Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
File: 9GZUo8iCR6UBa64ysnJws0hfNMU.mft (raw, json)
Hash identifier: 0WdqG8yFbD2E/zoGDp/BALDMBdh+zDxkr1KndRGqNPk=
Subject key identifier: 31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
Authority key identifier: F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
Certificate issuer: /CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Certificate serial: 1BBB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
Manifest number: 1BBB
Signing time: Sat 21 Jun 2025 15:46:51 +0000
Manifest this update: Sat 21 Jun 2025 15:46:51 +0000
Manifest next update: Sat 21 Jun 2025 21:46:51 +0000
Files and hashes: 1: 9GZUo8iCR6UBa64ysnJws0hfNMU.crl (hash: 6EwngmRiujjAufbMNI7PTiRhcDrgI9TDUwz7zPDxP50=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7099 (0x1bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Validity
Not Before: Jun 21 15:46:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3182D6E3A719B347F2ECDE0854CFFCF02BB683E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:f3:1e:e4:06:6a:fe:8e:31:88:2f:77:a6:
a6:6e:27:df:a3:aa:d6:23:2e:42:3d:f9:4c:f3:c0:
a4:f7:c6:58:12:04:63:f8:69:d9:5f:11:30:91:02:
36:4e:57:87:10:ff:b4:39:82:cb:d3:72:82:d4:16:
24:47:e5:d2:1d:5b:77:a4:90:3e:1d:91:19:ba:00:
a7:c4:ab:50:bb:02:51:1f:bb:53:e4:e4:0a:12:58:
04:11:9d:86:3a:2b:f3:a3:6e:7a:2e:60:d2:ab:8a:
f9:40:ad:4b:64:ce:76:03:08:21:d0:30:89:b4:9a:
ef:d8:98:3d:40:41:fa:97:fc:e2:13:64:a2:8b:41:
07:17:21:db:ad:81:95:1e:c1:ff:3e:72:d1:c4:23:
f5:59:79:16:0b:32:16:0b:a1:cf:99:4c:01:73:2c:
40:a1:5f:64:3c:98:17:27:a2:2d:77:eb:c9:42:3c:
26:e6:90:99:41:40:ac:ed:74:33:0a:a6:36:f8:42:
6c:eb:77:41:7c:f8:17:f5:2f:91:53:39:aa:9a:a2:
4f:a7:1b:2f:27:2b:49:0f:d4:ab:fc:cb:6a:2c:73:
19:f4:10:71:a8:26:28:c1:9a:e2:3b:1e:d4:03:f9:
8c:cb:80:b8:a4:20:8e:8b:ae:4f:60:39:72:74:24:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
X509v3 Authority Key Identifier:
keyid:F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:07:8f:61:fa:15:d8:a1:05:ee:39:95:73:09:0d:7f:bf:
b6:1f:b1:1c:5d:c2:c2:ee:47:04:09:8c:2e:6a:55:04:f2:00:
62:18:40:4a:79:45:44:33:d1:69:d3:f9:ea:ba:d0:84:95:bd:
17:c3:1a:92:77:2b:01:57:64:fb:f3:4f:e6:d6:b0:d5:72:00:
58:5b:88:f4:ca:4f:ba:dc:f9:7e:3e:ca:ac:79:0b:39:8c:b6:
54:10:9f:3a:6b:a3:55:f0:e6:4c:8d:6c:c6:4c:c2:ad:a2:3e:
3a:6f:38:e2:ee:56:5e:14:35:b7:1d:1d:6b:c5:76:24:fd:f9:
62:3c:2c:35:48:56:02:f3:56:df:3f:bc:d0:89:ca:94:87:ed:
d1:c2:ff:5c:40:df:df:ff:53:11:fd:be:d5:39:25:3c:b6:e3:
ab:76:32:9e:af:d9:d2:a2:55:14:9a:2f:58:43:d8:1c:cc:d3:
5a:85:91:08:51:01:dd:7c:e1:7e:5d:aa:e3:7f:78:b5:74:86:
ad:c5:ec:3c:d1:2b:1e:b9:5b:26:68:ac:a0:58:ef:5b:e8:9e:
12:2c:08:0f:cf:20:ee:16:e1:4a:c1:9b:a5:36:80:a6:2c:7d:
c8:61:d3:06:33:9e:c9:72:6d:29:57:81:11:61:57:1e:e3:a2:
95:02:5d:8b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICG7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjQ2
NjU0QTNDODgyNDdBNTAxNkJBRTMyQjI3MjcwQjM0ODVGMzRDNTAeFw0yNTA2MjEx
NTQ2NTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMxODJENkUzQTcxOUIz
NDdGMkVDREUwODU0Q0ZGQ0YwMkJCNjgzRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBwfMe5AZq/o4xiC93pqZuJ9+jqtYjLkI9+UzzwKT3xlgSBGP4
adlfETCRAjZOV4cQ/7Q5gsvTcoLUFiRH5dIdW3ekkD4dkRm6AKfEq1C7AlEfu1Pk
5AoSWAQRnYY6K/OjbnouYNKrivlArUtkznYDCCHQMIm0mu/YmD1AQfqX/OITZKKL
QQcXIdutgZUewf8+ctHEI/VZeRYLMhYLoc+ZTAFzLEChX2Q8mBcnoi1368lCPCbm
kJlBQKztdDMKpjb4Qmzrd0F8+Bf1L5FTOaqaok+nGy8nK0kP1Kv8y2oscxn0EHGo
JijBmuI7HtQD+YzLgLikII6Lrk9gOXJ0JKp7AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUMYLW46cZs0fy7N4IVM/88Cu2g+kwHwYDVR0jBBgwFoAU9GZUo8iCR6UBa64y
snJws0hfNMUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTQ3
LzlHWlVvOGlDUjZVQmE2NHlzbkp3czBoZk5NVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOUdaVW84aUNSNlVCYTY0eXNuSndzMGhmTk1VLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTQ3LzlHWlVvOGlDUjZVQmE2
NHlzbkp3czBoZk5NVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBCWwePYfoV2KEF7jmVcwkNf7+2H7EcXcLC7kcECYwualUE8gBiGEBKeUVEM9Fp
0/nqutCElb0XwxqSdysBV2T780/m1rDVcgBYW4j0yk+63Pl+PsqseQs5jLZUEJ86
a6NV8OZMjWzGTMKtoj46bzji7lZeFDW3HR1rxXYk/fliPCw1SFYC81bfP7zQicqU
h+3Rwv9cQN/f/1MR/b7VOSU8tuOrdjKer9nSolUUmi9YQ9gczNNahZEIUQHdfOF+
Xarjf3i1dIatxew80SseuVsmaKygWO9b6J4SLAgPzyDuFuFKwZulNoCmLH3IYdMG
M57Jcm0pV4ERYVce46KVAl2L
-----END CERTIFICATE-----
Generated at Sat Jun 21 22:04:52 2025 by rpki-client