Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
File: bMukxhA3mRD8FzJKB0sOAEAkeDM.mft (raw, json)
Hash identifier: hjgn5p2DCwJ56g+ELXirUrFvm+qOsToSYXOYKO9xVjM=
Subject key identifier: D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
Authority key identifier: 6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
Certificate issuer: /CN=6CCBA4C610379910FC17324A074B0E0040247833
Certificate serial: 01ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
Manifest number: 01ED
Signing time: Sat 23 Aug 2025 19:02:18 +0000
Manifest this update: Sat 23 Aug 2025 19:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: bMukxhA3mRD8FzJKB0sOAEAkeDM.crl (hash: 1E5mmA7GPRzsSnE3UmmpDojPN+AJx23/19AG7fQvirA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CCBA4C610379910FC17324A074B0E0040247833
Validity
Not Before: Aug 23 19:02:18 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D589D477C7F2031A37EED4CE504EA8A2ADF2FB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:3d:34:a7:bb:0f:d3:e8:9f:f8:60:4a:5a:
02:d3:b1:af:5a:f6:bf:e2:17:df:84:80:e4:9e:77:
da:08:7c:43:e1:be:dd:1e:2e:9b:6e:2a:e7:73:aa:
55:3a:db:d5:5a:1b:17:ac:29:0c:90:b3:f1:f9:31:
9b:17:da:f5:92:18:ed:d0:9b:e0:18:53:fe:2c:bb:
0d:d8:78:d3:e1:f5:78:ae:34:97:4a:af:3d:2b:10:
ac:ea:24:cb:55:ca:ca:30:9b:b1:38:39:f8:56:11:
a1:f4:7e:af:49:20:02:3d:f3:b1:d9:23:a1:5d:72:
3f:16:40:31:4d:33:56:01:c2:42:73:fd:f8:ea:d3:
3a:fc:f3:35:26:c5:01:86:c7:35:66:7d:cf:e0:71:
fd:3a:69:f6:3c:da:8a:1d:7e:b8:5d:2d:92:f0:ba:
72:dd:c1:c5:4c:42:f0:52:66:54:0f:a9:33:73:59:
1c:e0:63:12:6c:6b:53:de:26:77:55:47:5a:40:40:
1e:14:a4:d7:f8:fe:0c:83:02:85:70:0b:80:08:27:
6c:37:36:10:aa:7c:0e:f7:ed:f5:f0:fa:3e:ba:99:
ed:9a:2e:90:9b:86:1b:bc:db:12:01:2a:69:16:09:
c3:d6:c2:de:fb:08:29:03:a3:ce:a5:a1:66:ed:df:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
X509v3 Authority Key Identifier:
keyid:6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:d9:97:35:f5:15:cd:75:1c:27:e7:35:79:bd:5d:35:06:
e0:dd:a3:6c:fc:34:c1:e4:95:1e:b3:00:f9:b6:06:97:21:0c:
cd:c5:c3:a8:94:5c:65:0f:9e:bc:e6:56:4a:8e:87:6d:61:31:
d5:d8:5f:a8:97:fb:85:c0:1d:3c:cc:26:e2:31:a1:a6:be:99:
8a:23:2a:ff:e6:c3:36:b9:af:c5:20:25:1f:7f:03:3e:73:b6:
8b:16:52:19:6f:5f:b3:29:8a:0c:a5:f2:87:9a:a8:35:0c:59:
6e:6f:9e:91:53:2d:58:e2:bb:0f:33:a2:db:70:e1:c3:14:1f:
0e:8e:52:a1:d5:85:e1:76:38:d6:6b:86:1b:1e:fd:e2:e7:c2:
2e:ad:5c:4a:68:a7:1d:d3:68:8f:1a:d0:da:bb:99:4e:b4:3e:
e0:fd:3a:9b:fa:75:b5:de:97:c3:ec:0f:7d:2c:8e:37:54:c0:
8b:8d:c5:3a:12:b8:74:78:2c:26:5f:46:ef:d6:1f:8b:16:0f:
0a:db:71:ad:1a:dd:39:75:66:28:5b:09:f5:4b:a1:bf:f4:90:
24:22:a4:c7:1d:60:7f:6c:fc:9b:f8:af:e7:64:bf:1d:16:09:
2a:56:e4:9c:43:0a:f6:32:42:12:46:1b:44:12:71:19:83:1f:
9b:70:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:21 2025 by rpki-client