Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
File: eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft (raw, json)
Hash identifier: E0BsGD/l9LRkVxUt+8XlxeQrpe0QTArz0qxoYqYzZ0U=
Subject key identifier: 1E:D4:B4:B6:AA:23:46:57:F8:53:E4:CD:54:D3:9D:EF:71:C1:7F:49
Authority key identifier: 79:3F:2B:5F:A4:BB:FD:A7:FA:B7:82:29:37:79:02:2A:DC:19:F5:6D
Certificate issuer: /CN=793F2B5FA4BBFDA7FAB782293779022ADC19F56D
Certificate serial: 0924
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eT8rX6S7_af6t4IpN3kCKtwZ9W0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
Manifest number: 0924
Signing time: Sat 23 Aug 2025 17:02:05 +0000
Manifest this update: Sat 23 Aug 2025 17:02:05 +0000
Manifest next update: Sat 23 Aug 2025 23:02:05 +0000
Files and hashes: 1: eT8rX6S7_af6t4IpN3kCKtwZ9W0.crl (hash: mDoJF2OJJNGON0dDbSPQzK5/8/PWHVS5qTdqc/pVDCA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793F2B5FA4BBFDA7FAB782293779022ADC19F56D
Validity
Not Before: Aug 23 17:02:05 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=1ED4B4B6AA234657F853E4CD54D39DEF71C17F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:00:f2:9e:db:bf:0f:2b:94:6c:26:22:0c:
a8:41:9b:6c:c4:21:41:fa:37:86:21:c8:cf:86:60:
64:12:5e:8e:3b:01:00:4c:44:e6:93:ae:a0:fa:7f:
3a:19:d0:eb:da:a7:47:d8:fc:57:53:29:64:e8:db:
2a:70:d4:d6:99:bb:26:86:15:ab:00:a9:95:6c:03:
e6:4c:66:c9:79:11:1d:da:a1:a6:72:60:ed:bc:79:
22:8c:da:b0:69:8d:e9:9b:7a:52:c2:90:76:b2:75:
7c:50:8c:fc:88:29:08:23:38:48:6d:ba:98:93:4f:
0e:9e:9b:3a:42:82:80:71:58:e3:d0:90:01:fe:4c:
2c:50:19:9e:55:ac:db:e4:76:f1:14:13:94:1f:ab:
4a:99:d7:7a:6d:06:c3:6a:c4:97:af:3e:cd:3c:27:
9f:5c:2e:ce:c3:52:4d:da:b8:13:d1:45:8d:a3:27:
18:88:c7:a6:b6:68:ce:80:0f:39:56:9f:19:8b:e2:
b7:2a:ca:87:f0:83:72:83:4d:d0:ba:75:59:47:6e:
cd:f5:21:8b:24:f3:96:c0:5c:6f:dd:51:cc:2f:b9:
90:11:c3:d8:a4:ef:5b:53:ec:a4:01:92:c4:7a:15:
1c:5f:f9:e7:fd:e6:e9:78:fb:fd:5f:42:cb:5a:36:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:B4:B6:AA:23:46:57:F8:53:E4:CD:54:D3:9D:EF:71:C1:7F:49
X509v3 Authority Key Identifier:
keyid:79:3F:2B:5F:A4:BB:FD:A7:FA:B7:82:29:37:79:02:2A:DC:19:F5:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eT8rX6S7_af6t4IpN3kCKtwZ9W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:6b:d7:32:d6:b0:14:d8:c4:a2:31:13:a8:e6:0c:91:68:1a:
7a:06:d2:7e:4e:f3:5d:8e:f4:36:60:c2:e6:cc:9d:d1:ff:42:
da:9f:e9:d7:56:2d:42:03:d3:c3:00:63:f9:cc:ac:a9:77:37:
dc:14:d2:e6:e9:b3:52:7a:f9:ce:97:cc:bd:06:38:0c:f1:bf:
c6:1f:8c:12:9d:41:15:76:c8:09:a4:b5:3a:5a:e2:b9:27:a3:
24:73:59:e2:dd:5f:29:50:c4:a5:cb:54:40:34:34:46:10:b9:
89:3d:4b:38:6a:23:6d:33:55:75:4d:8b:30:f5:ed:63:f8:bb:
9d:94:20:58:5a:16:45:54:7f:46:da:d5:44:8d:3b:f0:eb:16:
30:4b:e8:2c:e3:9a:97:43:c6:02:cb:14:3d:94:b6:68:f9:84:
89:ea:6d:1f:92:18:8e:c7:94:7d:3e:fc:71:b5:72:a4:ea:b9:
92:44:e5:27:89:0e:65:25:fc:df:57:19:5b:f0:f8:81:a6:4e:
b3:8c:31:5e:48:f8:ad:10:f4:87:0f:ca:96:79:7c:1b:d4:7d:
72:ab:55:8f:36:93:d2:f5:2d:e1:ef:21:62:77:41:65:a1:63:
d8:62:62:72:c1:b0:29:ec:c7:3f:c6:9b:24:0a:e0:c5:99:50:
e0:64:dc:2b
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzkz
RjJCNUZBNEJCRkRBN0ZBQjc4MjI5Mzc3OTAyMkFEQzE5RjU2RDAeFw0yNTA4MjMx
NzAyMDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFFRDRCNEI2QUEyMzQ2
NTdGODUzRTRDRDU0RDM5REVGNzFDMTdGNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeSQDyntu/DyuUbCYiDKhBm2zEIUH6N4YhyM+GYGQSXo47AQBM
ROaTrqD6fzoZ0Ovap0fY/FdTKWTo2ypw1NaZuyaGFasAqZVsA+ZMZsl5ER3aoaZy
YO28eSKM2rBpjembelLCkHaydXxQjPyIKQgjOEhtupiTTw6emzpCgoBxWOPQkAH+
TCxQGZ5VrNvkdvEUE5Qfq0qZ13ptBsNqxJevPs08J59cLs7DUk3auBPRRY2jJxiI
x6a2aM6ADzlWnxmL4rcqyofwg3KDTdC6dVlHbs31IYsk85bAXG/dUcwvuZARw9ik
71tT7KQBksR6FRxf+ef95ul4+/1fQstaNvxhAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUHtS0tqojRlf4U+TNVNOd73HBf0kwHwYDVR0jBBgwFoAUeT8rX6S7/af6t4Ip
N3kCKtwZ9W0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
MS9lVDhyWDZTN19hZjZ0NElwTjNrQ0t0d1o5VzAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2VUOHJYNlM3X2FmNnQ0SXBOM2tDS3R3WjlXMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvZVQ4clg2UzdfYWY2
dDRJcE4za0NLdHdaOVcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJlr1zLWsBTYxKIxE6jmDJFoGnoG0n5O812O9DZgwubMndH/Qtqf6ddWLUID
08MAY/nMrKl3N9wU0ubps1J6+c6XzL0GOAzxv8YfjBKdQRV2yAmktTpa4rknoyRz
WeLdXylQxKXLVEA0NEYQuYk9SzhqI20zVXVNizD17WP4u52UIFhaFkVUf0ba1USN
O/DrFjBL6CzjmpdDxgLLFD2Utmj5hInqbR+SGI7HlH0+/HG1cqTquZJE5SeJDmUl
/N9XGVvw+IGmTrOMMV5I+K0Q9IcPypZ5fBvUfXKrVY82k9L1LeHvIWJ3QWWhY9hi
YnLBsCnsxz/GmyQK4MWZUOBk3Cs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:24 2025 by rpki-client