Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2721/5A_yNW8ADHY6J2irxkot3hOi8-Q.mft
File: 5A_yNW8ADHY6J2irxkot3hOi8-Q.mft (raw, json)
Hash identifier: iNRQa64+tWe2nDiv1gcMqG6duJ7Vfn6JdaxB6Ky9E8k=
Subject key identifier: DD:91:F7:49:90:B6:EE:7D:12:02:0E:F0:FC:79:93:5D:9D:98:5E:44
Authority key identifier: E4:0F:F2:35:6F:00:0C:76:3A:27:68:AB:C6:4A:2D:DE:13:A2:F3:E4
Certificate issuer: /CN=E40FF2356F000C763A2768ABC64A2DDE13A2F3E4
Certificate serial: 1778
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5A_yNW8ADHY6J2irxkot3hOi8-Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/5A_yNW8ADHY6J2irxkot3hOi8-Q.mft
Manifest number: 1778
Signing time: Sat 27 Sep 2025 01:33:47 +0000
Manifest this update: Sat 27 Sep 2025 01:33:47 +0000
Manifest next update: Sat 27 Sep 2025 07:33:47 +0000
Files and hashes: 1: 5A_yNW8ADHY6J2irxkot3hOi8-Q.crl (hash: fX1rknHPR6C0DnOEdRnkRmu//C57YAdhSEvDo+OjfqM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6008 (0x1778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E40FF2356F000C763A2768ABC64A2DDE13A2F3E4
Validity
Not Before: Sep 27 01:33:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DD91F74990B6EE7D12020EF0FC79935D9D985E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:fe:20:8a:4e:bc:d0:6a:56:42:12:a1:5f:
b1:24:08:97:39:69:87:7f:fc:6b:99:6b:e0:51:9e:
8d:b2:6f:b9:03:9f:a1:f6:1a:3d:13:e3:04:f1:a5:
39:33:40:8a:2e:9d:32:c4:bb:8b:9a:19:52:0b:05:
87:1c:32:6c:d9:a6:58:ed:a9:f7:6b:55:8a:99:97:
f8:7a:2d:8b:da:3f:86:d5:e8:f3:db:48:d7:9c:46:
6c:47:18:0a:a5:92:14:9f:51:ce:dc:83:02:0c:fe:
e6:08:13:fc:71:dc:6b:5d:c0:ee:81:26:28:09:2f:
50:a4:c7:47:98:dc:43:c0:7c:79:9a:51:34:43:68:
ab:f7:82:36:f4:ed:7e:a0:3f:a4:00:5d:73:b6:fa:
71:7a:d8:f4:30:1e:89:a5:32:a4:96:7b:24:35:50:
bd:f3:98:6b:ff:e4:6a:d0:81:37:d3:c5:65:59:2f:
7a:af:b3:5b:2c:12:f5:9b:3e:48:f4:18:38:8d:c2:
8c:f2:1c:ec:c6:f8:5e:a8:f8:c8:c4:fe:95:05:a1:
52:df:f3:f8:9f:09:7e:71:82:1f:d5:32:33:06:db:
5b:93:f1:bd:3c:8b:36:46:aa:bb:07:e1:8d:a4:81:
c3:71:c4:69:fa:82:7f:32:6b:7d:2b:1a:6e:70:a6:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:F7:49:90:B6:EE:7D:12:02:0E:F0:FC:79:93:5D:9D:98:5E:44
X509v3 Authority Key Identifier:
keyid:E4:0F:F2:35:6F:00:0C:76:3A:27:68:AB:C6:4A:2D:DE:13:A2:F3:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/5A_yNW8ADHY6J2irxkot3hOi8-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5A_yNW8ADHY6J2irxkot3hOi8-Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/5A_yNW8ADHY6J2irxkot3hOi8-Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:a7:47:53:e4:1a:e9:af:8e:27:80:38:0f:54:b7:d9:25:
30:0b:77:fb:d6:4f:1e:6d:38:89:48:ae:f3:2f:b9:67:75:bc:
25:26:f4:90:04:43:1e:b3:bb:fe:ca:9e:bd:c4:5e:48:d4:5a:
5e:6c:42:07:f3:0a:43:68:94:3d:1e:1b:d2:63:2c:1a:65:b7:
f7:db:ff:82:6d:0e:5e:62:fe:15:23:c3:46:4c:ae:49:be:76:
b8:c0:26:b8:1c:a6:6c:45:c3:05:09:bf:c3:08:fe:0f:3a:e4:
e1:d0:f4:b2:14:24:9c:cf:41:c6:d4:ec:01:60:7b:36:c2:9f:
34:5e:65:22:61:91:e5:e2:09:61:f4:22:35:f7:96:66:94:bf:
fc:60:29:21:c6:a9:e1:5c:94:0e:af:86:3d:3a:8e:62:8a:39:
16:ac:d6:1e:c7:a9:65:ef:75:df:c8:f6:da:70:2c:62:bb:3e:
36:86:63:02:b9:89:39:53:4c:5b:cd:a9:ae:cd:65:ec:fb:f9:
dc:cc:36:65:7b:79:0e:07:2b:f2:3a:19:39:e0:64:3f:e3:31:
71:1d:d0:a0:47:48:e3:03:34:18:b0:c2:d6:89:9d:14:0d:84:
86:a0:17:ee:b2:56:c3:5a:12:d4:1c:1f:e7:4a:ba:12:e0:20:
da:4f:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:32:23 2025 by rpki-client