Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
File: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft (raw, json)
Hash identifier: up7sz8uojcBEur8927K0T65/lwEoTgPh1zi0+khu5Fo=
Subject key identifier: EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
Authority key identifier: EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
Certificate issuer: /CN=EE593FAC53D34320576D880F645706CFB797C231
Certificate serial: 16E4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
Manifest number: 16E4
Signing time: Sat 23 Aug 2025 21:05:57 +0000
Manifest this update: Sat 23 Aug 2025 21:05:57 +0000
Manifest next update: Sun 24 Aug 2025 03:05:57 +0000
Files and hashes: 1: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl (hash: a6hOnk7tfIMC7iRToQxbrXj0uyT2SUJBQ6uhuyFSA2k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5860 (0x16e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE593FAC53D34320576D880F645706CFB797C231
Validity
Not Before: Aug 23 21:05:57 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=EF377035CD4828EB97F29B5135BD5E32058FA8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:bf:77:ad:54:e0:34:e4:4e:36:af:14:ce:
08:ce:e3:b2:8a:ad:69:d2:f0:a8:3c:ae:ce:04:40:
03:34:23:74:f8:0f:af:be:01:1f:81:09:34:89:c3:
41:92:4d:4f:da:c8:d6:11:e3:9d:8a:f8:0e:df:d4:
7a:7e:25:4e:1e:72:d4:dc:e2:09:f6:87:8b:d6:58:
5a:7e:ff:5a:ff:f0:87:0b:bc:6d:ae:16:13:f0:47:
8b:63:2d:1f:22:96:01:d9:2f:d4:85:9b:4a:a7:83:
82:4c:36:99:00:2a:e3:7f:fa:f1:c9:25:8a:70:36:
4e:a1:35:1c:c4:69:fe:f5:98:19:9d:f1:59:d2:a4:
ff:59:fa:08:2a:b7:1b:18:6e:90:1d:5c:d7:5e:ab:
ea:59:9b:1e:49:47:f8:76:b2:1a:86:63:0d:b7:7c:
3e:05:bd:ef:f8:fd:f3:12:c9:5a:7c:ed:a7:2e:a4:
d5:2c:fd:09:41:57:3b:70:53:f7:07:63:a7:f8:26:
59:0f:25:dc:79:3f:1d:32:b7:8a:a0:eb:ca:1c:e9:
8a:62:6b:de:9a:71:cb:36:33:7e:4f:a7:f8:c8:c7:
3a:f9:12:11:cd:9d:d6:59:65:33:c4:31:f7:f3:b0:
50:4c:8e:b0:cd:1a:d2:c1:cd:0b:fe:53:08:3a:ea:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
X509v3 Authority Key Identifier:
keyid:EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:3c:47:92:b8:c7:0a:2b:10:56:aa:ef:8a:41:7e:b7:d8:
ab:f0:c0:26:8b:56:30:ce:cf:83:ba:9c:e8:e9:93:c4:70:de:
5a:f0:a8:82:00:7c:e8:2c:e2:47:4b:8e:b3:fc:19:61:66:71:
05:86:0d:2b:8d:5a:71:f8:d4:cc:a4:96:00:46:34:dc:eb:fd:
95:79:90:d2:4f:ee:30:8a:5f:47:15:55:fb:b6:60:be:c2:3e:
83:d9:32:36:22:85:13:0b:46:e3:f8:0c:8a:87:b3:39:9d:62:
9d:56:c2:b4:e0:12:d7:b0:e1:90:35:6f:00:d4:fe:5e:ab:dc:
bc:e9:68:91:d8:ad:5b:a0:85:a6:e9:2e:c1:96:ff:16:3f:33:
4f:1a:b4:8d:54:a9:ee:e1:ce:77:ad:fd:29:b0:1d:ae:32:2b:
42:d5:96:13:7c:85:84:be:39:f5:28:95:cd:23:ef:ea:cf:d4:
fc:31:3e:3d:9d:92:50:9b:f6:89:17:d6:fa:8b:e0:32:58:ea:
60:54:46:58:ea:8c:61:29:28:5a:0f:01:fb:2e:2c:67:92:c5:
cc:82:3a:3c:36:78:9a:ec:80:00:48:71:84:f9:bb:bb:8f:49:
8b:16:3b:23:99:22:17:d0:ee:01:f9:f2:2e:dc:46:4c:bf:66:
b1:f4:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:40:05 2025 by rpki-client