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c3:57:d1:11:a2:1f:93:eb:9b:77:f6:ae:e5:9c:5d:58:f4:
76:92:28:8c:45:2b:4b:5c:9b:87:1e:91:3d:ec:6c:d3:e8:c1:
61:a8:ca:bd:87:65:e7:61:8e:4f:e7:76:5a:13:7e:18:af:4a:
ab:f4:c1:68:42:e5:c0:b3:b7:15:f6:28:63:85:90:8c:7d:97:
a0:f0:74:69:3c:8f:b7:d0:e2:49:8f:57:78:d2:4c:03:45:95:
ab:9c:a2:bf:cb:dd:d4:0a:d9:18:bb:fc:48:4d:ce:9a:f7:98:
72:5c:19:ab:2a:5b:59:f2:fe:30:5c:51:2c:68:98:fe:34:32:
33:ec:5e:5e:20:36:b4:ee:25:d8:14:b5:e5:93:3c:8c:b4:69:
51:f2:d3:8f:c8:66:07:28:9a:91:ec:3c:4b:56:3f:2a:e9:19:
d5:c3:bb:1c:0e:2e:e8:75:fc:40:5b:b6:95:96:29:ce:71:9c:
f6:a4:c7:94:d2:33:c1:88:63:19:bd:67:85:e0:14:9e:d9:77:
ea:54:51:cf:42:f3:94:3e:48:75:fa:d4:15:59:aa:04:d4:b5:
08:47:7e:a5:ed:95:7d:26:e9:23:75:3f:64:a6:8f:35:70:db:
88:75:7e:ee:82:33:04:79:db:ef:ed:61:c7:8b:87:19:b3:aa:
a1:64:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:24:06 2025 by rpki-client