Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
File: 1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft (raw, json)
Hash identifier: WP18KxtB7iPAabtQx60Gr64vIhabywcM5uaBQj87SLM=
Subject key identifier: 07:FD:51:87:5C:37:F9:3D:2E:40:BF:6E:6E:C6:36:33:78:E0:6E:DE
Authority key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Certificate issuer: /CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Certificate serial: 1DC3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
Manifest number: 1DBE
Signing time: Sat 17 May 2025 17:43:30 +0000
Manifest this update: Sat 17 May 2025 17:43:30 +0000
Manifest next update: Sat 17 May 2025 23:43:30 +0000
Files and hashes: 1: 1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl (hash: KEuLA3jYt/LCevzkS4Ms8eX9D5PY1D8z84jR6nsbCOg=)
2: b6xYKSLGz18BN2xIrblSCRlue8Y.roa (hash: ZKbFiHS0maTwFnBvd4+Py3hTk8m0FCCWWHKGFVhk4Vs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7619 (0x1dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Validity
Not Before: May 17 17:43:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=07FD51875C37F93D2E40BF6E6EC6363378E06EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:26:f7:fb:1c:7a:2f:ad:71:9f:27:07:8e:
e1:a8:17:cb:24:31:4f:d5:c7:7f:8e:3a:bd:e6:db:
6f:61:94:36:03:28:d0:db:a7:37:28:2b:e9:b2:2f:
02:d5:d5:58:27:ec:7f:25:65:10:0b:90:3d:02:b1:
2c:71:64:d8:e0:be:b5:55:e8:e0:6c:4d:25:c1:b1:
31:1d:0d:78:53:29:3f:a3:b4:f9:e6:1c:81:eb:05:
48:c6:f8:5b:8b:2e:3a:01:de:91:06:59:a4:3f:e8:
65:e0:85:77:4f:c5:aa:f5:9e:7b:ae:49:e6:b9:24:
e2:30:dd:cc:ad:7b:82:5e:1b:0e:16:72:f7:20:be:
d2:66:0a:ce:bb:4b:88:2f:32:39:d2:ca:41:ab:60:
77:5a:ee:42:ed:10:83:cc:fb:a0:15:b2:fe:0f:5e:
4c:5d:44:14:12:77:04:db:7a:c8:b7:97:24:b6:e5:
2e:d2:27:3d:cb:2d:bc:81:ac:ba:9c:87:c3:b0:f3:
b0:38:5c:9e:3f:33:4c:c6:db:4e:cd:c5:f5:94:a1:
97:0c:a3:e7:ed:5f:ad:83:8d:a5:28:d2:d9:56:f4:
8b:23:27:b8:3d:88:3b:9c:0e:6a:a3:0e:8b:a9:ec:
0e:62:a8:0d:9e:fc:d1:83:42:c2:ed:b7:1b:f8:28:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:51:87:5C:37:F9:3D:2E:40:BF:6E:6E:C6:36:33:78:E0:6E:DE
X509v3 Authority Key Identifier:
keyid:D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:0a:4f:de:99:95:be:d1:ff:07:50:26:41:1e:d5:e4:89:
a0:6e:53:2e:21:15:ae:c8:3b:bf:81:84:67:64:cd:33:03:84:
1b:12:be:e5:12:38:47:c9:d7:59:cf:6d:a7:5e:01:da:d3:fa:
c6:63:53:f8:43:3e:c5:11:be:b7:ba:cb:cb:f0:69:e6:d6:3d:
5d:76:b7:f9:7d:e0:8c:fc:22:0f:ee:52:5f:c4:a0:ec:8e:db:
fe:0f:ce:74:d8:07:bd:d7:5e:28:52:a2:de:1a:a7:4f:eb:76:
f9:d3:37:9e:46:1a:24:7e:7f:67:cc:cd:b6:7e:55:19:be:da:
1e:84:0c:2c:03:b9:19:60:2b:fe:36:db:f4:8f:40:16:67:e1:
31:76:0f:0e:61:f3:6a:04:94:33:53:6c:92:45:93:da:5b:7e:
8a:2a:c3:de:20:5d:66:34:c8:ef:c0:13:3a:3c:80:6a:96:c6:
ee:98:99:74:3b:8e:d4:ca:50:25:98:e2:12:65:2c:f7:a9:b7:
4c:b8:43:1e:9a:45:c0:8f:7b:ab:f6:3d:e7:10:6d:b4:df:da:
b1:3c:04:31:cc:bc:84:89:43:5d:87:20:60:96:d4:6f:8e:22:
68:95:c4:04:ce:0e:38:1c:b6:bf:fd:0e:58:d1:91:b2:45:44:
81:2a:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:58:22 2025 by rpki-client