Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json)
Hash identifier: UZhsGS0zpnRFAQnIgDlx0WpGOd9Ub47dtom8MSPkWtQ=
Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Certificate serial: 0927
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
Manifest number: 0927
Signing time: Sat 23 Aug 2025 17:02:05 +0000
Manifest this update: Sat 23 Aug 2025 17:02:05 +0000
Manifest next update: Sat 23 Aug 2025 23:02:05 +0000
Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: IfM5zLPxqAjpElsHHNeY7xir/SovzywV2KJK2rrrceU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Validity
Not Before: Aug 23 17:02:05 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=1A96673E80786404FE296B91E5825FA196604F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95:
b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56:
ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb:
3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a:
a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d:
80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74:
3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d:
dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80:
69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08:
09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5:
af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36:
71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b:
4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81:
3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94:
06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9:
23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37:
2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
X509v3 Authority Key Identifier:
keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:32:62:21:4a:7f:03:4d:83:d9:e9:b3:43:87:61:d9:3f:
ed:77:5a:9e:78:cb:83:d3:6c:e7:23:a9:92:45:03:82:6b:61:
f2:7f:e4:39:ae:a3:ee:0e:9c:18:d2:f3:c8:b7:12:0f:99:0f:
d2:9c:92:d8:37:db:e4:87:7f:72:cd:b4:64:d1:60:1e:f9:8c:
3a:ba:56:25:56:08:59:b8:b5:33:7b:e0:cc:a6:d1:4b:21:02:
f7:c8:7d:1c:cf:86:df:be:07:bf:00:77:f3:14:00:a5:ad:fb:
e1:d2:29:51:59:b0:58:3b:45:b4:fe:0e:ba:85:b8:eb:7a:9e:
98:4a:55:2b:3d:8e:36:b8:57:d8:87:5c:12:70:de:fc:b6:9e:
38:b4:b9:cd:51:f9:d4:43:e2:f3:3c:40:3f:9c:0e:8c:45:1b:
16:04:da:06:4b:e4:d5:f8:c6:62:b1:ff:56:e1:27:39:a6:5f:
81:f3:78:89:d5:00:d4:be:8b:cf:73:58:6c:e6:ac:31:7b:ee:
a8:12:db:16:f0:b5:b3:96:0b:a3:af:48:21:f3:4f:58:9c:c4:
b5:9e:ee:e0:56:f1:40:13:e9:3d:10:06:5f:45:a5:5c:8f:57:
6f:0d:56:91:d4:67:0e:42:7f:a9:dc:54:89:e6:0b:33:bb:71:
89:88:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:49:59 2025 by rpki-client