Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
File: -ta0PAnQSQoN9_iR359jtSDPIQ8.mft (raw, json)
Hash identifier: VOGdg4PzldIqBv3ftsBYVZfYNiBi1Wak8+4GLkBWsY0=
Subject key identifier: 4B:CC:44:71:84:49:7A:8F:AE:B3:76:9A:D7:67:F2:E2:87:1D:2E:AC
Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Certificate serial: 10C2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
Manifest number: 10B2
Signing time: Sat 23 Aug 2025 14:03:20 +0000
Manifest this update: Sat 23 Aug 2025 14:03:20 +0000
Manifest next update: Sat 23 Aug 2025 20:03:20 +0000
Files and hashes: 1: -ZZb-6c-Wd7Tjge5gpverfNpsgA.roa (hash: HXdK03trP6XBIKeBgjUxSm8kA9kWC/XQa72N0+sODVs=)
2: -ta0PAnQSQoN9_iR359jtSDPIQ8.crl (hash: Aptgukc8Q68AKMd0cFmI9m9mllb32e+MU1TG6yF7O4Y=)
3: 1_xVmznRbjgrARcOnrUzK3zkMkM.roa (hash: GCP9qK5uGloZHD8Mka7pysVMWzi2GGVFtT7E7LtKHac=)
4: LiLhG4umWIFvssfr-YRo7VPi9PQ.roa (hash: 8VzvX+6L2up29XAoS07TOWxozlHhFYSU/9tMLFarKws=)
5: MRmJHXHbniE2rjTMj7-XBPn2PFE.roa (hash: AZznRSYPnsoxRC7iuvzdOmezQdGSxGrbcrS0Svin9+Q=)
6: PZpMpUI55eB2vbRtNWyVquWC7y0.roa (hash: XGAKJedxzNaXjaRNceMDOB16UaE9Le2pcMQeq9bqLtI=)
7: jZYYEWocgaa7kE62wHrtcbhmeqg.roa (hash: imxvfDsgpwHiKGk2ShLZNPp9PfRPBN6EzLl65EE3xwI=)
8: llh71OO6sGwAfZdC60WJs1U2NU0.roa (hash: 5pHK2BD7cThMf2Gdvo1WL3olc9aZ3jLaBSG3cDaQoIc=)
9: miGjVDXbOzQQTZP9E5umEPnWCAw.roa (hash: bFWWTZfSgak8dwI4OZSJZy4GLdjg6INc4Sl9XfE3d4k=)
10: rovnomnuVFMNJzTNeyy5W6WRMe0.roa (hash: aVXERw9JByy2HpoXIifbCTO+OLw9MnI6ZPVD8/WtLto=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4290 (0x10c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Validity
Not Before: Aug 23 14:03:20 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4BCC447184497A8FAEB3769AD767F2E2871D2EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:ee:2b:68:e0:56:e6:b1:31:28:fd:47:ec:
4f:11:cb:57:24:26:ab:d1:62:af:be:7f:2a:fc:e0:
a6:ca:09:fa:df:39:bf:1a:4d:ee:e7:d2:04:13:4c:
ac:e2:0e:1e:ad:f4:e7:66:10:72:a4:dc:dc:58:0b:
2b:30:18:84:09:a9:c2:92:f5:48:0c:e0:c7:e2:e8:
76:37:fe:e1:0b:b8:b7:cc:b4:a7:1c:f6:f0:00:a2:
4c:88:c2:0d:1c:77:ee:ed:5e:1b:ab:6c:63:b1:fc:
b8:42:c7:dc:5d:96:72:b1:a2:f2:ab:6d:8b:6e:f6:
28:87:66:1f:a9:05:09:e7:13:7d:9d:7e:49:b9:35:
62:13:98:cc:ad:e2:3f:3e:50:3a:6d:ad:48:06:a3:
4d:d0:25:33:71:7f:f4:45:31:2e:da:ea:70:d2:f2:
bb:86:d1:7d:04:a2:98:b1:ca:26:25:9b:b7:84:56:
af:f6:ae:d6:85:b8:1a:b5:78:24:84:58:57:60:b1:
ed:e2:3f:f0:d1:fa:4c:57:30:15:22:fa:37:8b:f8:
10:fd:c8:f7:0a:50:d3:19:f8:15:cd:0d:b4:c8:b6:
35:e0:c2:1d:71:28:31:3d:05:53:bd:9f:f7:f2:c8:
51:e0:c9:cb:a8:e3:82:d0:1e:9e:d2:83:a2:44:6e:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:44:71:84:49:7A:8F:AE:B3:76:9A:D7:67:F2:E2:87:1D:2E:AC
X509v3 Authority Key Identifier:
keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:a8:38:0f:29:3c:c6:31:fa:41:f4:89:78:6f:fc:6e:d5:
af:d2:8d:4d:6f:08:15:82:3c:ab:ba:35:ea:1e:f4:64:28:7d:
4b:b6:50:4f:cd:f9:fe:95:5b:f7:fd:55:93:57:3c:ca:19:2f:
1a:cf:1f:4d:b2:e9:b5:28:2b:c3:5d:70:5e:fc:3f:b7:b6:14:
46:26:6d:0f:68:90:5f:3e:e5:c0:9f:20:ab:3d:87:96:be:48:
72:08:eb:15:9a:ed:99:e0:e6:3c:f5:0a:a8:75:e3:a6:29:65:
41:d7:4d:bd:ea:d7:a9:95:54:47:29:c8:b2:e4:65:27:25:54:
8f:91:89:5a:4e:cc:f3:1e:39:b2:d4:a3:54:50:ef:5e:d7:94:
57:d2:5c:97:c3:d1:53:ca:36:8e:00:b3:7a:52:0c:c7:a8:ab:
db:6a:40:16:e7:13:c9:83:44:b5:a2:55:e3:7c:c5:4f:ee:9c:
b2:b1:89:b2:cc:ae:bf:1d:dd:33:2b:04:56:52:58:53:f5:5b:
6e:0d:d0:1d:2e:cf:bf:0d:d7:3d:d0:96:90:67:98:5e:d8:8c:
8e:ed:d8:65:2b:ba:ad:54:04:10:d2:7e:41:97:f3:a1:e1:9b:
10:6d:f1:c8:52:b6:86:85:b7:f3:2f:08:55:79:f6:55:26:05:
b6:dc:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:40:20 2025 by rpki-client