Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.mft
File: fPRMBtXqffDL1PaFCPFOhNoIt1I.mft (raw, json)
Hash identifier: m6Cjj+DVWmwvmmca/7bDXkTgxwE7xED9R7C7Qo8bqcg=
Subject key identifier: 7C:23:A7:76:81:71:4E:FB:35:C9:01:DA:63:0F:2C:52:5E:FE:19:BF
Authority key identifier: 7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52
Certificate issuer: /CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752
Certificate serial: 1640
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.mft
Manifest number: 163B
Signing time: Sat 17 May 2025 22:43:46 +0000
Manifest this update: Sat 17 May 2025 22:43:46 +0000
Manifest next update: Sun 18 May 2025 04:43:46 +0000
Files and hashes: 1: OYh5JEj0uWuUFwdKjB10pF76_pI.roa (hash: An6u7oH3sagNhBru0T5ojCoKJVfFfrmJ66mlx7PcbhI=)
2: fPRMBtXqffDL1PaFCPFOhNoIt1I.crl (hash: +watqZyIudJhZChLl9JQuLsMpEHy0/4/Uik1b+6V/WE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5696 (0x1640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752
Validity
Not Before: May 17 22:43:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7C23A77681714EFB35C901DA630F2C525EFE19BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:bb:7b:59:64:df:24:f6:6c:eb:bb:11:8a:
b8:10:c4:dc:0b:39:e9:39:6c:d6:f4:fe:8e:d2:6e:
e7:2d:e0:8d:d1:3e:30:0e:e9:e9:40:0f:13:58:9a:
69:08:05:09:2f:da:e8:f6:ad:0c:58:f4:89:f1:ca:
1d:29:f9:c3:d9:7f:c6:67:52:8e:67:28:ac:e3:d8:
38:37:9d:d0:40:be:39:4c:d1:d0:16:c4:e8:ef:c9:
be:0c:de:94:15:2f:53:6a:a7:3a:00:77:42:a3:19:
af:82:30:ff:13:d5:ad:8d:1e:56:28:9f:59:a7:74:
5d:f8:3c:7e:c9:cf:96:8d:f7:12:24:92:e7:5d:da:
7a:86:6c:c4:44:4e:34:4c:12:22:b8:ae:6b:4f:21:
78:f5:ca:31:5f:72:7c:2d:16:ae:01:e0:b5:f1:52:
ae:78:6d:ac:46:c0:99:f9:ea:79:13:92:fa:7f:3e:
3b:d6:b1:98:50:b4:d0:4d:24:f2:1d:87:61:f9:75:
25:cc:b7:5f:cc:c7:a8:38:03:d3:32:d6:7a:73:37:
e7:d2:db:ab:8a:b2:86:aa:9f:8d:c0:b6:f4:6e:cf:
8d:8f:3c:69:99:b6:07:1d:af:c5:23:e0:a2:01:63:
df:7a:72:b4:89:b0:38:aa:e4:f5:97:12:29:1d:f1:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:A7:76:81:71:4E:FB:35:C9:01:DA:63:0F:2C:52:5E:FE:19:BF
X509v3 Authority Key Identifier:
keyid:7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:df:6b:a3:8f:43:b2:15:9a:e1:8a:4e:e9:c9:8f:6f:52:0c:
a5:19:1a:4e:5d:1d:8e:91:87:7a:90:bb:18:94:08:b6:95:d7:
01:75:3d:88:34:d6:94:eb:c6:1c:66:41:50:0a:2e:4c:5b:1d:
5b:06:9a:28:2f:f4:58:29:eb:f7:a1:8e:21:eb:e3:83:0d:b5:
4f:f0:5b:fb:89:82:37:9c:46:f3:c0:c5:a2:3a:3e:a8:86:85:
7d:74:75:44:b3:80:6f:11:07:a6:4c:50:31:c9:2f:8f:b4:c8:
cc:b7:62:6f:b6:b0:ce:0b:9b:50:b8:b0:f2:a2:ee:9e:41:91:
2e:f3:84:dd:8b:ef:f6:d9:34:3e:14:78:39:f0:53:f1:2b:a5:
1b:20:4f:e2:ce:11:32:c1:5a:21:d1:81:0d:38:62:0f:ea:a2:
95:bc:ac:e6:25:05:b1:ca:5a:41:5e:18:53:fb:34:c6:3e:8a:
d7:61:37:cd:e3:c3:dd:82:c0:e2:6c:83:c1:64:b3:94:b0:94:
be:20:85:59:a6:5d:dc:12:b9:71:86:55:91:33:fc:99:67:18:
a0:21:5a:00:0f:6f:16:38:41:da:22:32:1b:a8:f4:d2:51:41:
a8:97:bb:5e:c8:fa:c7:fd:d6:3e:88:65:9c:dd:cb:17:34:e0:
64:77:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:51:59 2025 by rpki-client