Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json)
Hash identifier: 6sZfqKPWfqOvvbqCkCYEt4VT6HFwgZq+iElgbgnQbDs=
Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7
Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7
Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7
Certificate serial: 0B78
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
Manifest number: 0B78
Signing time: Sat 23 Aug 2025 21:03:09 +0000
Manifest this update: Sat 23 Aug 2025 21:03:09 +0000
Manifest next update: Sun 24 Aug 2025 03:03:09 +0000
Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: 8wmvfGVchfezaMUHlaE0usA6CaDG70jEKwWOTLbaFZ4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7
Validity
Not Before: Aug 23 21:03:09 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14:
e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e:
04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9:
5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0:
c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed:
66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9:
23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b:
63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d:
28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1:
58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b:
3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55:
bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb:
3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e:
63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7:
92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05:
75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c:
37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7
X509v3 Authority Key Identifier:
keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:4c:87:22:6a:01:c8:69:99:c0:b2:74:34:a0:f4:84:74:f8:
9f:6e:fe:e6:fa:e4:d9:82:21:ed:e7:ca:db:8d:84:13:2f:6c:
73:bd:4c:33:6a:64:81:99:68:e2:dd:02:aa:a0:30:b4:63:ad:
8a:c4:03:39:68:e8:93:67:44:59:ac:07:33:43:dc:f8:d4:53:
e6:bb:cb:9f:73:43:5d:89:a3:ef:d6:63:6e:94:a9:20:98:4c:
35:54:e9:78:c0:e5:85:24:6e:fe:23:67:8e:c3:79:5c:98:ad:
ae:40:03:fc:99:76:3e:78:c0:15:6f:87:ad:84:5d:d5:4c:8d:
3a:d9:fa:84:f7:e1:29:66:81:aa:8f:52:6a:8c:66:fb:84:e6:
82:0a:5b:81:49:08:8e:14:5a:c7:03:11:07:73:b6:eb:de:96:
fb:05:54:93:b8:c9:ea:27:df:c3:a3:94:cb:75:ae:c6:3d:d0:
76:11:7f:ab:13:06:26:24:5b:3f:b7:77:0c:1c:14:35:00:ec:
ce:1a:09:dc:cf:54:82:14:89:5f:95:8a:7c:ee:3e:8f:61:01:
f6:99:99:93:dc:f9:f5:39:be:5f:c7:cb:cf:b9:b0:29:8c:e8:
93:2a:f2:70:a7:c5:fe:f2:85:99:a0:d6:e1:21:f1:c1:24:3e:
8e:c7:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:38:41 2025 by rpki-client