Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json)
Hash identifier: 8dIppLYetjgrZCRmKBR0HyWfAqaEfOzxPkUsJIPpLWA=
Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985
Certificate serial: 0A82
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
Manifest number: 0A74
Signing time: Sat 23 Aug 2025 16:04:34 +0000
Manifest this update: Sat 23 Aug 2025 16:04:34 +0000
Manifest next update: Sat 23 Aug 2025 22:04:34 +0000
Files and hashes: 1: NeekGFR5NIVtajaJ5HdjX8R8fNo.roa (hash: AQAjAJlgu+LEfO1yH586ESbhoVxFXl/P5tNzJvUMOEY=)
2: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: IGVRVuRNyjXeBF1StFqxhI6e5tMUJQljPmKptyLe4EY=)
3: yDAVP8H_i8ah3EyHDhnWJS6tjLU.roa (hash: CIzjhzifWM6nzfG8hoac4C+5WTIAXYEvq69J+GVoSuE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2690 (0xa82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985
Validity
Not Before: Aug 23 16:04:34 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39:
6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29:
57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f:
b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc:
69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4:
a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90:
c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de:
7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72:
bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7:
32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3:
88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f:
13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad:
74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94:
5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c:
91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a:
00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15:
a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
X509v3 Authority Key Identifier:
keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ab:fa:53:93:19:2a:b6:4f:c6:74:17:91:18:07:9d:61:91:
80:e2:5e:b9:0b:68:bd:11:53:6d:ea:93:bb:82:ab:4d:28:ff:
65:93:a9:0a:16:de:66:f3:02:79:76:31:d3:51:2a:1d:69:96:
85:35:7f:29:b7:91:91:cb:46:6d:1b:ac:98:9d:0e:fe:99:77:
b5:4d:af:58:4d:ba:c5:72:f5:c2:ec:01:e6:63:04:cd:f1:9f:
d0:e6:ca:41:15:c4:27:2d:19:4a:d9:2d:db:63:20:47:7d:28:
03:82:b7:cf:39:24:4e:7c:f5:b8:6e:fa:7c:5f:f0:d8:4f:db:
cf:88:12:7f:e8:9d:81:5a:3a:9e:ef:f2:bb:ef:a6:b8:03:0f:
5c:31:6e:fe:d0:c6:a2:51:b0:ba:3f:87:9e:f7:67:85:ca:f6:
b3:8c:4c:a2:cd:f8:64:4b:37:ce:21:ce:71:08:72:ac:c8:a3:
28:8c:c1:bd:fc:4d:b4:3c:e0:99:25:56:1d:28:33:8b:2e:2c:
1d:e5:d5:1e:41:ae:c5:9a:10:e5:6c:79:93:9c:86:58:53:59:
31:b1:3d:7c:30:bd:f2:ab:1b:dd:42:60:77:07:cc:1c:6a:59:
01:2d:9d:31:49:73:b6:db:c3:76:b7:9b:78:f2:66:11:33:ed:
5d:ce:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:01 2025 by rpki-client