Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft
File: G-BrtSrwKOYaxD18i7PVCOpP030.mft (raw, json)
Hash identifier: kD4CIAz1mnRJ/GaWUbEMOuM7yH6tVtSwOD32w8WkT4g=
Subject key identifier: E0:BD:65:51:BC:E0:B5:8F:95:82:8B:D9:D7:07:C9:44:B1:99:BB:E3
Authority key identifier: 1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D
Certificate issuer: /CN=1BE06BB52AF028E61AC43D7C8BB3D508EA4FD37D
Certificate serial: 47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft
Manifest number: 47
Signing time: Wed 05 Nov 2025 10:15:03 +0000
Manifest this update: Wed 05 Nov 2025 10:15:03 +0000
Manifest next update: Wed 05 Nov 2025 16:15:03 +0000
Files and hashes: 1: G-BrtSrwKOYaxD18i7PVCOpP030.crl (hash: O5dbIMyF5TVelCieuvDg8jT8CtPkK6I4AXpAqfhGRBE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE06BB52AF028E61AC43D7C8BB3D508EA4FD37D
Validity
Not Before: Nov 5 10:15:03 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=E0BD6551BCE0B58F95828BD9D707C944B199BBE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:b3:c6:11:06:c5:01:76:73:81:93:dd:f6:
fc:23:33:6d:9f:5c:d3:d5:9e:08:14:ac:a5:a0:57:
f9:a3:e0:ff:ac:43:b7:e9:4f:97:14:08:4b:25:f6:
d4:7a:8a:22:c1:dc:ea:d2:cb:aa:8a:ae:67:c1:50:
a0:45:94:e4:8a:9a:6d:36:a5:dd:7e:df:93:93:64:
de:a8:39:ff:09:de:c6:6c:bf:94:6c:23:f2:9a:9d:
62:4c:25:70:87:43:2f:b5:89:4c:1c:02:0c:70:03:
e7:8e:61:0e:fd:77:aa:6e:fa:ec:35:ac:07:9b:99:
50:67:60:63:0e:be:f0:59:58:bc:5f:63:8e:63:76:
d8:45:f0:fd:c5:40:73:72:0e:50:39:86:aa:d4:44:
cb:67:33:f5:09:ed:80:50:00:7f:2d:5d:9a:4e:54:
4f:71:14:1d:c4:d8:66:68:78:a1:52:ec:cd:64:3c:
50:59:bf:f4:88:03:ce:e9:09:12:57:49:f9:60:dc:
7b:2f:f5:2c:ba:a4:67:35:b5:f4:73:bd:e7:44:05:
7b:fa:d5:7d:81:13:41:e4:72:b2:2e:db:f1:1f:de:
fa:12:d3:16:ed:02:e4:e5:e1:be:e0:a2:dd:aa:43:
81:c6:1d:26:35:97:19:df:d5:b1:14:a4:8a:11:9c:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:65:51:BC:E0:B5:8F:95:82:8B:D9:D7:07:C9:44:B1:99:BB:E3
X509v3 Authority Key Identifier:
keyid:1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0c:f8:7a:6c:67:84:4f:e3:76:fe:37:29:64:f8:a8:66:72:
fa:85:99:09:c5:f9:c7:03:9b:6d:3f:e3:29:1a:ea:80:21:a9:
cc:1b:48:62:b2:0e:3f:98:8f:58:99:bf:48:97:f8:8b:e4:6e:
05:17:98:dd:3c:2c:9f:d3:df:27:ee:1d:30:09:17:49:29:d8:
d5:7a:5e:a8:5c:73:fe:fb:72:c4:09:9c:4f:f1:0c:a7:2c:42:
87:4f:5d:a6:80:11:64:d6:10:ad:73:c4:9e:c0:c4:fa:24:04:
a8:da:87:41:24:f8:8e:d6:7a:74:0a:9f:cc:f4:69:b7:03:ff:
5e:06:e1:fe:d3:dd:68:b6:0a:ed:4a:14:16:f4:84:39:6f:5f:
05:10:ec:44:7b:25:a7:84:bb:f6:7d:33:94:e3:57:6f:8b:7f:
53:1f:b6:67:f0:ae:69:8e:08:f9:3a:5d:83:4d:fa:3d:4d:db:
13:f3:f6:d5:be:eb:9d:c6:9d:62:d4:59:fa:85:b8:23:b9:d7:
12:0d:be:24:1b:84:5f:9a:53:bb:aa:0f:2a:9c:b3:eb:7c:b2:
51:99:0c:c1:71:3e:86:d8:81:d2:ea:a8:7f:91:49:4e:15:58:
71:fb:9c:fb:e2:3d:a4:38:42:aa:4f:f3:9f:87:43:bb:20:7e:
fe:95:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:08 2025 by rpki-client