Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft
File: KnUvQ6QxoheyTTXOiiVkyVhFESE.mft (raw, json)
Hash identifier: meIEMq5so7reXgyvRxQ/8Js7uuLb5Z9O5NzOLSr8qNs=
Subject key identifier: CE:4F:CC:CC:7F:C4:06:44:6F:9B:C0:34:DA:0C:68:06:60:F5:E5:8B
Authority key identifier: 2A:75:2F:43:A4:31:A2:17:B2:4D:35:CE:8A:25:64:C9:58:45:11:21
Certificate issuer: /CN=2A752F43A431A217B24D35CE8A2564C958451121
Certificate serial: 16D3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft
Manifest number: 16D3
Signing time: Sat 23 Aug 2025 16:03:29 +0000
Manifest this update: Sat 23 Aug 2025 16:03:29 +0000
Manifest next update: Sat 23 Aug 2025 22:03:29 +0000
Files and hashes: 1: KnUvQ6QxoheyTTXOiiVkyVhFESE.crl (hash: ehbckmSJt80F2YeKHJw2HMAYT5vcBwpjbux0N8UDbiQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5843 (0x16d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A752F43A431A217B24D35CE8A2564C958451121
Validity
Not Before: Aug 23 16:03:29 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=CE4FCCCC7FC406446F9BC034DA0C680660F5E58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:2d:b6:33:50:4d:fe:37:bc:70:77:b3:3b:
5c:c4:d9:4b:6f:6b:50:47:d3:96:39:23:fd:62:a7:
bc:f0:80:44:25:f9:77:a8:a9:81:dd:32:24:3a:d0:
a3:8b:19:9f:05:ab:0c:41:ef:10:dc:2c:ba:a5:d8:
87:4f:ba:2f:f7:c7:40:85:12:02:0c:4e:89:24:f7:
11:b2:b9:d2:0d:2c:87:0b:ff:54:65:c9:ec:23:fb:
80:d8:aa:15:af:7f:8e:ed:f6:f6:a0:c0:83:a4:16:
41:93:41:cc:4b:32:cf:0f:1d:81:3f:27:b8:42:8f:
e4:73:c9:5b:da:c2:77:96:1a:c0:65:45:b6:54:45:
32:7d:ac:88:a7:bf:03:68:12:6d:2a:7b:96:02:21:
f8:93:dd:e1:97:78:4d:c4:90:ec:ab:53:6b:53:6b:
17:1b:c3:50:6c:88:60:90:cb:99:46:65:f5:71:8d:
61:c9:f6:23:7c:b1:5e:bd:12:73:b5:63:5c:f2:f6:
06:a5:86:e0:38:60:46:7f:ac:47:2f:75:a1:64:7e:
e2:4e:23:18:a8:19:59:65:88:7a:e8:08:a3:ea:2b:
84:71:32:08:51:28:b2:1e:44:83:86:3a:c4:30:8f:
5c:c1:f6:25:5b:61:6d:a7:d4:4b:16:1d:9a:25:bb:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:CC:CC:7F:C4:06:44:6F:9B:C0:34:DA:0C:68:06:60:F5:E5:8B
X509v3 Authority Key Identifier:
keyid:2A:75:2F:43:A4:31:A2:17:B2:4D:35:CE:8A:25:64:C9:58:45:11:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:31:67:43:3c:81:f6:20:e8:2f:cb:92:44:e0:18:6a:80:
bc:7f:97:ee:73:33:fc:33:cf:68:25:4c:04:cd:d7:ed:df:38:
5f:88:4d:88:ff:c9:5a:66:33:d4:2f:00:1d:7b:49:96:c4:d6:
b6:93:34:63:3f:c0:7a:99:00:5e:0a:92:84:ab:5a:07:f1:c5:
7c:79:67:04:20:49:90:e2:61:de:8e:8d:4a:8f:d0:38:c5:02:
4c:d0:dc:85:07:8b:58:4d:ad:8f:e0:0b:7c:13:d6:c4:e3:9b:
eb:a5:be:c7:be:58:0f:f7:a3:94:3e:6a:06:1f:ab:6d:39:84:
4e:33:2c:23:70:ee:6e:49:28:5d:1a:98:f6:15:06:35:28:e9:
61:53:b6:2d:e1:08:dc:82:c2:03:0a:cd:b4:bc:ec:6e:d1:06:
90:b3:8d:2f:15:50:06:bf:c1:09:79:9b:f9:1e:fb:cf:ed:8d:
5c:9a:67:42:08:8f:70:32:82:11:ef:a1:01:4a:4b:27:48:bd:
db:47:1f:10:29:0c:cc:c8:18:89:50:83:d0:09:ab:fe:2e:00:
30:be:d9:99:ad:be:a6:58:db:95:d2:b3:26:bf:d3:cb:c8:2a:
04:14:de:f3:08:40:09:2c:3c:c6:d0:9b:d0:27:a7:00:81:86:
45:27:62:a5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
NTJGNDNBNDMxQTIxN0IyNEQzNUNFOEEyNTY0Qzk1ODQ1MTEyMTAeFw0yNTA4MjMx
NjAzMjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENFNEZDQ0NDN0ZDNDA2
NDQ2RjlCQzAzNERBMEM2ODA2NjBGNUU1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGCi22M1BN/je8cHezO1zE2Utva1BH05Y5I/1ip7zwgEQl+Xeo
qYHdMiQ60KOLGZ8FqwxB7xDcLLql2IdPui/3x0CFEgIMTokk9xGyudINLIcL/1Rl
yewj+4DYqhWvf47t9vagwIOkFkGTQcxLMs8PHYE/J7hCj+RzyVvawneWGsBlRbZU
RTJ9rIinvwNoEm0qe5YCIfiT3eGXeE3EkOyrU2tTaxcbw1BsiGCQy5lGZfVxjWHJ
9iN8sV69EnO1Y1zy9galhuA4YEZ/rEcvdaFkfuJOIxioGVlliHroCKPqK4RxMghR
KLIeRIOGOsQwj1zB9iVbYW2n1EsWHZolu+kHAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUzk/MzH/EBkRvm8A02gxoBmD15YswHwYDVR0jBBgwFoAUKnUvQ6QxoheyTTXO
iiVkyVhFESEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5
MS9LblV2UTZReG9oZXlUVFhPaWlWa3lWaEZFU0UuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0tuVXZRNlF4b2hleVRUWE9paVZreVZoRkVTRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTEvS25VdlE2UXhvaGV5
VFRYT2lpVmt5VmhGRVNFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHqgMWdDPIH2IOgvy5JE4BhqgLx/l+5zM/wzz2glTATN1+3fOF+ITYj/yVpm
M9QvAB17SZbE1raTNGM/wHqZAF4KkoSrWgfxxXx5ZwQgSZDiYd6OjUqP0DjFAkzQ
3IUHi1hNrY/gC3wT1sTjm+ulvse+WA/3o5Q+agYfq205hE4zLCNw7m5JKF0amPYV
BjUo6WFTti3hCNyCwgMKzbS87G7RBpCzjS8VUAa/wQl5m/ke+8/tjVyaZ0IIj3Ay
ghHvoQFKSydIvdtHHxApDMzIGIlQg9AJq/4uADC+2ZmtvqZY25XSsya/08vIKgQU
3vMIQAksPMbQm9AnpwCBhkUnYqU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:10 2025 by rpki-client