Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
File:                     WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json)
Hash identifier:          Cx3kmx7UKjSkFumU3l+jYOHhv7kuECG1U1hmu9epsKA=
Subject key identifier:   0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Certificate issuer:       /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial:       23DC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
Manifest number:          23A9
Signing time:             Sun 01 Mar 2026 21:28:11 +0000
Manifest this update:     Sun 01 Mar 2026 21:28:11 +0000
Manifest next update:     Mon 02 Mar 2026 03:28:11 +0000
Files and hashes:         1: 3I2mYclKxrMAKQwkc-Lh7fH_HWA.roa (hash: MUbHqMWDF2mVWWtfz+nAtPeV2UeApkC0xJ1Rt014+E4=)
                          2: 4DB6b8uYtZlt1s-s0_Kj8Gd-4Qk.roa (hash: SQKRUUQXTT1pPzXIPeZ5Tyb7WMo6EbNpgE1vC8RTOo8=)
                          3: 7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa (hash: //aLn6ijjd0RsSlEJvFmoXmtL59RIBJT5b37RKtCGhs=)
                          4: 8B3ee2zwLOh8s1iFIKMVsnmZuec.roa (hash: iJOgEVfcK047KEt3I/W4CB27slTmoT+pHxQgHjtHKwM=)
                          5: 8s_bHXEkGfDphZK40c_QLrHy7Is.roa (hash: AMCxQuJ5tzynj2ZxB3wziDhXYAJbbKRS+q8CIWOh1kg=)
                          6: 8tMAOHTX2RAHsoAgcZcXAwntHIc.roa (hash: QmSQGSdv0VeN2QLbhV1cMwoSE6Or5hxCF7OMt3RkGCM=)
                          7: 9Bj9UB3C5NwxT6KrRVdQ2YQUous.roa (hash: INv9naWBG6l1s217kvxz8c7uBcSFLeG45Nf22a5KzMs=)
                          8: EC0cSkLvF1XrlKJ5N0KYO0_vabQ.roa (hash: Xawvh5t2K2TS486my8Cy2k18s+hwdhLtgjfxPlzT6ns=)
                          9: IFIcvn9UMKRt83vukpON6Sbhixc.roa (hash: ee53oRxFxX0OVmISpeWc6zEnCZNfNuioeAQEgPEAWCM=)
                          10: IQ3MBoVNoiKyjgv81qd4k1Fq_ZA.roa (hash: Q4Zo416Ok8oARcqbnlhpOSGq67Max3Ojni1CpzqUPcM=)
                          11: IkZF2VORQzlbUojsrTphCdszKqc.roa (hash: 0kC36+mVolBQQCuRyquKEScwAsSkdyyZX4x06kOmSiI=)
                          12: JFedtLxXu2_P4wgS16PoE5O5Epo.roa (hash: DJx6HuoXo46mlA6OkRWCW6bZ0auPhQEZnc6k7+J0/HM=)
                          13: JG36Bot0vUyWDO-Jkmcyw36ExuA.roa (hash: pUUT83yycKjx7TSfZoKvhxg7ZJy6HmCwysuJQnLONXM=)
                          14: NHT4Ire_F8NAl-Tb7bg1fVCCio4.roa (hash: AOaMGPdwVSY1SaEMTRPF4k/DYj0UzZkZvvG3vvPDmyk=)
                          15: OtfbZ3gsQrltvwra6gQF22qcIe0.roa (hash: O+IOEJSSLi8h3oBWbnpxvu/o+iCTpZywh35PXR2ooTc=)
                          16: PqrQWguI1l16_vyjW7YcSXSeaOc.roa (hash: 7W+C0OPZnZshm3rmQhouRxAtiDes33YaPRQbb7Oqu58=)
                          17: QXTeHANBHYjlUi1Un6heiD8bVqI.roa (hash: ramgfbyXhG1Ot3RsEzvi2GitSrW1e/E/aXaqe2oYOmw=)
                          18: VIyCJZhgUD5RSMmX-H-1j26GsG8.roa (hash: lOA+VJIaIu+ew6lIlcE/8MB832PX1FlBp3bU7gfvvyc=)
                          19: VS17zQHJixrbUv4jioh85SjDNY4.roa (hash: mrVMrRtK8XPKGGEbzwkp5O1/ilSYDWqZNOunXjUgl4Q=)
                          20: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: RWaU2nM0pY1yKTCEI89CsmXhfG+jheAsBkTM7e/Ldg0=)
                          21: YAKlFb8WHzILwfEf2d-vY0XO2tc.roa (hash: ucFbqWELYtFSKLzhoZxsZihUE3mTffRhAPcL5Ho7sU0=)
                          22: YHoC-Ib7VAPfOYMbo8u5Of10E5c.roa (hash: 2QPtUsTGSjLGKyk0f7KmLP5/Lp4ZoaIrEQvVm6IKzOI=)
                          23: dfwYIoifEv--bOuqLCtW2pLyHXk.roa (hash: JGH++bFpD2o8ad6jLOY3U43hyTYOpvAXrQ5Qr6Ak8jM=)
                          24: e2sv8-TY5f8TwpeWdzOHudhiy7U.roa (hash: Kg2UK+S6W3aXr3C3ZkJLPWOvHhxx8HCuDZ6HqqV4DCU=)
                          25: fxJrd3gYlKjYvQG-onLTbkCOZ-U.roa (hash: bDWJAjgscfjM8jDQgSehgcjYfsouKFrvcdn8jNWJZ80=)
                          26: glkUBO5zohLJDRAqjkhD8wjvXpM.roa (hash: XjMVtkTTkVz28UaUhyt/l/TiYMWMov+TCHUiEhVtcFg=)
                          27: h6IigAHQTvufsTVGRtf3LVHt5rc.roa (hash: mnjF2uSX2BUy0FUGkbab260johYF3bE+fxzCc9zlpeY=)
                          28: hQekkRvCnaT87CkTa0XVc8pGjSE.roa (hash: 2Cave0s5hd90dhKSDLNwpF7tyQxIr+gysPEYS2b0kmw=)
                          29: lCskf0tlbZLLPtlmhRJ5YbwGRFc.roa (hash: YHt5s+uCl8EdztQtvltmEs8xx/gposAuDHZm7SOVtK0=)
                          30: ll7KL1kbH0rXnmkrLvw0io9RU2k.roa (hash: I9vN+RRN+rOWoaSYHOf9YHTRcz47y3nrL3NkUMEeZz4=)
                          31: olUeB1CNDHKjVnVWT_T_eISPt7w.roa (hash: n7mLwZ3pkgroxWqSR24q10qT35N3F/fhVMaqIENpHN4=)
                          32: p5exbNsYSmDiln-g7yIyKvynhwU.roa (hash: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs=)
                          33: sHLaREuRSri21uZaxtYGVxsoiBw.roa (hash: 9IWsxykmJbA5G27sG5faz3LnxJL1W5udlgYSRyD7Oac=)
                          34: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (hash: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4=)
                          35: wI6FT84hHj6nd1ygzpQJf6AK8EU.roa (hash: 1MHw8qO3AocWqSMi+r5SsHVcD4aXXomSvIwZyvPg2r0=)
                          36: zhejpkP-WtqCIc57pwiUP3W6bTQ.roa (hash: ptnSB5i0kpWSn11Ib7z2wujWybVtI/CkcaoHvqOClYQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9180 (0x23dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
        Validity
            Not Before: Mar  1 21:28:11 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69:
                    25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d:
                    9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30:
                    a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7:
                    e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b:
                    f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40:
                    8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2:
                    c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98:
                    98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7:
                    64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd:
                    f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45:
                    aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36:
                    86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75:
                    5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24:
                    0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84:
                    6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4:
                    56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
            X509v3 Authority Key Identifier:
                keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:6a:1c:23:8b:c7:ca:1f:78:cc:ff:94:4b:42:82:1c:91:
         17:bb:8d:c5:c6:19:5c:94:3a:d8:92:4c:92:d3:13:45:a9:10:
         08:dd:a2:0b:a9:b5:fd:c9:86:48:bc:cb:10:3f:3d:d2:93:30:
         6e:18:3a:31:d1:5c:20:ae:10:1b:75:63:91:89:4b:09:bd:b4:
         6c:37:8f:57:02:b2:a4:5f:72:cd:fb:3c:f2:fe:5d:7f:e6:20:
         38:6f:c5:0e:5b:f8:f9:85:2f:f0:32:f8:65:a9:1c:c9:c1:8a:
         4d:d9:93:13:df:ca:9c:0b:33:e0:33:b1:8e:f5:25:57:18:6c:
         0d:e2:95:60:fb:c4:3d:49:d3:2a:6d:fe:5c:a7:9c:0a:b0:14:
         73:d7:13:94:41:13:42:65:15:ee:0d:3b:5a:51:6b:9a:ce:d0:
         2e:d4:0b:b3:84:35:80:bf:de:71:52:b9:74:2d:f1:33:a4:83:
         5f:df:fb:88:7e:47:ed:85:05:e3:bb:d0:cf:b6:4f:77:ca:84:
         03:a5:e2:c7:15:b8:7a:b3:0e:8a:e4:42:65:a9:94:1d:0a:db:
         ce:13:16:ef:86:5f:9e:00:84:ff:49:0e:5b:e6:82:02:61:2c:
         19:57:05:cb:08:d2:0d:25:58:4d:e5:19:98:10:42:c8:d4:9a:
         05:3e:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:37 2026 by rpki-client