Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
File: jTTVmB17agASe58mh0ik4SM-E48.mft (raw, json)
Hash identifier: gZwVsFVMMe1RTuuptVnL2FLrCutCqofRjLMlkYXio2I=
Subject key identifier: 62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD
Authority key identifier: 8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F
Certificate issuer: /CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
Certificate serial: 0AD1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
Manifest number: 0ACB
Signing time: Fri 04 Jul 2025 10:16:47 +0000
Manifest this update: Fri 04 Jul 2025 10:16:47 +0000
Manifest next update: Fri 04 Jul 2025 16:16:47 +0000
Files and hashes: 1: fKIWXPNUZIrsSVUo_-UGUeZQMl4.roa (hash: 9ZgUBnLSZaVhgfC2g5LZyob47PQHUN33Uif7UZdDQN8=)
2: jTTVmB17agASe58mh0ik4SM-E48.crl (hash: DVi6ctNquIXWbunf2r8dEK/d27OtZgMQrR2ZuvrlVX8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
Validity
Not Before: Jul 4 10:16:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=62895AE11E72D504B6EF03F435F25661C11D48FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:1f:5b:a5:f5:c1:65:07:d0:b5:5e:98:c5:
a5:d2:7f:63:80:f8:06:4d:8f:6b:4c:2f:0b:db:f3:
dd:65:86:d3:9b:85:ba:02:93:37:f1:57:63:20:6a:
ef:a4:73:24:d0:b2:19:25:5e:0d:b7:ec:e2:96:a7:
59:58:cc:60:0d:77:46:d8:cc:f0:7e:37:3b:b4:67:
7e:bd:02:d6:a7:51:3c:7e:af:17:43:2c:42:b4:0c:
a8:26:a5:78:da:ba:a9:ab:cc:1b:1f:06:4b:12:74:
b4:b7:5e:c0:15:af:25:37:47:34:10:4e:3c:3b:e8:
04:f1:ce:db:d3:18:1b:c5:01:e3:40:d7:18:0e:04:
44:5c:11:6d:d5:bd:6d:99:f6:31:d8:15:da:5e:0f:
8c:f7:10:99:22:65:31:41:bb:00:f9:a0:ea:36:20:
56:80:f0:c7:23:b5:e9:77:bf:59:85:af:aa:82:2a:
34:ac:e9:63:0a:3d:b4:a3:2d:42:84:e4:df:c0:f3:
da:10:21:47:41:09:79:d8:f8:4e:c7:36:6a:a2:84:
ca:ce:d0:82:24:fe:e5:51:21:11:a8:9a:64:e4:aa:
9c:fc:83:c6:ed:c6:15:18:fe:5a:eb:bc:a1:e5:84:
ed:ca:d9:42:aa:76:49:c2:f9:20:c5:de:9c:b2:af:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD
X509v3 Authority Key Identifier:
keyid:8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:20:0c:c3:1e:7d:70:eb:ab:b6:8e:13:34:9f:95:d6:12:55:
67:c3:27:54:77:b5:ff:7b:c3:a7:09:c0:d7:4a:2d:ec:a0:23:
a2:2c:a0:b3:bc:3c:fa:96:59:21:35:10:c2:f3:b9:a1:52:1d:
99:99:89:de:4b:0d:ad:f8:27:d3:08:bf:64:a5:c7:80:1c:77:
83:6a:03:88:3f:93:d1:84:6b:e1:62:47:76:d9:0e:01:80:f8:
f4:a8:ae:7b:45:7b:ec:98:f7:1a:28:3f:46:3e:31:97:73:e6:
5d:aa:3d:32:6c:86:bf:28:9d:91:f4:8a:6e:aa:af:f4:c6:15:
8b:a9:13:68:be:05:88:91:c1:17:7e:cb:87:42:1c:d6:ec:26:
b4:63:5c:d9:6d:f2:da:da:29:3d:01:4c:6b:d0:70:16:57:f3:
9e:6d:bc:3b:98:f3:b2:33:d3:57:dd:35:18:ae:3a:13:b8:3a:
79:c1:24:f7:2b:00:cc:aa:3d:2d:95:7a:de:25:d0:f5:dd:e9:
9e:a8:bf:09:d9:e0:a6:1b:2b:3f:b0:28:80:11:8a:99:2e:71:
76:cc:58:d1:3b:01:cf:78:f0:0a:e2:1d:98:6a:d0:74:c2:8b:
16:f8:cc:61:f8:e3:bb:58:85:9a:cd:61:5c:cf:c9:e6:bb:3a:
11:e6:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:17:27 2025 by rpki-client