Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier: w88bnokII3wa0TJ2+2PBnBfndUaRDvRsYPDO5cq7/Q8=
Subject key identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer: /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial: 1EDF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number: 1EDF
Signing time: Sat 23 Aug 2025 21:05:35 +0000
Manifest this update: Sat 23 Aug 2025 21:05:35 +0000
Manifest next update: Sun 24 Aug 2025 03:05:35 +0000
Files and hashes: 1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: 7n5J6UrCBYKA/kzU7lVeVNMtzGAPnUtfmzEm9nw8ces=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7903 (0x1edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Validity
Not Before: Aug 23 21:05:35 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
X509v3 Authority Key Identifier:
keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:ae:15:8d:6a:5f:f6:d2:a7:55:bf:19:a7:71:b8:07:5b:
9f:ad:32:34:9a:45:0e:ab:f8:94:06:bb:9d:05:d9:97:20:55:
9f:ee:62:dc:c7:97:49:75:8c:f5:77:20:93:48:b6:55:09:03:
b1:3f:c6:6e:c6:11:e5:15:3e:24:be:c3:b5:e3:03:2a:9b:62:
a6:dd:e3:3c:dd:53:e6:f4:a0:2b:99:4f:19:bd:f5:f9:8b:96:
20:f4:92:74:8f:f1:e5:86:4a:8f:6e:cb:16:d2:e8:14:f8:14:
f0:e9:07:35:73:40:3b:8f:06:54:ad:24:b1:55:43:2c:36:7d:
25:20:b1:7e:c0:a9:13:aa:78:23:f5:ea:87:5c:3c:ea:8d:78:
c2:5e:7e:de:ba:16:77:53:80:e7:b3:4d:8d:81:8c:80:50:35:
a9:86:f9:8b:69:84:8a:28:dd:d8:4d:dd:d0:f3:b4:db:4c:95:
f3:29:a6:c1:19:99:69:36:3f:1c:bc:ae:e4:0b:b9:71:84:4f:
e5:f3:c9:2c:c1:71:77:46:20:39:d4:8d:68:04:ba:27:f9:d4:
ab:3d:26:46:e5:fc:58:02:bc:2d:31:21:bf:92:90:0d:4a:e5:
4c:7d:64:54:92:84:36:3f:6a:d2:2d:21:f0:34:92:80:29:26:
6d:89:89:76
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk4
NjI0MkIwM0ZCNEE5QzE5MDYxMjdFRkM0QzA1RTNCOUJERkVCQjAeFw0yNTA4MjMy
MTA1MzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENBOEU5OUNENEM1RTJE
QzFFNjA5Q0U2RjlEOUI4OTlENTM1QTYyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzNX/7/DJsiM/+VKFjgpcEXGsHluTrw6+ivYTBAs2OzPNhbfO
pCDF3z/HFDgyCvZRg9/ibvtxzjdPPrgqkWSOK4DbqZ2jyY1FxE9C4XeDBxJvfqgD
/tf4lxZWIYkfgCdWI12eOSHdi8aXAP25b8Z3RTrL7DhY82U9gQ7Z6XRO/LWDFZcA
Lqd28+Y+DMC3+VuR+LeF7M0aBdtlrggobawKBBCxwqp6gKKSaqcAOmKpSZSac4pS
WrXnQ9/wOp97UScnwE/fwSY2cpYOx0cV1z36JTRLEBjDx2JtSVhGQhnX4RN/y+RR
2rnfuMzjY9wwG5aQUeeI/fcak7gFYFlOQGJZAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUyo6ZzUxeLcHmCc5vnZuJnVNaYp8wHwYDVR0jBBgwFoAUSYYkKwP7SpwZBhJ+
/EwF47m9/rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0
OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NZWWtLd1A3U3B3WkJoSi1fRXdGNDdtOV9ycy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDkvU1lZa0t3UDdTcHda
QmhKLV9Fd0Y0N205X3JzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACuwrhWNal/20qdVvxmncbgHW5+tMjSaRQ6r+JQGu50F2ZcgVZ/uYtzHl0l1
jPV3IJNItlUJA7E/xm7GEeUVPiS+w7XjAyqbYqbd4zzdU+b0oCuZTxm99fmLliD0
knSP8eWGSo9uyxbS6BT4FPDpBzVzQDuPBlStJLFVQyw2fSUgsX7AqROqeCP16odc
POqNeMJeft66FndTgOezTY2BjIBQNamG+YtphIoo3dhN3dDztNtMlfMppsEZmWk2
Pxy8ruQLuXGET+XzySzBcXdGIDnUjWgEuif51Ks9Jkbl/FgCvC0xIb+SkA1K5Ux9
ZFSShDY/atItIfA0koApJm2JiXY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:05:57 2025 by rpki-client