Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json)
Hash identifier: dCJ5hedDvxN+z48JMT9Jtu3i4gfk+fll9cafIERsEdQ=
Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Certificate serial: 0C5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
Manifest number: 0C5A
Signing time: Mon 20 Oct 2025 17:08:30 +0000
Manifest this update: Mon 20 Oct 2025 17:08:30 +0000
Manifest next update: Mon 20 Oct 2025 23:08:30 +0000
Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: c9LdW8ySWNi6xzYo98cwsRYoshm+qpvbQvgtWtLWzxI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Validity
Not Before: Oct 20 17:08:30 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2:
c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23:
42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12:
ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67:
06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32:
16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1:
4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f:
c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a:
e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42:
ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6:
90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7:
d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61:
17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa:
e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f:
53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7:
45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b:
c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
X509v3 Authority Key Identifier:
keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:6a:23:29:3c:3f:ba:cb:60:ca:be:b6:cf:7c:72:b6:47:27:
37:fd:74:ae:58:cf:3d:d7:38:23:8a:61:9f:0a:99:04:88:90:
94:e0:23:ca:51:b3:96:07:e8:53:e3:b9:69:b1:5c:32:14:6f:
58:98:a2:b3:34:1c:b6:f6:f4:7c:64:a5:4e:eb:4e:68:d5:b3:
42:77:9c:c1:61:99:0d:b9:7c:32:4a:26:12:40:6b:9e:60:47:
cf:a2:de:7e:fe:53:ab:c8:09:11:e0:45:58:50:81:88:24:dc:
5b:29:e6:29:36:02:22:c7:7c:08:22:b7:a5:55:64:71:6f:c3:
75:3e:22:ba:e6:04:8d:46:57:7c:89:ad:86:43:22:da:16:a6:
91:8e:2a:c3:42:84:8d:c3:74:f9:13:34:4f:e5:7f:6e:7c:bb:
4c:f6:b4:4e:ae:9f:6b:c0:09:24:fd:4f:b7:ae:0b:fb:70:26:
9f:c3:86:0f:63:b5:57:33:89:d0:0b:a6:92:42:e1:96:80:06:
31:5c:06:73:73:16:12:8f:f6:ef:5f:85:15:e5:df:9a:4d:1a:
91:be:8e:d0:02:fe:7a:cc:ba:d3:71:74:39:5e:0f:ca:6b:b8:
a1:50:b2:81:f4:55:cb:df:57:55:8d:94:6e:48:07:c8:78:d3:
ce:bb:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:37 2025 by rpki-client