Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier: IZD1Kmn4wqbMwiKApXkNS2xwOllQldIAYYyuCXw4sTU=
Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 150E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number: 1506
Signing time: Sat 17 May 2025 17:39:32 +0000
Manifest this update: Sat 17 May 2025 17:39:32 +0000
Manifest next update: Sat 17 May 2025 23:39:32 +0000
Files and hashes: 1: 2XEBblbU0AtO7E6g_mThkL95ubE.roa (hash: DUInj+jg8J7IJSWSU2YD6iUFjAi3mK5xuxno0tl+ZGU=)
2: QVGtqSaVkscnVb64lhRi-cMEHSc.roa (hash: Ww6dLhQGxl5xTNIHfw+jluIsVDrzSDLMJsr6pk3RFXE=)
3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: 1OaM/Jsl9gtx/Ic9lTn69DA6zOhl4jP6ZUi+9Mk+MtA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5390 (0x150e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: May 17 17:39:32 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:42:86:09:59:a4:7f:13:2e:48:2a:3c:8d:b3:ad:c6:5a:92:
d1:cc:e9:56:24:22:27:f1:19:b3:4e:ff:a0:1d:f4:d9:38:3d:
c9:7e:19:df:c2:9e:42:10:b6:09:37:86:fd:9b:13:39:20:74:
f9:93:51:a5:bf:f8:d3:b2:e7:49:46:a4:c7:93:55:b4:5e:8c:
9c:b9:f9:88:49:89:4e:c6:b0:cb:97:6a:96:2b:f1:a1:be:65:
48:35:c4:22:a4:01:11:01:da:93:9a:9c:c8:7c:0a:97:65:48:
9b:9c:28:e2:2a:31:93:86:1e:b2:15:f0:13:db:e6:74:52:d5:
0e:6e:0d:da:64:08:c4:6d:84:2f:95:24:77:57:88:38:50:1b:
e1:1e:00:11:c1:b0:5e:8b:a9:cc:b3:bc:6f:a4:a6:c5:e8:5a:
dd:71:31:33:37:75:fe:38:87:d1:a6:c3:87:2e:bc:8c:36:73:
c5:16:fb:4e:66:b9:80:71:15:a2:04:66:c0:03:8c:b1:51:f7:
50:80:9f:dd:67:d1:08:fe:e4:4c:c8:e6:20:c8:ce:f9:dd:d8:
87:d7:f0:67:0a:b0:67:fa:38:1c:f0:0c:e7:4e:89:75:5f:27:
ba:e9:09:bc:70:b3:44:5f:1b:fa:83:1e:b2:de:79:79:48:d5:
cb:18:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:44:14 2025 by rpki-client