Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft
File: GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft (raw, json)
Hash identifier: j8i48chC+saFT9HuGc+3fbMgRuHUDeinWvTg5LZTM3o=
Subject key identifier: E5:EE:16:F4:40:CD:5F:F0:D1:9C:EF:A4:E8:7D:CE:07:14:31:03:BB
Authority key identifier: 1A:C5:57:C3:C8:A9:31:85:D5:3E:6D:33:D0:53:21:54:1E:AA:2B:F6
Certificate issuer: /CN=1AC557C3C8A93185D53E6D33D05321541EAA2BF6
Certificate serial: 0133
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft
Manifest number: 0133
Signing time: Wed 05 Nov 2025 10:14:07 +0000
Manifest this update: Wed 05 Nov 2025 10:14:07 +0000
Manifest next update: Wed 05 Nov 2025 16:14:07 +0000
Files and hashes: 1: GsVXw8ipMYXVPm0z0FMhVB6qK_Y.crl (hash: N9Txe3usnhkxILVNAHFLt0RMgIIPZOs8DsNi7CksSEE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AC557C3C8A93185D53E6D33D05321541EAA2BF6
Validity
Not Before: Nov 5 10:14:07 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=E5EE16F440CD5FF0D19CEFA4E87DCE07143103BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:fb:ad:61:72:52:a5:0f:f4:13:c5:f4:4c:
de:d5:03:36:d0:09:5e:af:2b:7b:f0:04:14:9f:64:
67:e7:62:f1:82:14:1f:ac:78:be:b7:97:62:1f:1b:
a6:de:92:71:d9:3b:3e:ce:65:f5:ff:0a:90:70:03:
07:58:c7:b2:65:39:f8:b2:f2:97:ca:95:29:6a:34:
ad:75:06:03:0c:af:c8:5b:82:57:6e:6f:8d:eb:d5:
44:04:75:6a:42:6c:b0:d3:a1:ad:79:a9:3c:e8:77:
98:a8:3e:2c:e2:7a:62:8c:c9:18:66:a0:92:0f:b4:
5c:9a:3b:bd:c9:c9:15:69:76:22:d6:0f:4a:54:c1:
c9:2c:17:88:ae:1a:27:50:d9:16:58:5c:d1:bd:2a:
14:8f:3e:63:ca:81:ef:cd:df:d1:4a:32:74:91:77:
a4:e4:c3:e4:36:a2:e4:6c:28:28:2b:44:0a:c3:2d:
b4:1e:7e:34:c1:96:bb:f5:a6:e9:09:24:a3:b1:e2:
19:58:81:56:b4:fd:55:2c:d4:07:81:f7:6e:d1:c9:
96:f9:d7:c0:ff:62:ba:c5:0e:a0:50:96:67:4c:ac:
ff:86:65:1d:47:3d:ce:7c:a5:df:70:02:27:a6:b5:
77:cb:32:00:8c:f8:52:bd:a5:29:32:11:6e:b2:4a:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EE:16:F4:40:CD:5F:F0:D1:9C:EF:A4:E8:7D:CE:07:14:31:03:BB
X509v3 Authority Key Identifier:
keyid:1A:C5:57:C3:C8:A9:31:85:D5:3E:6D:33:D0:53:21:54:1E:AA:2B:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:01:a8:5e:23:f0:35:9b:fc:e1:e3:ec:2d:44:2e:cc:e7:
30:f5:a3:6c:43:80:75:fa:4e:7e:c7:ea:a7:07:ca:46:9f:13:
7e:86:f0:76:76:3d:b9:b7:da:0a:d5:04:d7:09:42:17:bc:57:
79:d4:de:1f:d8:f9:60:a6:6d:a9:04:51:ac:58:d4:c4:17:59:
6e:ab:8a:ed:61:9a:c5:19:c0:6b:51:87:63:fa:b9:fa:95:7a:
73:05:4e:92:62:6a:9b:c8:d0:0e:2a:41:7e:5d:16:64:75:11:
97:98:fe:34:9e:8d:63:26:11:e0:9a:f2:89:d1:a1:77:be:5a:
17:2c:d7:df:a1:21:ed:d5:db:d4:02:f3:8b:b4:a6:4f:f3:7a:
5c:9f:ca:b0:b2:ff:5b:8c:f7:c6:ee:1c:41:73:83:05:f3:8d:
48:4a:3e:67:a8:56:76:63:bb:ae:c3:f3:37:96:1f:c9:9e:13:
72:19:36:19:23:9c:60:b6:06:fa:e1:45:bf:ae:e8:68:66:00:
bc:6d:ca:09:12:09:9f:20:1d:77:c1:5e:bf:78:6b:73:0e:76:
63:8a:62:ce:dd:af:9d:48:72:d1:11:93:60:89:14:2e:86:16:
60:10:49:06:3e:49:78:74:1d:a6:ae:31:56:b5:46:8c:f2:5d:
0d:1c:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:26:06 2025 by rpki-client