Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
File: L489CPJT5L3GUR1LZHvjXMZwPRo.mft (raw, json)
Hash identifier: RhkHYWAt1OjnSC5JUwYiLp5XnY7/4rA4agtlQg61HGI=
Subject key identifier: 80:F5:57:60:7D:4A:63:54:9A:61:A8:60:4B:3C:35:02:D1:73:49:0A
Authority key identifier: 2F:8F:3D:08:F2:53:E4:BD:C6:51:1D:4B:64:7B:E3:5C:C6:70:3D:1A
Certificate issuer: /CN=2F8F3D08F253E4BDC6511D4B647BE35CC6703D1A
Certificate serial: 1FB6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L489CPJT5L3GUR1LZHvjXMZwPRo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
Manifest number: 1FB6
Signing time: Sat 23 Aug 2025 14:03:37 +0000
Manifest this update: Sat 23 Aug 2025 14:03:37 +0000
Manifest next update: Sat 23 Aug 2025 20:03:37 +0000
Files and hashes: 1: L489CPJT5L3GUR1LZHvjXMZwPRo.crl (hash: qzccI6fye0t1gnWMhEeJni0CtjIUhs1bfYIF/1I18xE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8118 (0x1fb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8F3D08F253E4BDC6511D4B647BE35CC6703D1A
Validity
Not Before: Aug 23 14:03:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=80F557607D4A63549A61A8604B3C3502D173490A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:b0:79:50:52:ed:a6:8c:7e:bb:df:d2:e1:
59:5d:07:d0:15:7d:47:30:d3:48:da:9e:82:1f:3f:
bb:3f:91:f7:a7:2b:bf:88:52:7f:60:8d:76:22:6f:
dd:2c:dd:01:fc:db:79:e1:e0:92:4d:48:32:16:19:
9c:d0:3a:a9:97:2b:65:05:3e:af:2c:f1:72:2d:6e:
88:8a:2c:a0:af:85:67:58:34:7a:bb:48:ea:3f:18:
9f:3a:1e:9e:ff:03:ed:80:c2:38:2b:e1:a9:82:08:
6d:39:9e:00:fb:af:ff:44:a9:b7:39:5f:bb:7e:63:
3f:92:9b:e5:fa:34:d0:c7:e7:3c:5d:6e:eb:bd:29:
0f:6d:fa:91:ca:ce:d3:8d:f1:33:9b:ae:66:51:8a:
22:28:15:49:e5:62:13:40:65:db:47:ef:03:00:3e:
27:6b:d5:a1:d0:44:51:5c:78:9b:ec:99:23:31:3b:
cc:93:f8:36:ee:2b:38:a4:49:9b:8e:fd:aa:61:21:
77:3a:8d:f3:41:41:28:fe:d5:e6:22:e0:59:83:9a:
ac:d7:4b:a1:2e:b8:a1:ff:bc:cd:db:4c:7f:d4:9e:
06:32:cc:05:00:78:e6:13:07:a5:f4:50:6e:ef:2f:
05:e2:93:1f:64:8b:e6:c6:94:14:16:0b:5f:f7:e3:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:57:60:7D:4A:63:54:9A:61:A8:60:4B:3C:35:02:D1:73:49:0A
X509v3 Authority Key Identifier:
keyid:2F:8F:3D:08:F2:53:E4:BD:C6:51:1D:4B:64:7B:E3:5C:C6:70:3D:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L489CPJT5L3GUR1LZHvjXMZwPRo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:41:3b:53:52:29:a9:bf:96:fb:df:52:b8:a5:46:28:8c:
de:cf:21:8a:73:2a:06:35:ba:ee:08:29:e5:28:93:35:b0:09:
d5:39:21:01:e2:4e:19:cd:cd:a0:c4:35:d3:96:e7:d2:a0:be:
ba:7d:29:14:a8:98:2c:9e:22:c7:ac:f7:1f:c6:79:c6:d6:42:
ad:4a:94:c6:83:48:b3:71:12:14:fc:1d:33:9f:aa:3e:d2:92:
66:61:07:17:02:c3:5a:cd:cc:68:f7:e6:dc:26:41:3e:13:0b:
bf:ec:0e:d4:f1:5f:a6:84:3c:93:e7:f9:e5:00:bb:67:c8:7e:
dd:83:b8:14:4f:62:3a:62:61:a6:1f:21:d2:b9:02:7f:31:5d:
46:8d:7d:45:a6:34:8d:91:33:b9:92:c2:cc:80:0c:af:ce:aa:
68:da:63:4b:a3:65:aa:8e:0b:0b:00:24:85:e8:d2:bc:e9:8f:
cf:bb:01:09:16:91:d5:c9:df:6c:f9:1a:51:23:7f:6c:7b:a6:
fb:a4:cc:fa:11:04:72:06:51:32:72:8b:d3:59:e6:5a:16:f5:
61:34:1f:56:be:be:ab:26:ff:16:f7:66:1c:cd:4d:57:ef:43:
71:ba:3a:e8:7d:d5:79:a4:d7:03:d9:29:ec:68:eb:80:5e:59:
10:0a:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:35:00 2025 by rpki-client