Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
File: wd4p357Li9rL--H924bfKWtpCOs.mft (raw, json)
Hash identifier: H0fEJyfolnuQdGVTYPeqx8xlFT8U78UMXVMBSJ/q2ig=
Subject key identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Certificate serial: 32D4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
Manifest number: 32C2
Signing time: Sat 23 Aug 2025 16:03:02 +0000
Manifest this update: Sat 23 Aug 2025 16:03:02 +0000
Manifest next update: Sat 23 Aug 2025 22:03:02 +0000
Files and hashes: 1: 1-DT5N4BVnYL4adLY10dJcE271Q.roa (hash: UnTAl2o0f9TBX/631I/Ht7IBWTLisaKq0cn2qfGi4pg=)
2: Z5Om1pGyKlhixdvGRYKtjQfJxGw.roa (hash: dugH52tYqaFB0ihOqeTEW+VxDZ1u0aYG8vb2c2hAbhc=)
3: cY6S44cRDedEJFUdnqIJXhck4FU.roa (hash: k0KFYNwYTHa5wPizu6wqiaO0BMIC/WkhkLQPzW1jjCo=)
4: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (hash: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=)
5: wd4p357Li9rL--H924bfKWtpCOs.crl (hash: G3AAy6CcTiBeIMTlqftED27Hxv31kHRJrS0CN8ytBe8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13012 (0x32d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Validity
Not Before: Aug 23 16:03:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D50904F288CA106FC94061AABDF81FBD35239B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ec:55:7c:6b:01:58:d8:57:d8:e3:34:70:
09:65:59:ad:b7:bd:fd:33:c7:21:f7:53:05:f8:4e:
52:4a:85:1a:f7:7c:06:db:55:c2:b2:d7:09:55:d5:
39:a2:2c:2b:2a:70:29:13:35:99:ca:d8:bf:59:d5:
ba:e4:24:48:6f:73:98:44:3d:ac:6d:3d:47:75:d1:
11:fe:8c:e6:01:4e:52:b5:8c:fc:79:d7:c5:75:ea:
a8:23:6d:91:87:e8:5a:aa:95:9f:13:91:de:25:77:
45:9d:9f:19:20:36:3a:5e:7a:0a:03:f0:94:29:e2:
0c:19:09:23:ce:6a:08:74:e5:b9:67:ab:9b:67:31:
f1:24:9a:5f:12:81:5e:0c:a0:6d:c6:14:4e:b0:e5:
ff:a4:f9:9d:27:47:16:d5:ea:ae:27:e8:1b:e7:71:
74:d6:9f:99:11:62:d8:7a:ba:3b:5a:2b:73:37:33:
02:6c:58:11:7d:95:13:20:95:ec:0a:68:b1:fb:4a:
9f:ce:25:9d:6c:f2:00:c5:e9:d7:9b:a2:62:84:ee:
47:26:88:dc:5d:1e:e6:27:7c:91:0b:08:59:7b:0a:
32:f3:c9:59:12:57:8c:b4:c9:e9:82:a5:6e:b4:96:
5c:ad:99:7e:74:e5:91:9d:f5:cd:37:28:11:7d:41:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
X509v3 Authority Key Identifier:
keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:a7:5e:49:53:73:83:39:bc:ae:df:49:a5:9f:0b:24:b0:
85:2a:1a:94:94:99:7a:be:68:0a:29:36:5c:43:2c:0c:c7:e8:
30:4f:ff:21:fd:9a:84:8b:fa:3c:17:02:e3:33:77:c4:d2:d5:
fc:fe:67:09:a2:6e:00:e1:2f:9a:f0:5a:f8:5b:ac:cd:b5:d6:
eb:6b:25:ce:8f:cc:76:b0:ce:df:17:05:58:9c:64:b9:39:f3:
41:91:e4:d8:74:77:15:d5:6c:c8:e4:38:f0:ec:f9:49:49:7e:
20:fa:54:7f:29:bd:fb:3a:1a:74:9a:44:1d:b1:1a:43:16:02:
13:83:3f:2d:ee:6f:6c:83:50:07:2e:82:3e:6b:8c:9d:b8:dd:
c9:31:59:4e:63:c4:34:bc:44:57:7a:b9:63:9b:87:ed:c3:29:
d7:27:87:1b:9b:e1:a1:cd:71:29:12:27:59:32:c1:17:ac:f9:
09:bc:dc:03:9b:aa:00:b6:54:d2:fd:27:de:48:e5:b9:41:ba:
cb:dd:1b:6f:b7:49:ae:6c:2d:2e:d2:a5:eb:47:1a:b6:51:d6:
74:7e:0a:cc:66:25:af:de:7a:d6:4d:f4:83:80:4f:9b:be:5f:
cb:53:34:74:91:71:29:2d:02:22:13:49:4b:7f:78:5d:51:cd:
ca:24:37:e0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICMtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE
RTI5REY5RUNCOEJEQUNCRkJFMUZEREI4NkRGMjk2QjY5MDhFQjAeFw0yNTA4MjMx
NjAzMDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ1MDkwNEYyODhDQTEw
NkZDOTQwNjFBQUJERjgxRkJEMzUyMzlCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYg+xVfGsBWNhX2OM0cAllWa23vf0zxyH3UwX4TlJKhRr3fAbb
VcKy1wlV1TmiLCsqcCkTNZnK2L9Z1brkJEhvc5hEPaxtPUd10RH+jOYBTlK1jPx5
18V16qgjbZGH6FqqlZ8Tkd4ld0WdnxkgNjpeegoD8JQp4gwZCSPOagh05blnq5tn
MfEkml8SgV4MoG3GFE6w5f+k+Z0nRxbV6q4n6BvncXTWn5kRYth6ujtaK3M3MwJs
WBF9lRMglewKaLH7Sp/OJZ1s8gDF6debomKE7kcmiNxdHuYnfJELCFl7CjLzyVkS
V4y0yemCpW60llytmX505ZGd9c03KBF9QRgvAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU1QkE8ojKEG/JQGGqvfgfvTUjmycwHwYDVR0jBBgwFoAUwd4p357Li9rL++H9
24bfKWtpCOswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0
Ni93ZDRwMzU3TGk5ckwtLUg5MjRiZktXdHBDT3MuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3dkNHAzNTdMaTlyTC0tSDkyNGJmS1d0cENPcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDYvd2Q0cDM1N0xpOXJM
LS1IOTI0YmZLV3RwQ09zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKCKp15JU3ODObyu30mlnwsksIUqGpSUmXq+aAopNlxDLAzH6DBP/yH9moSL
+jwXAuMzd8TS1fz+ZwmibgDhL5rwWvhbrM211utrJc6PzHawzt8XBVicZLk580GR
5Nh0dxXVbMjkOPDs+UlJfiD6VH8pvfs6GnSaRB2xGkMWAhODPy3ub2yDUAcugj5r
jJ243ckxWU5jxDS8RFd6uWObh+3DKdcnhxub4aHNcSkSJ1kywRes+Qm83AObqgC2
VNL9J95I5blBusvdG2+3Sa5sLS7SpetHGrZR1nR+CsxmJa/eetZN9IOAT5u+X8tT
NHSRcSktAiITSUt/eF1RzcokN+A=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:28:17 2025 by rpki-client