Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
File: 5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft (raw, json)
Hash identifier: eKnESOqRkP5UKQ0zUPoXre/BOqfrzlHlg8hJ2Ev9cRo=
Subject key identifier: C8:78:A0:D0:50:B9:93:35:16:51:7E:A5:08:7E:BA:12:24:41:2D:63
Authority key identifier: E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
Certificate issuer: /CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
Certificate serial: 1F6F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
Manifest number: 1F6F
Signing time: Sat 23 Aug 2025 21:03:00 +0000
Manifest this update: Sat 23 Aug 2025 21:03:00 +0000
Manifest next update: Sun 24 Aug 2025 03:03:00 +0000
Files and hashes: 1: 5e3FZP6LAvLPhwCTu_3cMn1tk5U.crl (hash: pt79oGpi/1X9gUmAim3v9ixR/JOgDJn7dflY8i2dD2E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8047 (0x1f6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
Validity
Not Before: Aug 23 21:03:00 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C878A0D050B9933516517EA5087EBA1224412D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:3f:58:00:f8:4d:85:6d:6f:ef:7d:5b:80:
b1:14:d9:33:7e:2a:3c:4a:40:6e:b4:29:f8:90:f2:
8b:d4:49:d1:9a:0b:ed:d7:e0:8c:bb:a3:7e:30:ec:
1e:a5:d9:89:32:0c:63:44:c5:a8:e8:d3:b2:e5:9f:
5e:f4:23:d9:7c:e7:09:8b:38:36:aa:9a:07:e0:00:
42:15:39:f5:36:a3:2e:3a:3c:aa:5c:07:6b:79:a7:
b5:02:02:1e:a8:ab:1d:ea:5d:f9:db:8c:7c:0f:1b:
3f:3c:75:b1:37:2a:86:58:68:50:c2:95:1f:02:05:
79:3c:06:55:8f:42:c2:d8:f4:fc:d2:79:20:3c:c9:
1b:d5:2f:41:96:af:7e:2b:b5:e9:2a:12:35:79:e5:
44:c8:05:0f:4d:c8:65:32:fd:30:0d:49:b0:e9:84:
8d:5c:e1:22:84:7d:29:62:c0:fb:d4:88:65:d5:65:
1c:66:1c:6f:4c:07:1a:2c:0e:44:f8:63:9d:c7:08:
8b:83:d7:af:b2:c0:b3:47:79:fe:0f:f5:da:cc:8b:
7f:a5:59:6f:ef:65:2f:f5:30:63:ee:b6:73:46:5a:
df:4b:07:20:4f:55:2a:c7:8d:d1:49:c0:58:42:e6:
15:86:b6:04:aa:b0:9f:54:69:3f:1b:61:86:83:18:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:A0:D0:50:B9:93:35:16:51:7E:A5:08:7E:BA:12:24:41:2D:63
X509v3 Authority Key Identifier:
keyid:E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3d:bb:24:7f:b4:91:c4:03:cb:b7:34:11:a7:92:29:bd:b7:
e2:a4:a5:9c:66:dd:48:83:fa:16:48:93:4e:f0:aa:90:d0:4c:
e7:17:e2:86:46:40:be:1a:6f:b6:5d:8a:f2:46:a0:c2:86:13:
23:c3:f1:2d:41:68:53:58:af:ee:fd:ba:b9:85:4e:32:55:d8:
25:9a:3f:63:98:da:15:f0:b5:0f:cd:6b:40:54:8b:a8:1d:c4:
33:61:48:93:1e:01:d1:84:eb:24:7f:b7:ea:30:7b:3f:89:79:
1f:fd:99:1e:68:4c:01:48:2b:4a:9f:cd:09:25:66:8b:fa:83:
0e:58:6f:d5:86:70:8d:80:80:53:5f:6c:8c:7b:34:a6:c9:87:
f1:52:eb:95:cc:e4:50:63:e0:da:63:14:c0:d4:67:df:1f:fd:
c1:9f:f5:07:fc:1d:50:06:15:e6:de:e7:11:36:0f:19:e6:91:
e0:af:cf:0d:66:7e:82:d9:5c:65:74:89:1c:9e:92:59:2a:32:
34:31:57:99:d0:c2:40:f2:5a:a0:7e:5a:05:77:d8:74:cb:61:
0b:a7:73:82:36:44:8d:13:76:01:81:84:1f:b0:32:7f:f0:a6:
46:81:06:33:a5:76:4c:b7:9e:93:f2:0c:98:29:58:d1:a6:d7:
ec:53:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:25 2025 by rpki-client