Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json)
Hash identifier: eD+b348DbjuodAm3UH34EsDVrPudUP2ZCfHbLtHxQWA=
Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199
Certificate serial: 0FF8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
Manifest number: 0FF8
Signing time: Sat 23 Aug 2025 16:02:56 +0000
Manifest this update: Sat 23 Aug 2025 16:02:56 +0000
Manifest next update: Sat 23 Aug 2025 22:02:56 +0000
Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: uNnNsgm4fxlpdpVCf/7AXsSlPQ2ddOIHmzGYCYw6BLU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4088 (0xff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199
Validity
Not Before: Aug 23 16:02:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b:
8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40:
7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04:
80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c:
09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54:
d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26:
bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4:
f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd:
99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b:
77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66:
82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc:
75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6:
fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45:
14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79:
b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d:
19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c:
6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
X509v3 Authority Key Identifier:
keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a4:42:f0:06:07:e0:06:b9:53:34:d4:d6:03:a0:30:f3:27:
68:d3:8d:39:f0:d0:71:84:bb:ba:78:0b:4a:ea:69:fc:0b:29:
2b:77:32:2f:d8:ef:f9:ba:3d:d7:f1:c8:93:6b:43:4c:c5:58:
c4:8a:ad:0a:35:80:4d:0a:a9:63:48:93:df:b7:fd:42:38:b1:
e8:09:7d:3f:e0:af:20:a9:12:74:71:18:81:14:f7:9d:3a:27:
10:5e:66:54:37:aa:71:c0:78:13:85:de:58:c0:c3:6b:47:ca:
b4:e2:fe:54:eb:5d:16:1b:09:fd:11:ee:42:fd:80:e1:9c:40:
cf:55:88:3e:b4:91:8c:ac:27:45:16:2b:29:ac:71:ea:c4:15:
3c:b5:ed:0a:3e:3a:77:e7:5b:42:18:6a:ff:62:7c:48:5b:2b:
7f:ac:0c:87:1d:db:84:ba:fa:be:18:75:e0:9e:ac:2e:9b:83:
d3:b5:61:b7:36:be:a6:33:87:ed:4c:04:47:50:19:de:73:77:
83:16:0d:3e:c9:77:23:06:74:73:49:75:ce:69:c5:0c:18:ab:
29:42:24:e9:64:b1:09:cd:e9:c6:ee:0f:03:ae:01:a8:8d:9c:
1d:7e:3e:33:63:db:45:5f:9b:00:d6:2e:e9:85:a1:77:1e:e8:
d3:5b:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:22 2025 by rpki-client