Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft
File: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft (raw, json)
Hash identifier: kbnK5HZpe19koeux+wlXE/l7G4dYmozLKbAmatrl7WI=
Subject key identifier: 5A:DE:3D:59:F7:52:4C:6D:05:AA:65:5D:EE:F5:34:55:33:79:E1:F5
Authority key identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61
Certificate issuer: /CN=0812172AA74AF852C0F5A7787B64825FE5619361
Certificate serial: 0920
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft
Manifest number: 0920
Signing time: Sat 23 Aug 2025 21:03:30 +0000
Manifest this update: Sat 23 Aug 2025 21:03:30 +0000
Manifest next update: Sun 24 Aug 2025 03:03:30 +0000
Files and hashes: 1: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl (hash: +pmu2W9ahVta3/P6dHKFn6ALcyK/TR12gwCQ4bcAC+0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0812172AA74AF852C0F5A7787B64825FE5619361
Validity
Not Before: Aug 23 21:03:30 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=5ADE3D59F7524C6D05AA655DEEF534553379E1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:ab:96:69:4b:1f:65:ef:59:6e:9a:88:e8:
28:32:7f:38:b0:7f:e2:c3:40:49:a2:6f:38:67:c6:
de:4f:b1:5a:a9:07:af:a9:cd:29:01:a4:7f:19:92:
ec:d5:fa:3d:df:da:08:c7:6f:3a:d2:d4:64:af:ac:
a4:78:c1:a8:02:e3:2d:e2:6f:fc:69:a1:18:f3:b8:
25:89:2a:fc:e4:4c:18:d8:07:6b:65:be:61:16:24:
e5:f8:78:a7:50:76:bf:bd:7e:ef:f3:98:16:ad:92:
c2:ea:7e:9c:f5:6e:2b:52:ea:13:4b:c9:92:33:72:
eb:04:3a:ce:c7:23:43:ac:e2:44:2d:1e:cd:0e:c6:
38:c6:22:e0:70:03:50:7b:c4:14:b3:2a:36:69:ce:
58:c9:a1:b1:b8:03:62:e9:f9:2d:e3:d4:a4:a1:8e:
5e:70:9c:16:2e:b7:98:af:84:ce:22:c7:32:a5:4f:
c9:11:67:8e:3d:ed:aa:1b:0a:6c:c3:e5:8d:f3:a9:
2d:be:16:18:fd:3d:60:1a:ef:0b:b6:e9:6d:40:22:
2a:89:ab:13:84:45:4a:63:eb:5b:04:ca:0c:ba:84:
b5:49:55:80:30:32:8d:19:22:c8:45:33:ec:e6:70:
7f:7a:f5:06:e6:f9:ae:a6:46:aa:35:cd:c7:d1:23:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:3D:59:F7:52:4C:6D:05:AA:65:5D:EE:F5:34:55:33:79:E1:F5
X509v3 Authority Key Identifier:
keyid:08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:3b:d7:ff:6e:36:82:f0:6a:e6:90:da:68:0b:84:e1:06:48:
c3:6e:88:65:78:df:18:20:9d:fb:35:c9:3c:88:b4:13:66:67:
7f:6d:1c:d5:9a:01:b6:85:7d:98:60:7a:c0:ec:cd:80:51:9f:
c9:14:75:33:2e:54:72:2f:ea:87:df:de:09:1e:40:4d:31:e3:
fa:bd:65:b4:db:9a:cd:49:df:61:bb:76:d8:86:25:d0:89:65:
09:7c:86:04:5f:c1:ab:98:97:d2:f6:08:98:af:02:26:81:cc:
83:cd:a2:11:d7:fa:94:40:0f:c6:5e:c8:f0:27:3d:84:24:ae:
34:c6:ee:fc:d3:5e:c4:fd:64:26:eb:f4:85:56:e2:f6:c0:76:
e2:c6:4b:2f:64:f2:68:07:35:93:6b:2d:05:51:dc:09:02:d1:
a0:c0:fc:7d:9a:ea:69:b2:df:f6:d1:87:ac:14:8f:05:e7:ae:
f6:ff:cd:76:12:a6:80:3c:29:9d:02:a5:0d:b6:1f:90:6c:2c:
7f:ee:12:5c:06:26:26:8e:c5:3f:c4:00:8e:5a:b2:f0:4a:69:
3e:16:db:92:fd:14:76:1a:91:97:ee:e8:9c:bc:07:e9:2c:aa:
00:fe:9a:38:ef:ae:0d:8f:13:6c:de:55:dc:25:50:56:a2:41:
04:26:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:24:06 2025 by rpki-client