Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft
File: KnEap9xgBJsLDYhIl-AVsRcfN7k.mft (raw, json)
Hash identifier: 4zWk8ji33D+7APdrSUhixaKsUHL5GnhjoPsO9mAozM0=
Subject key identifier: FF:A4:BA:66:D2:94:5D:86:DB:E7:BB:E8:FF:38:6F:D9:B3:2A:52:ED
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1EFE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft
Manifest number: 1E8E
Signing time: Sat 26 Apr 2025 06:37:13 +0000
Manifest this update: Sat 26 Apr 2025 06:37:13 +0000
Manifest next update: Sat 26 Apr 2025 12:37:13 +0000
Files and hashes: 1: Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa (hash: sfsnweCmG/jHm5nbrPsozdJRdYLLaS3/WMbJAlYUq4E=)
2: KnEap9xgBJsLDYhIl-AVsRcfN7k.crl (hash: HRg/OCcAnjE6zPYsFtrYBYLmwvUnXLP5K6KW3+vld2s=)
3: LybZbI5zyJ39JstrkEFIrhtylh8.roa (hash: z+mmcbUMAd//4i4kPYabxYduaYkJ6sfVgx+jU46dJGg=)
4: M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa (hash: m9tbtocpg4JKbwsMbWXBIPlz4frao3dfUdJHi7zrZgg=)
5: S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa (hash: otv2lZAvLzrW3EDlzi9Lnv7aEft9dRekQtock8hNwT0=)
6: Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa (hash: Weph8XosCTlgY4xUw8VOwWRpLaXRiZ0P1fwqSL0Cp+s=)
7: e-RcNvHXkaYJsLZSaWMpPMFmaZE.roa (hash: NYEeAcBUsCB/ll8/IHHqbGto+nzHjpAiEbkf5GDxZjk=)
8: ekrQ2H8Y7kK2OjtlUfog_0LDO9E.roa (hash: UR8yfOSNtZ8AIr4CYZRJyls32R0dt4IjVnP4OTe1F1E=)
9: lU4MINnEocHPf7DsLjN6TqQBr9g.roa (hash: nWkWTYJDtFBZOZTTk+NylLr//gEQhbEtZuQsgeEL7No=)
10: mZ4wa3h5VnP3HhPa70W14S6h7_4.roa (hash: lcRoNbfxH5p4M1W+4xZaSBgfZt5WaNW+2CNCqFsymZU=)
11: qPTdKAqShrGpfL0vzX2Thwykdz4.roa (hash: G5XyzrC9DKKQXTNoqtUT55LljRWAhx2tEjRJFr4VKkg=)
12: rN5X1L8tl_GX_nzqwu1OyA5bT10.roa (hash: Gdm71Ynfr1CK1VYWBpYU6mNFZ9abPsblKlI3Q/vvryI=)
13: sMntCxUtK_jseejaS5-JuTzGRbo.roa (hash: W/RCOC1i921KNgUzkOxQpq7Cf8D/JtxRY4PxIMJC1do=)
14: uAf5pUFdtYtdOx45Hj4gHBGOKJE.roa (hash: 6JrQVp7ySTlmiK0e6//AOGp9uZShw5JAgDSFSxnbhKs=)
15: vxkYrgp7CFmcPITnZQ7G-ZRYsZ0.roa (hash: wbJjJh+2zu6VAgdzbvpTOYocrmVQMGQy2rapGPepPKw=)
16: yVZNZqdbW5_Cz0l5jiC27M47H_4.roa (hash: cMxeCjc8ROq48HrS48yFe56NPv4CmYX6+Y/k0JWTvj0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7934 (0x1efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Apr 26 06:37:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FFA4BA66D2945D86DBE7BBE8FF386FD9B32A52ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:59:98:50:2b:67:d0:e5:23:8b:30:5c:b4:
86:f5:ae:45:a0:e4:81:45:f3:d8:64:e9:d9:ce:e4:
23:3d:d4:25:d7:80:b5:7b:dd:14:5b:d0:e0:6a:a1:
16:ae:47:fe:8a:9e:96:38:c2:11:aa:9b:35:89:02:
d4:43:bc:76:b7:ae:8d:d5:79:39:a7:6a:fd:11:5a:
7a:3c:55:52:a6:d7:7f:d5:ab:50:61:5b:b9:cf:65:
b6:3a:19:e2:32:8c:49:04:fb:69:1e:1b:f0:c7:d1:
25:05:a1:47:01:1a:6f:24:ed:5b:38:2e:9a:8b:69:
cc:ea:32:c7:9d:f7:96:0d:09:0f:31:9d:a3:67:4f:
ed:d2:ae:b8:0f:d1:a2:c0:45:f5:47:d0:21:1a:10:
8f:16:d2:b3:f2:3e:ad:8b:22:8b:44:7f:eb:b7:c4:
9f:fe:81:ee:e1:59:d7:36:dc:5b:fe:fc:48:4c:5f:
ca:48:f0:22:79:f0:ad:fd:e3:be:f0:84:5b:73:a1:
fb:e6:a0:eb:db:27:4c:c9:c4:98:f8:e0:63:18:f9:
73:88:c4:93:f3:b6:eb:36:f3:48:ee:75:54:bb:f8:
51:2c:4e:4c:2d:f3:2c:e0:ce:2e:68:ce:56:cf:ed:
c2:4a:1b:1c:b9:a7:a6:76:5b:d6:53:1c:30:b1:74:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:BA:66:D2:94:5D:86:DB:E7:BB:E8:FF:38:6F:D9:B3:2A:52:ED
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:f2:f1:70:45:6b:0e:ff:0e:c3:c2:cc:80:85:b3:04:27:
6d:01:f5:41:43:51:16:05:27:3a:89:70:ea:75:00:57:6c:12:
86:cb:c8:f6:24:43:51:67:90:e1:6f:d3:89:b8:3c:6f:62:eb:
97:cc:fd:e4:2a:65:76:b1:99:fc:8b:0b:db:70:d2:e9:91:a8:
ed:c0:24:69:8b:84:07:b5:a5:1d:fc:4c:97:38:40:06:5c:74:
1e:c4:0d:ef:f7:e4:31:f0:33:20:32:70:50:9a:f8:fa:ac:25:
45:39:d0:61:34:1c:c4:22:41:0c:61:3f:fb:c5:fb:e1:56:b3:
2f:a4:ab:cd:fb:90:88:43:e5:47:6b:42:07:24:93:78:b2:13:
b4:bc:66:48:bb:08:ed:bf:fd:32:93:e0:76:6a:49:0f:24:45:
db:64:cc:df:12:93:00:67:97:d1:f7:9b:d4:12:5c:c5:2f:fd:
c8:5c:b3:94:a8:80:ca:ae:e6:1e:ac:9e:89:ac:ef:df:bc:dd:
2f:bf:fc:51:30:41:ed:65:6f:57:83:be:6a:a8:a5:4b:3e:51:
1f:7c:f3:92:76:db:73:9d:92:ac:93:d8:89:be:d1:39:1f:8d:
ff:8e:39:31:f2:13:77:60:8f:1a:c1:a7:61:dc:65:30:c5:cc:
17:00:83:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:27 2025 by rpki-client