Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft
File: 3-pN9aKB625y06MUKkU2QAzMSM0.mft (raw, json)
Hash identifier: Lkp9T96wWDinmeR/H7dj1Uu+xnqoFpdknBsNfnxNbPE=
Subject key identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E
Authority key identifier: DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD
Certificate issuer: /CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD
Certificate serial: 09C3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft
Manifest number: 09C3
Signing time: Sat 23 Aug 2025 16:02:15 +0000
Manifest this update: Sat 23 Aug 2025 16:02:15 +0000
Manifest next update: Sat 23 Aug 2025 22:02:15 +0000
Files and hashes: 1: 3-pN9aKB625y06MUKkU2QAzMSM0.crl (hash: IAffTpmXKLVJt09l60PBeeJo4gVflBvWBTt9EQHC66Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD
Validity
Not Before: Aug 23 16:02:15 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=32E7383A6FE497B476EE736359087E501952A06E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:18:54:3e:fb:1f:c3:7e:42:12:df:f3:83:
9d:b3:44:25:05:bd:a8:ab:bd:0c:cf:dc:94:de:fd:
7b:8c:e9:64:f0:1b:eb:4f:2b:f2:76:d5:d6:dd:d2:
7d:24:2e:86:41:06:a2:9e:e7:71:08:c6:d2:53:7d:
39:bd:71:79:7d:98:21:bd:48:8f:c6:f3:8c:79:cf:
00:ed:1b:b3:00:db:93:68:bb:b1:1b:e4:7e:db:0a:
f7:3c:74:37:29:0d:a0:7c:73:ba:36:4b:08:89:2b:
a1:73:b5:f5:08:7e:06:b1:f8:be:6c:59:d6:58:9f:
9b:e4:b8:c7:49:87:72:52:02:16:ed:e8:cc:11:ff:
bd:e2:b6:89:f8:71:cf:d1:56:90:89:58:9a:bc:8a:
a5:0d:49:26:97:a8:ef:ff:c8:8d:40:a6:23:5e:37:
b3:30:21:7c:9c:9e:64:21:44:66:fa:b4:88:d5:36:
d5:e8:d9:f2:9e:58:29:7d:61:fa:aa:ee:ca:3b:32:
71:6a:51:c6:d6:15:db:a3:16:3a:9d:7d:d1:10:0d:
d4:7a:dd:fc:cc:46:87:89:fb:40:9b:49:ce:93:18:
b4:1b:6e:ae:07:23:8a:27:80:09:44:af:5e:4c:ec:
b7:d6:2e:26:9a:0d:39:a7:59:46:75:74:40:c4:05:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E
X509v3 Authority Key Identifier:
keyid:DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fb:62:81:01:bf:dc:66:be:2a:e1:01:d3:8a:3a:0d:3a:d4:
48:62:ec:23:5b:bb:41:40:eb:7f:1e:74:28:e3:ab:cf:57:9f:
ce:db:6d:36:09:5c:c1:94:87:55:a5:ea:1b:ee:4a:4f:27:f7:
0c:b8:8f:49:f9:42:26:44:22:9b:36:b1:7a:3a:fc:5f:5e:0b:
f9:73:ab:b1:00:9e:4a:3d:ca:7c:d6:d3:8e:af:0e:9f:d7:36:
bf:70:f4:24:92:d1:b9:20:33:65:b0:a5:6e:00:0e:98:69:59:
17:d6:c2:2c:f4:80:7f:64:44:2c:c1:a3:72:f5:e9:9a:2a:13:
e6:b5:42:da:a5:54:cc:3c:50:1e:59:9a:6a:c4:d5:fd:07:b7:
db:29:64:35:96:51:ae:ec:52:b2:8d:db:6a:29:b0:67:cf:84:
9a:01:43:82:17:75:c0:12:fb:11:19:30:2b:27:0a:9d:48:3e:
e7:0b:a3:80:13:42:f7:d8:eb:96:e6:f2:02:5f:79:49:b8:7e:
3f:24:ab:af:f5:bb:30:fb:82:30:42:3e:6a:84:af:e7:d0:a6:
d0:6f:46:d1:90:ec:7d:88:6b:58:29:c1:d1:fb:8f:35:f2:0a:
71:e8:1e:26:5b:84:e4:18:9f:36:11:51:20:3b:39:bd:3e:bf:
c0:21:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:59 2025 by rpki-client