Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.mft (raw, json)
Hash identifier: rLFMGTtc+spd4/y5GxpiqcJYVBY5yRVEu35dCCdiHrQ=
Subject key identifier: 71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 21E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
Manifest number: 21CE
Signing time: Mon 02 Mar 2026 02:28:37 +0000
Manifest this update: Mon 02 Mar 2026 02:28:37 +0000
Manifest next update: Mon 02 Mar 2026 08:28:37 +0000
Files and hashes: 1: 6x6hqo0Cnu2DY80d0M2a1T3hILw.roa (hash: suL4eu4ACTdMQ8EhG3IwPC8L4xiiawA4SSbx7c7QEeU=)
2: 7oh6zHzktfZsz0lG8Cv6y94ot2o.crl (hash: H+LL8PJolp5VjK6ls7bMTT5g5uJZwDvxp1dIFTSQUZg=)
3: ErfEwcAx898tX4S9822NVXpbrGo.roa (hash: VAxgA96n0yvdmKEC0RETcM04sas17swBidGI/3NcD+c=)
4: X9U6c4cYKAx0rXhgtX8hkxalSFs.roa (hash: GoRC8cSZH4f3OWCxKXSnZPnR9NAmS+/EImBAzeimhQ8=)
5: zJ9YmN7_pZvu0tkeY-0KKlh6Js0.roa (hash: i9RgwHolwZTVdXudlPKeD4KuhudGO2gUAIrLw8GTjnE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8675 (0x21e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Mar 2 02:28:37 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=71D1BCAA71CD2BAB928DBD579EF3C179074B57CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:0d:60:c4:3e:68:d6:46:f0:7e:0a:c7:54:
8b:25:88:5d:a6:57:09:eb:d8:6b:89:e3:d3:e3:ac:
4d:69:db:62:e5:06:8c:e4:91:ba:71:fa:f7:d5:95:
58:08:be:d8:1e:a5:1d:d0:96:57:91:8c:61:7b:ec:
ff:10:49:62:12:f0:6c:d4:5b:ed:58:6e:c9:9b:86:
88:6d:18:26:6b:9e:47:bf:c4:6b:5c:04:f1:ab:9d:
c5:6a:cd:a8:ad:19:b4:b1:f1:8e:ce:6c:fa:eb:c6:
f4:97:49:72:03:bf:5f:b3:15:71:ff:55:fd:1a:5d:
57:d9:e9:3b:c8:79:26:dc:c7:98:96:83:c0:ed:0a:
a3:a7:70:18:bf:13:3d:b8:d7:f4:7d:e1:bf:34:37:
53:dc:b8:a6:0d:42:19:7e:42:da:ac:95:e6:1d:69:
27:49:14:88:e3:bd:92:36:aa:e2:6c:3a:4c:92:32:
4c:72:8e:c0:53:97:b4:26:a2:12:33:89:4e:7a:a1:
81:f9:91:0a:42:a3:4c:bd:af:c6:2c:f5:4f:03:51:
d3:cb:05:69:0b:29:d7:da:6f:97:7e:33:60:77:74:
0f:de:0b:42:d0:28:0e:17:5d:ac:72:6c:2d:4f:0f:
ad:79:16:c8:83:fc:d5:df:1c:3b:22:0e:cd:59:3c:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:2b:eb:15:af:a0:09:11:83:29:f2:f5:67:a1:db:0c:5f:
0b:f8:3e:f7:91:6c:e3:de:6b:38:fd:15:10:28:ff:92:a0:c9:
8f:8b:1f:10:5d:bd:0a:ee:7f:94:cf:27:ee:58:1c:48:42:1a:
e2:4f:09:29:2a:8b:91:9f:99:d4:cd:2f:57:e4:a8:37:22:89:
9f:87:c9:a1:a7:6d:5b:24:9e:a6:f3:a3:7a:d7:b8:a8:ea:30:
6d:7f:04:af:6d:b6:b4:17:f0:d9:6d:7d:dd:0c:24:a5:f2:df:
8a:70:be:36:05:81:b8:46:a6:a2:a8:11:a6:21:31:f9:5e:e0:
d2:3a:4d:2c:04:cf:4a:b5:68:54:ee:5e:f0:0e:ab:ab:4a:da:
72:f9:e0:83:e1:56:7e:49:8f:f0:b2:2d:b6:93:ad:cd:0f:f8:
f2:f2:46:bd:c2:86:d8:98:92:82:50:93:43:00:47:05:54:d6:
ea:af:b8:15:47:0a:c6:12:3a:b3:25:dd:11:d2:8b:b1:c6:94:
49:ca:de:c4:e0:53:1e:d0:02:12:64:40:b1:a1:2c:54:bb:f0:
86:c9:3b:d4:78:70:5d:b8:13:eb:ab:94:59:7b:4f:b6:d6:3e:
7e:0e:6d:8d:d5:76:e3:b8:91:e7:80:2b:77:aa:08:77:b1:e6:
3b:22:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:40 2026 by rpki-client