Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft (raw, json)
Hash identifier: u1lKvz8Z+DbWsfQQVMTiDoTl8Qn+1NPXd7c1c9DNMNA=
Subject key identifier: C2:62:07:12:EA:68:D0:4F:2F:40:4C:DB:B8:7C:4F:92:01:5E:19:7F
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 1F6F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
Manifest number: 1F52
Signing time: Sun 01 Mar 2026 21:28:18 +0000
Manifest this update: Sun 01 Mar 2026 21:28:18 +0000
Manifest next update: Mon 02 Mar 2026 03:28:18 +0000
Files and hashes: 1: 0E6YaX_ZkTmxIXxwXk9sk4XYcyc.roa (hash: 0pwk7GmuIrzOhoExjRaHCjzlQqHhy6sVyXdbKEPnOXU=)
2: 0dJuQ0720iCZ7J7kK0Nn7RYa_aQ.roa (hash: 38fMSWbprrZRki9ZcLsACTU/WQBQnbHHgKHheoQ0WAA=)
3: EL5ErkN0P007DJzgCx9G2DYusKE.roa (hash: ReDL0dSdv5KJmhvt7BUcP3v3HEljsWajNtiin6ipjcQ=)
4: L3xVvqbp8qrdaKJa1Ao7L3kD-X8.roa (hash: wfD3oXUcbB1mCNSSuVuArK+5sRdLnl367eN5RJXt0ag=)
5: Li1GXlVR7-1WtyizCkq10XCmBxk.roa (hash: hChzpDRcCbmmCClO6Yuwe2IizHjT2Rh8SWFUC+QrzEc=)
6: ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl (hash: 4GeC8iIE8i3mVZmY6ODbQ+xaymGaEZyKRjySxCt5Jic=)
7: iyCtgLATBr-8gEhFHD1b0vfv7t4.roa (hash: YaX4PtckpLCUwZm5/XbE9HZsB8cS4SKoWtvEWpN5Z7w=)
8: vLg3zOHflDe4QUHgAxPEsIx-nDg.roa (hash: uZEnQ6vF9Q8uyg0uWCWLlEtTXosUMr5/EYWvCjXmQFA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8047 (0x1f6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Mar 1 21:28:18 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=C2620712EA68D04F2F404CDBB87C4F92015E197F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:a8:f5:db:b9:d6:e7:7c:3c:6f:c8:56:6f:
c7:98:59:47:31:de:84:11:2c:12:57:78:1b:e2:dd:
59:0e:2f:24:2b:93:84:f8:ff:d6:6f:b1:fb:3d:e3:
a6:f1:73:de:68:f6:c0:0b:0c:7c:2f:c4:25:03:e4:
35:ae:fb:26:d9:14:aa:7d:4c:ae:63:8f:91:67:06:
b4:8d:84:34:3c:fc:f6:18:38:b6:51:03:94:34:af:
e5:d7:20:66:05:38:17:b8:c7:fa:c8:3c:7e:cc:e6:
97:0b:14:f4:29:3c:60:a2:17:4e:f7:67:2f:b9:4b:
13:5b:4b:b5:be:51:dc:50:77:7f:b9:7e:2a:26:ff:
93:84:79:2b:0b:b0:38:95:9d:4a:5b:e0:66:0a:83:
ad:fa:e8:36:dd:ef:80:9f:f7:33:db:5d:13:10:f6:
d6:dc:63:a2:9b:3f:42:c2:c6:89:79:7d:7e:a4:26:
b8:41:2a:22:13:81:60:07:aa:a6:f0:8d:ee:17:40:
91:16:2c:d6:9b:0b:ab:60:6f:af:81:52:45:f8:39:
da:e7:c6:1a:24:44:0c:18:ce:a0:e7:1d:0e:db:f6:
7c:45:91:40:3d:b0:55:81:43:9b:a6:ff:b2:07:0e:
7e:16:b4:56:f5:c8:63:46:a9:20:1d:4d:e7:fc:09:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:07:12:EA:68:D0:4F:2F:40:4C:DB:B8:7C:4F:92:01:5E:19:7F
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:96:05:1d:de:ed:06:47:ac:6b:90:59:00:df:e9:0e:75:49:
43:91:d5:f2:3c:71:1b:fa:61:80:78:70:3e:d3:40:3f:5f:e2:
de:bd:15:03:fd:4b:cd:77:f7:84:5d:70:1d:86:92:16:70:5f:
1a:d2:28:f1:43:6a:93:ba:21:20:45:45:65:87:99:55:65:61:
05:89:0a:59:da:11:40:e2:23:d2:26:58:c2:7b:e8:f1:ae:bb:
c3:ad:73:b0:07:e9:7f:e5:74:0c:cf:2d:4d:45:06:3c:03:70:
6d:3f:7a:fa:6e:8d:86:30:c2:c4:14:4b:a6:4a:bc:39:8d:b6:
2c:8d:53:73:05:bb:40:a0:85:77:86:a6:f3:38:d2:c6:f8:0c:
f8:29:be:09:1f:a7:30:41:92:9b:3a:9a:34:81:5d:cb:b1:e0:
01:fe:70:ca:10:4d:0d:31:67:49:18:2d:3f:74:69:1d:36:4c:
51:d7:f4:2f:33:ee:49:19:01:23:54:b5:73:4c:a2:a1:d4:1e:
9c:9f:cc:d5:a3:bc:57:60:eb:9f:ff:44:2b:39:02:f8:a6:46:
85:4b:c6:e7:d3:b1:d4:03:22:df:5a:33:09:8a:6f:01:16:99:
da:d8:24:d2:ad:01:a8:a0:06:70:9a:75:26:b4:68:f1:5a:c9:
86:61:39:42
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICH28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE
QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNjAzMDEy
MTI4MThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMyNjIwNzEyRUE2OEQw
NEYyRjQwNENEQkI4N0M0RjkyMDE1RTE5N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGYKj127nW53w8b8hWb8eYWUcx3oQRLBJXeBvi3VkOLyQrk4T4
/9Zvsfs946bxc95o9sALDHwvxCUD5DWu+ybZFKp9TK5jj5FnBrSNhDQ8/PYYOLZR
A5Q0r+XXIGYFOBe4x/rIPH7M5pcLFPQpPGCiF073Zy+5SxNbS7W+UdxQd3+5fiom
/5OEeSsLsDiVnUpb4GYKg6366Dbd74Cf9zPbXRMQ9tbcY6KbP0LCxol5fX6kJrhB
KiITgWAHqqbwje4XQJEWLNabC6tgb6+BUkX4OdrnxhokRAwYzqDnHQ7b9nxFkUA9
sFWBQ5um/7IHDn4WtFb1yGNGqSAdTef8CZkFAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUwmIHEupo0E8vQEzbuHxPkgFeGX8wHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i
OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2
L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L1pOd2cyV0VzVzNkSm1t
MGlPbVVyTGppeEZrYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBZlgUd3u0GR6xrkFkA3+kOdUlDkdXyPHEb+mGAeHA+00A/X+LevRUD/UvNd/eE
XXAdhpIWcF8a0ijxQ2qTuiEgRUVlh5lVZWEFiQpZ2hFA4iPSJljCe+jxrrvDrXOw
B+l/5XQMzy1NRQY8A3BtP3r6bo2GMMLEFEumSrw5jbYsjVNzBbtAoIV3hqbzONLG
+Az4Kb4JH6cwQZKbOpo0gV3LseAB/nDKEE0NMWdJGC0/dGkdNkxR1/QvM+5JGQEj
VLVzTKKh1B6cn8zVo7xXYOuf/0QrOQL4pkaFS8bn07HUAyLfWjMJim8BFpna2CTS
rQGooAZwmnUmtGjxWsmGYTlC
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:40 2026 by rpki-client