Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
File: c8Mme8SMmzk0ep8yp9O0D59yiVg.mft (raw, json)
Hash identifier: n0fG7nicwVu3r1WtQmjCt58JvrZ1xQSS0fCKcRVlX8I=
Subject key identifier: BA:B1:FF:40:E1:F1:92:36:AD:57:6A:B3:74:FB:21:F5:DF:65:FD:AD
Authority key identifier: 73:C3:26:7B:C4:8C:9B:39:34:7A:9F:32:A7:D3:B4:0F:9F:72:89:58
Certificate issuer: /CN=A9162E3D0000/serialNumber=73C3267BC48C9B39347A9F32A7D3B40F9F728958
Certificate serial: 14A8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/c8Mme8SMmzk0ep8yp9O0D59yiVg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
Manifest number: 14A8
Signing time: Sat 26 Apr 2025 01:39:42 +0000
Manifest this update: Sat 26 Apr 2025 01:39:42 +0000
Manifest next update: Sat 26 Apr 2025 07:39:42 +0000
Files and hashes: 1: c8Mme8SMmzk0ep8yp9O0D59yiVg.crl (hash: jogOmlKpWrZ72B2A/pkS99RcTJ3eeaRp9thU8fXmi+s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5288 (0x14a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=73C3267BC48C9B39347A9F32A7D3B40F9F728958
Validity
Not Before: Apr 26 01:39:42 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=BAB1FF40E1F19236AD576AB374FB21F5DF65FDAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:78:4d:bc:1f:fc:53:cb:3e:e2:d6:06:4e:
b4:ce:85:ef:e1:f0:be:ae:4d:b6:ff:e0:05:91:16:
79:1c:d3:36:e9:e3:c1:3c:98:ce:e9:a2:dd:2c:c9:
5f:67:2d:40:cf:b5:25:d5:10:e5:ce:1e:4e:c4:1f:
31:c1:08:97:ad:8c:b0:5d:af:0f:af:ed:87:b6:4b:
48:01:ac:20:4d:62:8e:2a:0a:3d:e3:e8:d1:16:dc:
40:71:32:be:f8:58:ad:8d:39:ff:73:23:fe:b3:83:
e4:e7:3c:15:12:4d:63:21:80:10:e5:33:a9:09:f6:
bd:73:a6:1a:30:6c:c4:ed:32:b5:21:80:04:cb:2b:
48:19:d1:cd:ec:99:b2:dc:20:4e:41:15:b7:b5:b1:
79:4f:bb:74:b9:22:03:fd:fe:f9:8e:a6:c9:ab:8d:
8e:20:90:e7:10:32:bc:96:48:c3:8a:e4:dc:9f:e9:
95:30:9e:fb:e8:b0:ff:c1:ab:7a:64:cc:d2:b0:e0:
03:78:96:f8:f6:0f:0a:8f:db:38:fe:99:ec:5b:f4:
5b:95:f2:37:aa:13:21:25:e6:a6:f8:89:75:cb:b5:
c8:45:47:c2:0e:ab:0b:fa:6c:b6:f8:cc:d7:78:c4:
36:f0:ab:8e:38:a9:7c:69:03:1a:11:6c:72:7f:bd:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:FF:40:E1:F1:92:36:AD:57:6A:B3:74:FB:21:F5:DF:65:FD:AD
X509v3 Authority Key Identifier:
keyid:73:C3:26:7B:C4:8C:9B:39:34:7A:9F:32:A7:D3:B4:0F:9F:72:89:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/c8Mme8SMmzk0ep8yp9O0D59yiVg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:65:6c:df:f7:b6:1c:0e:bb:7c:94:16:00:81:dc:74:8d:81:
cf:49:fc:7e:7b:02:ee:09:26:05:19:74:dd:25:6c:98:87:24:
3b:ab:0f:18:a8:d3:ce:38:ea:98:41:0e:8e:88:06:9b:58:ae:
16:c3:74:0d:8b:70:85:52:d8:b7:4b:d0:73:31:95:39:3b:97:
b2:8f:39:a5:5c:0f:41:1f:39:85:5c:79:d2:d5:7a:54:5e:61:
07:e8:2a:11:6d:97:e4:c3:4c:a3:f2:a5:a2:9f:4a:ef:f3:72:
0f:a0:39:72:29:cb:29:7c:7b:5d:7f:99:00:ad:62:f6:44:2c:
10:d9:01:6c:a3:5a:fc:fa:87:03:af:92:f3:e6:a7:24:f6:3d:
3f:f9:6f:de:59:7e:95:38:c3:4a:e5:3e:81:d0:72:3e:24:d1:
02:6a:4c:0b:13:14:89:af:15:2c:15:08:ad:a4:f2:ce:19:b4:
1c:6e:f9:a1:ad:e0:e3:eb:36:4d:93:41:ba:e8:0b:b8:24:1b:
8e:0e:4b:9b:e4:cf:5a:df:99:37:e4:8e:10:67:5c:fe:19:78:
5a:44:ec:9c:ac:db:84:f5:2e:34:82:40:34:50:ef:c7:c1:60:
d0:ea:a3:85:54:72:4d:51:06:fe:f7:fd:15:bc:2c:c0:cb:9f:
36:00:3f:82
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICFKgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyg3M0MzMjY3QkM0OEM5QjM5MzQ3QTlGMzJBN0Qz
QjQwRjlGNzI4OTU4MB4XDTI1MDQyNjAxMzk0MloXDTI1MDkzMDAwMDAwMFowMzEx
MC8GA1UEAxMoQkFCMUZGNDBFMUYxOTIzNkFENTc2QUIzNzRGQjIxRjVERjY1RkRB
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjWeE28H/xTyz7i1gZO
tM6F7+Hwvq5Ntv/gBZEWeRzTNunjwTyYzumi3SzJX2ctQM+1JdUQ5c4eTsQfMcEI
l62MsF2vD6/th7ZLSAGsIE1ijioKPePo0RbcQHEyvvhYrY05/3Mj/rOD5Oc8FRJN
YyGAEOUzqQn2vXOmGjBsxO0ytSGABMsrSBnRzeyZstwgTkEVt7WxeU+7dLkiA/3+
+Y6myauNjiCQ5xAyvJZIw4rk3J/plTCe++iw/8GremTM0rDgA3iW+PYPCo/bOP6Z
7Fv0W5XyN6oTISXmpviJdcu1yEVHwg6rC/pstvjM13jENvCrjjipfGkDGhFscn+9
UBUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBS6sf9A4fGSNq1XarN0+yH132X9rTAf
BgNVHSMEGDAWgBRzwyZ7xIybOTR6nzKn07QPn3KJWDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9jOE1tZThTTW16azBlcDh5cDlPMEQ1OXlpVmcu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQx
RkYyL2M4TW1lOFNNbXprMGVwOHlwOU8wRDU5eWlWZy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGYBggrBgEFBQcBCwSBizCBiDBTBggrBgEFBQcwC4ZHcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwL2M4TW1lOFNNbXprMGVwOHlwOU8w
RDU5eWlWZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9y
cmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcB
BwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALZWzf
97YcDrt8lBYAgdx0jYHPSfx+ewLuCSYFGXTdJWyYhyQ7qw8YqNPOOOqYQQ6OiAab
WK4Ww3QNi3CFUti3S9BzMZU5O5eyjzmlXA9BHzmFXHnS1XpUXmEH6CoRbZfkw0yj
8qWin0rv83IPoDlyKcspfHtdf5kArWL2RCwQ2QFso1r8+ocDr5Lz5qck9j0/+W/e
WX6VOMNK5T6B0HI+JNECakwLExSJrxUsFQitpPLOGbQcbvmhreDj6zZNk0G66Au4
JBuODkub5M9a35k35I4QZ1z+GXhaROycrNuE9S40gkA0UO/HwWDQ6qOFVHJNUQb+
9/0VvCzAy582AD+C
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:33:34 2025 by rpki-client