Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
File: sTLT4KDPHu-UWlZnFbFefhSl_uM.mft (raw, json)
Hash identifier: Mv3bucI2FCaynKF7ezjgcMeBn8lVz/773jd2xNzS64o=
Subject key identifier: 81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
Authority key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Certificate issuer: /CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Certificate serial: 58C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
Manifest number: 58C5
Signing time: Sat 23 Aug 2025 14:03:27 +0000
Manifest this update: Sat 23 Aug 2025 14:03:27 +0000
Manifest next update: Sat 23 Aug 2025 20:03:27 +0000
Files and hashes: 1: sTLT4KDPHu-UWlZnFbFefhSl_uM.crl (hash: pX9HYZLpCM4k5DFbt30XdoxhnpY77Q0hk59L2MaoP3k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22725 (0x58c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Validity
Not Before: Aug 23 14:03:27 2025 GMT
Not After : Sep 27 02:44:05 2025 GMT
Subject: CN=817749B78CB664C2729778AD52619FA85B0D4A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:3f:d0:5c:58:c7:63:5f:e8:41:7c:4b:80:
fd:3c:22:b2:05:64:94:a6:6e:a6:e5:52:ff:13:b0:
77:35:5b:f7:41:33:60:c3:2c:00:d1:fa:04:ee:79:
49:31:f3:f6:27:ae:e2:8b:a0:51:51:e6:e0:06:1e:
77:09:2c:85:19:8d:36:c6:0d:8b:a6:f7:74:6c:fb:
61:ba:13:41:54:cd:27:f2:75:6f:77:ae:e3:85:97:
40:d8:ae:dd:f1:fc:b9:f1:99:41:08:1f:a8:d6:1b:
37:8b:e7:d2:8e:78:5e:f6:10:cc:8e:e4:48:47:c3:
cc:9a:09:9d:80:ee:ce:db:e3:ad:ac:30:b2:7f:ea:
03:d7:cd:ab:27:c4:92:15:f0:05:f1:a3:c9:2c:ec:
a1:5f:bd:a8:22:fb:9b:8a:6d:73:15:84:5a:b7:79:
0d:94:5c:86:8d:4f:df:67:8b:e5:dc:5c:f1:52:d5:
4a:07:46:4c:04:17:a9:82:54:3e:f0:ca:0a:2c:f1:
4b:91:38:f7:30:55:b4:4e:20:98:64:9f:8f:87:f4:
cf:f4:74:c8:2b:11:e2:e3:df:80:fe:c1:98:20:56:
77:ac:b4:26:8a:90:13:4b:49:55:4c:97:40:77:3a:
93:6a:13:a7:95:f9:73:6f:c2:75:f5:d5:11:fa:dc:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
X509v3 Authority Key Identifier:
keyid:B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:31:79:15:11:04:95:79:17:96:fd:b9:bb:ff:06:5c:a7:
0f:2d:9f:da:7f:60:e0:e9:ec:57:e4:5b:51:8d:3c:aa:6b:12:
64:ca:65:cd:19:d4:f9:5c:c8:b0:62:d2:03:55:2a:61:5d:63:
51:6c:f3:a7:98:8e:0e:a2:72:9b:34:74:2b:a0:2b:7b:b6:27:
33:66:64:c9:a8:27:59:a0:37:b8:34:04:79:4b:2b:4e:71:1c:
ea:0e:96:f3:52:8c:e5:09:76:d6:ee:37:c2:58:cd:06:61:c8:
80:53:85:8d:28:27:80:aa:aa:0b:81:26:63:73:e7:c7:18:1c:
c0:bb:03:8d:23:54:dc:7c:cb:06:41:02:fb:05:86:79:57:0c:
8b:24:1c:c3:16:25:84:48:b7:f9:77:5e:c9:bc:89:f1:27:f8:
d5:77:66:ce:fd:0f:03:c8:f9:b4:2f:74:b2:c6:0e:95:d9:73:
a1:0d:05:96:27:d5:6d:72:d3:0a:29:39:f3:e3:f0:98:4a:09:
5e:05:21:5d:55:ed:65:b6:a4:69:31:2a:c3:b1:87:2c:99:64:
01:d7:93:11:09:fd:68:90:07:06:c8:62:a0:3d:b8:14:00:6c:
e8:77:f2:f8:8c:c3:23:73:5a:14:c0:43:5e:c1:51:b0:1a:4f:
9e:c1:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:56 2025 by rpki-client