Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
File: AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json)
Hash identifier: a+Uzs5Z1mzjZdX+ZBFVTafH5K6nmq9aLvtjfT4QBTIw=
Subject key identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 273C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
Manifest number: 2712
Signing time: Mon 20 Oct 2025 17:08:02 +0000
Manifest this update: Mon 20 Oct 2025 17:08:02 +0000
Manifest next update: Mon 20 Oct 2025 23:08:02 +0000
Files and hashes: 1: 4UrDTuI3fRzxDkq9jmbrDmI-UHA.roa (hash: oZG+CE81ah9aXVNLu38K4yiAAENpfLNqjhEmoyhOSrs=)
2: 7kLaRkHSmk9FaIeZ9oqI6e4fEsA.roa (hash: l7vT3x/Y9LqsoHI32O0Jgooo5alWA0xNagrRT3pm/fk=)
3: 8UazvGr8myutsZuYchfmJiGlpPU.roa (hash: dwAzogItaSJiR8s2XycaBfjUY/ztu1XyATE78EINMAs=)
4: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: q05hX8toT8GsivN2bUchrb2UXfYS2ke/WiRDWa5sDac=)
5: PgDSg7mQ46gIqctq9zQXrcxELlc.roa (hash: W/toZWcf74z12WeSOci6llIBq7P2QTL5WkC9d3tFvB8=)
6: QWNPUriuPTu9mMN7kkS5vSl3FpQ.roa (hash: wpNrPvLlM/Y/pcvk+2/pS1oFpwzKcTWyZzPhM+/WiEw=)
7: YpwK3_bJXKkI0e_B_z4zrFIz0EA.roa (hash: 9i43Ta8Fk/x5/xuaVmL+szlJLf0d5Et3A4ddM98phuE=)
8: YtgPMpzsRzGXBs45mr1kyGJf1Os.roa (hash: 98gJqd8+/J+xFOWdPMc/FU4rHgZx0N080kCzwFikk9U=)
9: aekWbbTAGrNHbz8lLX-GB4mJ8ik.roa (hash: FkyXPmVJ+75fAa1b8K1Ig0vIl03U88Oy2qI2mnVkFoA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10044 (0x273c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Oct 20 17:08:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=0ACA00C337354773164EFA107456DA00F2479420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35:
84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4:
15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5:
55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba:
61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c:
56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0:
bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d:
e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16:
1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60:
c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c:
87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e:
75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c:
fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b:
fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91:
a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70:
b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7:
28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ca:db:07:b2:57:5f:46:4c:82:a3:7c:af:09:07:eb:4e:b9:
e7:f6:d1:62:2b:a5:47:c3:63:2f:b4:01:d7:df:e4:63:03:c0:
61:b3:de:f2:4e:f2:08:8b:21:f4:5f:eb:e9:90:39:0b:cd:18:
96:d6:88:71:34:89:4c:79:0d:0a:61:0d:bc:21:a2:5a:a4:67:
1d:96:3a:8e:71:21:f0:00:79:11:9a:70:2d:46:7c:c1:43:bb:
cd:41:55:c7:97:82:4c:4f:bf:cc:ac:c0:c4:64:78:a7:79:f9:
dd:ef:bc:4e:ae:6d:9d:37:d5:46:f0:13:38:17:26:89:ff:b0:
6a:ae:7d:05:a4:1b:78:56:22:a7:54:5e:7d:a4:a7:e9:bd:bd:
05:5f:3d:e2:ab:b8:71:1f:f9:df:8c:4b:7b:23:ac:51:19:94:
81:7c:8d:d1:d5:2d:ea:11:73:72:d1:b3:ba:77:d6:ee:fa:b7:
00:fa:2c:73:36:4e:11:92:65:9c:69:ad:a4:bd:28:96:0b:dd:
95:0e:d6:15:5e:ee:43:19:7e:5b:5b:53:5e:a2:4d:3d:8c:68:
b5:68:59:c6:a0:b3:39:15:36:8b:7d:0f:ca:7d:03:0c:5c:66:
29:ff:90:00:ce:39:b5:9d:d5:a4:4a:df:82:72:d9:45:e5:55:
8c:86:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:31 2025 by rpki-client