Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
File: JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json)
Hash identifier: 9yHatuNZhkj4+X7aWT0pLT4h0wf26sJdgVMxBVRhMIg=
Subject key identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 15FD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
Manifest number: 15B6
Signing time: Sat 23 Aug 2025 14:03:14 +0000
Manifest this update: Sat 23 Aug 2025 14:03:14 +0000
Manifest next update: Sat 23 Aug 2025 20:03:14 +0000
Files and hashes: 1: -_Po0agHkbGS0Ttm0WTWcg6zpNU.roa (hash: cHHjiakk8jCkGL3XpKV91MHxeMtMGSDpHsPjGi4cEd8=)
2: 4Juy5ozvGMAEdMuewe0ZYAaF3-Q.roa (hash: 6O+UHQ1w/r9hPNtKHCNIWWQQwAn1B2EigSJynFXs6YQ=)
3: 6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa (hash: 9SnwaZ1aA/kOcSBtXH6cQmmrvzUJK8pB6FbTGh869ws=)
4: HUw23TFXmjpD_e2Klj8O1aJOuLI.roa (hash: LVhArJyw5UUv/lJaYkde8UdSAWT1VmmRAoWb0c+KHGM=)
5: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: ocTwQCfZZwZcbLAF7AdClX5qfRD3kOpKNxDZzxEGmnE=)
6: LAGXNa5EniBKRH4vtqRQfPHsuuE.roa (hash: V/pBdiKaEEjm9ZPK16Mcjv0Q0tMM1EnGcY7x7LKGG+Q=)
7: M7Yoo7vS0g74dllE5jwaeJ8GkI8.roa (hash: 0dPkxQQKUEzWy8So4dP//PRsJgFZGxnW9RSLGUN8yLE=)
8: XpgCFDOq2Q9LyDlqBE5KH2xQpHw.roa (hash: HgLWNCoewgztXDMInYU1fjL5uUjEdzctKTT+Bg59jgo=)
9: bILqsSSMjV6zsB2V4XNyhR98QMI.roa (hash: 0ol/AMXvdewcuTmyh5mPtnYJSlqD+56hLkiVj3HPlhI=)
10: cXiSf5yZyj3VPYYCKSaNq56a2rg.roa (hash: Rt6GnFaeomDApDENIxrkjqoB1bSFUS0qhjpljRCPndU=)
11: cem23VMayzPVk_oygGN95UFNjHU.roa (hash: RvRmb3ElbI6rsB4sSekzArDgJBSB1WqpLErPkGqAqDI=)
12: ctezbMQLxP8Ykqi0UusJ9kXRp0k.roa (hash: qmGjFwU1FD4xG4EaFpCqvHDShMmhH7y5AEXm712oYWo=)
13: f_86r3mhQo4FIwhvOxaFBP8lRCM.roa (hash: dIhiVvOoXJKFM98+UYutMzUt/A8Mf0xha9hSgGrHSnQ=)
14: iuW7OASYxTbyLYOF3CjyalJ_5oM.roa (hash: k9Or3BQMtCIUl4N8wxLUc62+5EDuHRziekJOqB1/coI=)
15: zXwbjbUVcIuVuYfJVeJLi_WhVSc.roa (hash: 70rweTSg6yEMOACB21IW3jvSfvtQwhiUyA/SCVlY8cE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5629 (0x15fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Aug 23 14:03:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8:
55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74:
de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01:
7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd:
53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8:
72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a:
64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75:
22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f:
41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec:
ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72:
e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df:
98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7:
d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9:
2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff:
0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea:
71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56:
56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c4:73:24:30:bb:2f:e5:ba:84:91:d5:97:78:ef:13:1f:19:
8b:dd:ea:34:f9:46:ba:b1:18:04:2c:17:a4:17:94:ce:2a:41:
5c:07:4d:10:29:2b:57:92:3f:10:46:4c:0c:df:ab:ef:e0:41:
31:34:51:f3:e6:8e:72:b0:8d:80:c9:be:95:ad:32:1e:b9:34:
6a:da:88:b4:52:89:f0:a9:f4:53:c2:ea:b2:c1:d6:29:b1:d8:
47:a0:7d:9e:f9:b7:73:b8:1f:3d:16:5d:d0:36:fb:c1:9d:ec:
00:e8:d3:4d:1e:73:9c:65:f9:80:a6:a3:ff:b6:66:82:f6:43:
24:9b:f9:02:e8:a9:d1:1c:11:b8:21:04:85:2d:61:c6:1b:af:
db:47:89:d6:6a:63:ae:a8:d7:e4:bc:ce:d1:cd:85:c6:08:d7:
2e:cc:06:60:23:6d:6b:c7:aa:d8:71:5a:ec:7b:8c:43:ea:eb:
50:ca:0f:4a:66:7a:1e:2f:c7:7c:d7:9a:b0:b6:b0:07:e1:aa:
68:31:ea:d9:ff:42:49:5f:18:60:66:55:7d:e5:d2:71:98:89:
57:4b:26:dc:6d:d7:e9:92:47:47:03:01:7e:1c:73:82:aa:9c:
b2:8b:a9:1f:ec:62:34:a9:33:7a:71:d6:b9:eb:b7:b9:92:b2:
26:72:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:28 2025 by rpki-client