Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier: WziH1DATRq9n+dZ0CU17lurby7yA7G3uhz3GsuOgp0A=
Subject key identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer: /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial: 1CFB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number: 1CFB
Signing time: Sat 17 May 2025 13:11:47 +0000
Manifest this update: Sat 17 May 2025 13:11:47 +0000
Manifest next update: Sat 17 May 2025 19:11:47 +0000
Files and hashes: 1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: Ocmv2HE/o7+YyhPhOT3sF5DZnPNwB/ajEWQ2Q9Efkw4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7419 (0x1cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Validity
Not Before: May 17 13:11:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
X509v3 Authority Key Identifier:
keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e4:b9:00:bc:27:95:ad:c7:cc:2d:c8:6a:e9:ca:7d:cf:23:
c7:7c:b3:aa:66:66:03:5c:cb:b7:df:b1:2f:a7:cb:3f:80:9a:
72:dd:59:63:c4:95:6c:10:20:0d:2f:dd:59:8d:cf:f4:04:8a:
f0:e6:52:94:45:80:b4:ad:b2:f8:45:fa:bb:a8:41:4d:47:5f:
c9:7c:4b:ff:32:fe:ce:ac:bb:05:79:01:10:6b:d0:c0:4a:c8:
df:51:8e:01:2a:18:0d:ea:ff:94:38:a0:a0:b1:c2:9c:76:f9:
da:47:73:23:30:0d:2a:0d:9b:ab:e1:c1:b8:0c:c9:07:57:b9:
0e:55:24:7d:f9:20:1e:64:63:a0:d6:25:ba:63:a8:39:da:61:
0e:84:56:2a:48:89:5c:11:b8:67:1a:c2:6c:80:14:db:e9:86:
81:e4:ee:37:bd:f2:24:52:75:e8:b4:79:7f:f5:1e:a8:c3:15:
cc:9e:87:83:65:70:8e:2a:69:99:ca:6f:ca:46:16:35:1f:43:
f9:33:36:a6:dc:ae:a9:04:3e:29:a4:35:1e:28:ce:2d:4c:77:
70:ca:6e:f9:68:62:ca:0f:d8:7a:eb:d8:1e:ac:a2:b8:3b:93:
a9:19:78:d7:5c:b8:35:8e:b2:db:55:6e:c9:15:10:2c:5a:1f:
a9:f7:a3:3e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk4
NjI0MkIwM0ZCNEE5QzE5MDYxMjdFRkM0QzA1RTNCOUJERkVCQjAeFw0yNTA1MTcx
MzExNDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENBOEU5OUNENEM1RTJE
QzFFNjA5Q0U2RjlEOUI4OTlENTM1QTYyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzNX/7/DJsiM/+VKFjgpcEXGsHluTrw6+ivYTBAs2OzPNhbfO
pCDF3z/HFDgyCvZRg9/ibvtxzjdPPrgqkWSOK4DbqZ2jyY1FxE9C4XeDBxJvfqgD
/tf4lxZWIYkfgCdWI12eOSHdi8aXAP25b8Z3RTrL7DhY82U9gQ7Z6XRO/LWDFZcA
Lqd28+Y+DMC3+VuR+LeF7M0aBdtlrggobawKBBCxwqp6gKKSaqcAOmKpSZSac4pS
WrXnQ9/wOp97UScnwE/fwSY2cpYOx0cV1z36JTRLEBjDx2JtSVhGQhnX4RN/y+RR
2rnfuMzjY9wwG5aQUeeI/fcak7gFYFlOQGJZAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUyo6ZzUxeLcHmCc5vnZuJnVNaYp8wHwYDVR0jBBgwFoAUSYYkKwP7SpwZBhJ+
/EwF47m9/rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0
OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NZWWtLd1A3U3B3WkJoSi1fRXdGNDdtOV9ycy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDkvU1lZa0t3UDdTcHda
QmhKLV9Fd0Y0N205X3JzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJ/kuQC8J5Wtx8wtyGrpyn3PI8d8s6pmZgNcy7ffsS+nyz+AmnLdWWPElWwQ
IA0v3VmNz/QEivDmUpRFgLStsvhF+ruoQU1HX8l8S/8y/s6suwV5ARBr0MBKyN9R
jgEqGA3q/5Q4oKCxwpx2+dpHcyMwDSoNm6vhwbgMyQdXuQ5VJH35IB5kY6DWJbpj
qDnaYQ6EVipIiVwRuGcawmyAFNvphoHk7je98iRSdei0eX/1HqjDFcyeh4NlcI4q
aZnKb8pGFjUfQ/kzNqbcrqkEPimkNR4ozi1Md3DKbvloYsoP2Hrr2B6sorg7k6kZ
eNdcuDWOsttVbskVECxaH6n3oz4=
-----END CERTIFICATE-----
Generated at Sat May 17 19:37:55 2025 by rpki-client