Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft
File: 5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json)
Hash identifier: nXrTL18uqS2ZYvLTJK3XfPmLX3BNgGELLDBo2SQs/9I=
Subject key identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E
Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85
Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785
Certificate serial: 23D6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft
Manifest number: 23D3
Signing time: Mon 02 Mar 2026 02:29:14 +0000
Manifest this update: Mon 02 Mar 2026 02:29:14 +0000
Manifest next update: Mon 02 Mar 2026 08:29:14 +0000
Files and hashes: 1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: 2gfPcDqZndliQF8Kx9T0Ah/CQf4SdzgHRG2Y4b69ch4=)
2: KTepAzZWdUebrEm_rhVA4g3HJ1o.roa (hash: +d/Ee/Je7JgCG3rEnJO49Lnf8W/8QSIMlfKpPFFwIj4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9174 (0x23d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785
Validity
Not Before: Mar 2 02:29:14 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18:
5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd:
fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1:
c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21:
3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34:
de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21:
ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37:
59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5:
7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5:
82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98:
b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61:
a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16:
20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0:
19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6:
c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f:
21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac:
c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E
X509v3 Authority Key Identifier:
keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9b:29:43:c4:a5:ef:72:93:53:3e:d2:35:04:bc:31:a7:12:
5e:c2:f9:5d:f6:ee:d9:da:43:74:e8:3f:29:91:04:bb:9e:a8:
91:9e:2a:61:60:72:c6:8b:03:43:98:f8:92:2b:e4:1d:ce:f2:
1e:8b:d6:25:a8:17:c0:e0:41:d2:ed:8e:98:cc:8e:a4:d6:77:
e7:04:da:1c:23:05:22:cd:b1:c8:8b:3c:3a:a3:69:a0:b8:39:
5f:82:f9:27:b6:64:9d:8b:7c:c9:42:78:5b:14:db:0a:26:7e:
4e:82:e9:67:b7:0c:b7:20:e3:df:b8:95:ce:57:25:28:5d:47:
20:d9:a7:64:91:6f:1e:43:31:58:0b:00:b7:34:09:85:e9:fe:
0b:a4:1d:4c:8b:91:55:a5:c0:da:d3:d2:d3:e3:82:1e:c3:87:
10:8d:2a:2a:e6:c8:0c:14:b0:6e:71:db:77:1c:15:4d:e5:28:
c5:88:17:90:d8:27:f1:22:1c:77:65:cb:c7:04:06:6e:8d:e6:
fa:0e:47:8b:94:17:2f:20:19:d5:e0:a6:7d:01:81:aa:de:2f:
f9:ec:16:33:bf:1b:2b:b6:8b:de:fd:db:12:b5:18:0d:76:6d:
1f:61:d3:5b:76:d7:8a:a5:d0:f7:12:95:78:0c:d7:b1:e4:c6:
fc:c3:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:10 2026 by rpki-client