Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
File: MtXsFcXlZORw7HsUzUfeLYYqzoM.mft (raw, json)
Hash identifier: x1FRTHVpuWZdCF3zb1qpdsmvjstM4eH0rkiBDATepTA=
Subject key identifier: 47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
Certificate issuer: /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Certificate serial: 03BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
Manifest number: 03B7
Signing time: Sat 17 May 2025 03:13:48 +0000
Manifest this update: Sat 17 May 2025 03:13:48 +0000
Manifest next update: Sat 17 May 2025 09:13:48 +0000
Files and hashes: 1: JLQYInniMmjrZ1vFfNGSmRm-nvs.roa (hash: QlXwsqHXts+1fdHKwVf4SHuTfyC0wOTsCK0g1e5FrpE=)
2: MtXsFcXlZORw7HsUzUfeLYYqzoM.crl (hash: Ui5YHKn24lf3IqYCzZJlBAL2FGD2jPzsUSxnZG3yymU=)
3: RdzlYXdrkIlz5zdq_uky2869UaM.roa (hash: Zrtno3SiPYmnE7VIpxd3/w1CoF3rH7IuIaaCg+DwPAU=)
4: dhForz2_NrloVzISJkp8QaFMXCs.roa (hash: /umIRMrhIJaUfWsHQfs27h7od4A6sDNvV6muipplBvw=)
5: phU4YJh5EUs8U1V3CbndmrNmfO0.roa (hash: CZhyDj2FMIi+v5w3tJPQMA4talNR9mcJmi9qREPZn/A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Validity
Not Before: May 17 03:13:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=47AC346E7B3AC13DA66FB22DEB396C0EE042F7C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:ad:80:a7:c7:cb:d9:7d:75:2c:0c:3f:cd:
c2:0d:d0:0f:94:80:71:80:08:b7:0d:13:d2:22:2e:
1f:69:28:26:a3:1f:7b:5b:82:d2:b7:18:d1:6b:dc:
dd:7a:40:ed:ab:f0:fa:0b:60:77:af:60:f3:87:e8:
42:da:79:19:1c:dc:e1:96:7a:b5:cd:15:32:74:d9:
78:00:f9:ed:c6:df:84:c8:58:88:9a:91:31:55:c1:
21:2d:57:8c:47:bf:a1:ce:cc:9b:dd:07:18:30:67:
a2:a9:94:4c:69:ea:53:21:88:d6:5c:10:c3:f1:a7:
b4:90:07:76:2e:23:65:d9:ee:4a:48:ab:82:aa:20:
49:96:56:a2:82:28:70:db:75:f7:51:7d:82:16:97:
b5:05:af:af:f5:ea:ee:ec:4a:e0:12:d8:ba:30:1b:
11:b3:aa:d5:db:a9:3d:12:36:63:cd:09:e9:b8:b4:
4d:cc:4b:d0:a9:a2:d2:e9:66:a0:cd:7a:e6:1c:b2:
09:c2:0c:7a:5e:5c:13:94:b5:64:28:13:c3:a6:c1:
02:5f:67:c7:b0:62:2a:2e:00:c8:15:04:d7:4f:59:
e8:8c:7f:84:b6:f2:3d:50:37:04:31:c8:8a:88:b6:
4a:77:c9:be:89:01:e8:ca:76:2c:05:d7:91:52:25:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
X509v3 Authority Key Identifier:
keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:90:1a:cb:bf:d3:5a:b5:74:3a:a4:0c:3e:48:9e:40:0d:50:
d8:f9:d9:40:34:a1:0b:c6:18:ba:8a:35:da:1f:d6:35:0e:fe:
d3:d4:22:ab:b2:65:8e:9b:1d:db:e7:5d:21:3b:29:fe:bb:dc:
32:cc:ad:1b:b1:94:86:4a:95:98:5d:8e:a4:25:16:15:b9:49:
a3:e3:bd:5d:e9:81:4b:7b:d3:08:e5:ab:8d:c7:31:37:f4:b9:
1e:ed:43:a5:31:e9:74:e6:26:e0:84:b0:b2:6e:bf:e6:de:81:
cd:e5:15:14:3f:a2:4d:33:4e:d8:f3:d5:af:5e:43:b9:3c:8c:
4e:7f:c6:e0:b8:74:4f:cb:42:19:b7:e4:de:db:e9:75:7c:21:
cd:04:19:d2:dc:08:c9:eb:ab:ad:49:2a:46:0f:42:96:55:59:
c2:8d:04:e3:1e:c3:1a:cb:a0:9c:7d:1f:b5:1e:ef:45:19:42:
e0:6b:68:30:2b:19:c1:19:d0:d3:df:b5:0d:87:c1:71:69:fd:
d4:c1:75:4a:b2:24:7e:c8:d0:78:ad:f6:ec:7e:45:cf:5e:89:
ed:0d:da:b7:eb:fb:47:da:03:39:aa:56:ba:bd:a3:eb:87:0a:
a9:22:7f:10:cc:c0:21:0a:e6:c4:66:a5:3e:53:81:30:9a:a5:
e8:ac:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:39:25 2025 by rpki-client