Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft
File: xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft (raw, json)
Hash identifier: 0qVHiF2kAUFoMNGADNR9n3++4/bqZNX8c/4cQcRvuWU=
Subject key identifier: 34:AA:52:06:2B:D6:B5:F7:71:34:B2:BF:04:69:A6:4A:CA:BB:74:6A
Authority key identifier: C6:E5:F9:C1:64:4D:63:FA:20:6A:66:FF:67:17:C1:D1:1A:2A:30:2D
Certificate issuer: /CN=C6E5F9C1644D63FA206A66FF6717C1D11A2A302D
Certificate serial: 0B77
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xuX5wWRNY_ogamb_ZxfB0RoqMC0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft
Manifest number: 0B76
Signing time: Sat 23 Aug 2025 21:03:26 +0000
Manifest this update: Sat 23 Aug 2025 21:03:26 +0000
Manifest next update: Sun 24 Aug 2025 03:03:26 +0000
Files and hashes: 1: UbBWEWLjtIuxoQZhDwQjxJGfOj0.roa (hash: 1kYvUM2Xl87aE6PKMHwLOSeiRpB9pAikX4ZR9sd/sqU=)
2: xuX5wWRNY_ogamb_ZxfB0RoqMC0.crl (hash: ES3upE2qSTInDJrd2osg/wz9/dxhPCimq1dUr4VKo8M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5F9C1644D63FA206A66FF6717C1D11A2A302D
Validity
Not Before: Aug 23 21:03:26 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=34AA52062BD6B5F77134B2BF0469A64ACABB746A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:b2:ea:05:24:28:62:89:7b:59:5e:7b:55:
02:54:b7:5a:90:5a:5f:6c:b1:a7:80:79:4f:90:d8:
e8:8b:1d:19:98:3c:58:c5:79:d5:8e:2b:30:b7:fc:
46:42:8e:4a:cf:a2:7a:38:f1:6c:2f:8e:0f:87:49:
4e:d7:06:b4:37:6c:99:2b:b9:46:f3:b3:9e:dc:b8:
5c:c9:1c:cd:f8:5d:9b:dd:ad:7a:2d:20:24:f2:18:
e3:19:4e:94:ce:bd:dd:dd:4b:09:be:80:82:bf:42:
b5:ae:ca:67:8c:33:1a:59:8e:2f:cc:af:21:cc:14:
46:31:a3:b9:0f:5c:27:ae:c0:a3:61:65:a6:c1:2e:
99:a0:58:f8:31:e0:64:30:3a:63:1a:16:40:01:4c:
c4:2a:f2:4b:d0:04:fd:ef:f5:38:a5:37:69:44:49:
36:88:fc:87:22:64:65:5e:b0:cb:6a:e0:33:d0:81:
88:da:a8:a6:dc:e5:54:dd:73:02:71:53:ed:0d:f7:
53:64:db:c0:b3:0e:46:60:a2:a7:df:99:3c:68:43:
32:b2:df:6f:a5:24:5f:85:a6:61:82:dc:73:0f:33:
66:30:2e:e4:e9:bd:72:56:98:13:fb:e1:58:ff:b3:
38:76:14:b7:63:a1:64:4f:8a:5a:c1:55:01:fa:ca:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:52:06:2B:D6:B5:F7:71:34:B2:BF:04:69:A6:4A:CA:BB:74:6A
X509v3 Authority Key Identifier:
keyid:C6:E5:F9:C1:64:4D:63:FA:20:6A:66:FF:67:17:C1:D1:1A:2A:30:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xuX5wWRNY_ogamb_ZxfB0RoqMC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/xuX5wWRNY_ogamb_ZxfB0RoqMC0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:74:bb:a9:a7:52:ce:df:4d:55:4b:51:12:b4:6b:43:92:3e:
12:48:3b:7b:9a:5f:3f:cf:20:f5:e0:f4:18:d6:e0:1e:76:9e:
09:e6:67:7c:4c:7d:38:af:c3:76:4b:33:06:4c:37:be:15:3e:
3a:f6:75:24:06:74:7e:5a:79:c8:6a:48:04:9b:a8:c3:db:7e:
94:cc:20:98:a9:2c:8b:b1:d5:5e:57:bd:26:4b:c5:ec:5a:73:
91:f7:bc:7b:82:1f:12:02:fa:f2:51:60:6d:40:98:d0:5d:db:
fa:9b:34:ec:3c:98:12:5a:41:e4:24:e8:d1:7c:c7:0d:86:f0:
cb:2d:e6:7c:08:13:72:96:0f:45:35:3d:d4:d6:70:39:ab:2a:
8f:1b:ac:f8:b3:fb:1f:55:b8:d3:63:b6:26:12:67:9f:2c:7b:
68:51:43:45:ba:e7:a5:1f:01:b4:12:7b:d4:2a:cb:c2:f1:52:
88:e3:f5:8e:5c:81:60:3d:71:05:98:a1:9b:13:15:6a:79:9d:
09:9d:08:75:ff:2c:ea:56:30:2c:4e:34:f0:f6:38:bd:4a:76:
cc:0b:07:ee:00:9b:a7:29:fd:52:aa:7e:b7:be:86:a3:04:a3:
f8:d0:49:3a:29:fc:c1:dc:eb:67:07:5e:ca:87:02:a6:0c:6c:
31:df:2d:8a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzZF
NUY5QzE2NDRENjNGQTIwNkE2NkZGNjcxN0MxRDExQTJBMzAyRDAeFw0yNTA4MjMy
MTAzMjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM0QUE1MjA2MkJENkI1
Rjc3MTM0QjJCRjA0NjlBNjRBQ0FCQjc0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZCLLqBSQoYol7WV57VQJUt1qQWl9ssaeAeU+Q2OiLHRmYPFjF
edWOKzC3/EZCjkrPono48Wwvjg+HSU7XBrQ3bJkruUbzs57cuFzJHM34XZvdrXot
ICTyGOMZTpTOvd3dSwm+gIK/QrWuymeMMxpZji/MryHMFEYxo7kPXCeuwKNhZabB
LpmgWPgx4GQwOmMaFkABTMQq8kvQBP3v9TilN2lESTaI/IciZGVesMtq4DPQgYja
qKbc5VTdcwJxU+0N91Nk28CzDkZgoqffmTxoQzKy32+lJF+FpmGC3HMPM2YwLuTp
vXJWmBP74Vj/szh2FLdjoWRPilrBVQH6yvtXAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUNKpSBivWtfdxNLK/BGmmSsq7dGowHwYDVR0jBBgwFoAUxuX5wWRNY/ogamb/
ZxfB0RoqMC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
NS94dVg1d1dSTllfb2dhbWJfWnhmQjBSb3FNQzAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3h1WDV3V1JOWV9vZ2FtYl9aeGZCMFJvcU1DMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUveHVYNXdXUk5ZX29n
YW1iX1p4ZkIwUm9xTUMwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALN0u6mnUs7fTVVLURK0a0OSPhJIO3uaXz/PIPXg9BjW4B52ngnmZ3xMfTiv
w3ZLMwZMN74VPjr2dSQGdH5aechqSASbqMPbfpTMIJipLIux1V5XvSZLxexac5H3
vHuCHxIC+vJRYG1AmNBd2/qbNOw8mBJaQeQk6NF8xw2G8Mst5nwIE3KWD0U1PdTW
cDmrKo8brPiz+x9VuNNjtiYSZ58se2hRQ0W656UfAbQSe9Qqy8LxUojj9Y5cgWA9
cQWYoZsTFWp5nQmdCHX/LOpWMCxONPD2OL1KdswLB+4Am6cp/VKqfre+hqMEo/jQ
STop/MHc62cHXsqHAqYMbDHfLYo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:23:12 2025 by rpki-client