Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
File: IzgaqYlJu4DtLCSso3qClDkUg3U.mft (raw, json)
Hash identifier: HkTY9MsyEIwqIGLMfZy3zmFBjmDE5qjGEux4L3ZC2u8=
Subject key identifier: 18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A
Authority key identifier: 23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75
Certificate issuer: /CN=23381AA98949BB80ED2C24ACA37A829439148375
Certificate serial: 1C93
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
Manifest number: 1C93
Signing time: Sat 23 Aug 2025 16:06:10 +0000
Manifest this update: Sat 23 Aug 2025 16:06:10 +0000
Manifest next update: Sat 23 Aug 2025 22:06:10 +0000
Files and hashes: 1: IzgaqYlJu4DtLCSso3qClDkUg3U.crl (hash: 2bLwuXcgFJ0ckXNhLPnIQ2cDZUIyOFVfjDfBcuXGRaU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7315 (0x1c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23381AA98949BB80ED2C24ACA37A829439148375
Validity
Not Before: Aug 23 16:06:10 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=18DE9AF8E754871B16DCD69D80E9DE9F1E2DCB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:58:67:73:18:3f:55:28:bc:94:55:e4:0b:
3b:bd:a6:c0:25:59:20:82:2d:1f:89:c4:e2:b7:c5:
82:3e:ce:61:ca:3f:ad:6b:fc:04:b7:2e:77:2b:97:
fd:2b:a9:81:5e:f8:bf:fb:78:bd:09:c8:3f:d5:e6:
80:57:9e:da:b4:2c:f6:44:ab:d9:f5:e9:c3:34:1b:
92:b1:ab:0e:1c:75:3f:02:a7:f6:d0:0e:18:55:be:
aa:49:43:98:e3:67:84:c1:81:40:0e:fd:36:c8:89:
b5:9a:66:1f:9b:88:ee:c8:ec:9e:25:5d:a3:5e:2e:
5a:f5:8c:cb:90:b0:8e:5e:1d:e8:fc:db:06:7b:e3:
75:44:94:13:7c:49:3f:d0:19:10:ee:14:0e:e5:0e:
a6:ce:ae:6d:35:a6:df:63:ec:c1:3f:5d:82:9e:f3:
0c:5f:eb:47:66:0b:7e:74:40:b9:28:c5:80:e3:c6:
aa:39:cc:23:78:d2:7e:11:b3:d3:ab:18:de:ea:a8:
a7:5b:ef:05:01:fa:1c:de:a3:e1:f6:33:2e:35:93:
30:05:ff:80:93:ab:26:ed:c7:84:53:23:29:66:20:
45:6a:17:52:49:f6:c0:2e:ee:3d:d3:a6:77:6e:2c:
ad:16:00:3f:76:35:c7:b2:d0:55:21:f9:17:19:72:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A
X509v3 Authority Key Identifier:
keyid:23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:48:e7:40:b9:45:26:2c:d3:a1:7d:13:97:4d:f1:d5:1f:36:
d3:3a:78:e3:35:ef:4d:fe:e9:22:fc:30:b2:9d:d0:0a:c8:f6:
7c:95:bf:e3:f6:15:7c:61:f7:2f:62:f9:80:e3:eb:00:51:8e:
a5:93:a0:5a:94:6f:29:d6:b0:cc:0b:7b:95:b2:3c:b8:9d:0c:
17:6b:69:e8:ab:32:54:5b:6a:da:fd:93:38:b7:ff:6f:a3:3b:
59:7a:cd:17:70:00:2f:11:a5:06:04:38:ba:ff:26:ab:4f:34:
c6:89:17:6b:ce:8b:6a:5c:f5:14:64:89:59:e2:c1:bc:00:8d:
31:03:d7:f0:f3:c8:93:73:fc:32:0b:2f:e2:bd:b0:43:8f:f5:
61:70:ff:c3:49:8d:25:56:58:29:39:b0:9f:c6:04:63:f9:ea:
47:48:7b:cb:91:19:a7:a5:f7:7e:40:22:ff:df:8b:03:dd:cb:
7b:b1:cc:12:2b:45:62:ec:ad:b9:05:5f:d5:0b:55:86:54:79:
fe:60:ba:e9:01:3b:20:5f:b2:4f:c6:14:2d:3d:2f:6a:fa:23:
a2:88:18:d6:c4:5e:2d:1e:5a:d0:9a:a2:e9:c3:aa:71:e4:49:
b4:07:bc:af:b0:7b:7b:13:d4:f4:eb:ec:16:e1:19:db:52:1e:
2c:6b:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:15 2025 by rpki-client