Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
File: rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json)
Hash identifier: yw/cwvFsaCFzm0FgP4EVcd2CGT9zNccz1Wg9FS4fXpI=
Subject key identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 1B49
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
Manifest number: 1B44
Signing time: Fri 20 Jun 2025 10:47:01 +0000
Manifest this update: Fri 20 Jun 2025 10:47:01 +0000
Manifest next update: Fri 20 Jun 2025 16:47:01 +0000
Files and hashes: 1: MCB3KJEpS5d2tI9HESY2f6-mB5Q.roa (hash: CvO0rxwQJpDF21wFHuLQBCHhxxdUOE1ZFTZaucA3ZlQ=)
2: XUqYO0gIBGKJdMnRrWNYofV9ASg.roa (hash: wk1aQuhsTJNh/QxRDGrQZqRt8vq+yd3VLEO5BonUzDY=)
3: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: ogsFkCw4zMYhGtOb6JzD0svjIJsjq1R1a//nYo5Odg8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6985 (0x1b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: Jun 20 10:47:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15:
e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b:
5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4:
db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa:
36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb:
5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1:
05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65:
01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49:
86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b:
02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75:
bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86:
3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7:
34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c:
72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff:
8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77:
12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06:
ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:28:80:19:1e:44:99:04:ee:26:78:c1:b1:ac:1e:69:cf:81:
db:3a:90:6b:10:c2:21:3c:1d:9a:45:54:b1:92:76:14:1c:a5:
43:af:72:b3:01:8c:45:ab:7a:d5:62:de:2e:88:0d:e1:16:79:
c4:6d:b8:73:e3:35:b2:b6:7e:f5:9b:e7:c9:d6:9a:a6:37:ad:
7d:59:67:f0:75:4c:c0:6f:d4:e1:65:67:e3:d6:28:4c:f4:46:
2d:66:b2:a4:08:20:b5:ff:a5:bf:b7:97:81:4e:53:7f:fe:cf:
b0:eb:75:eb:55:e9:c2:60:55:dd:de:43:18:bc:98:4d:7f:1e:
ad:11:09:57:ae:fb:2b:ee:af:01:ca:23:f1:b0:93:f5:a4:06:
cb:4e:d5:46:a3:13:be:80:3c:a7:23:eb:f1:29:d3:ac:1f:d2:
01:5f:54:de:c8:ad:35:28:20:63:3b:af:5f:03:f8:ad:5f:04:
58:32:d0:fe:30:30:ac:d0:96:37:0a:e5:0c:0d:ed:58:4c:a9:
71:a9:0c:f5:1b:15:4a:6e:61:5b:33:1a:f1:0c:98:79:57:84:
9e:4a:f9:c4:13:c6:70:d5:06:84:d8:d3:aa:06:45:4f:9f:e0:
70:87:9e:b7:b2:47:ee:23:74:9c:3e:a6:67:b6:4c:6a:2e:9c:
90:5b:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:35:14 2025 by rpki-client