Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft
File: TKnrtNTELADG1a1ccPtrRXZYMXc.mft (raw, json)
Hash identifier: lbB3yOJgYCUPfxZZ7GpC7fo8DHX54QtNW/g809usQ8Y=
Subject key identifier: AD:D2:3B:B7:E0:3D:1C:25:2C:A7:A0:ED:D2:87:53:CB:C1:7D:86:62
Authority key identifier: 4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77
Certificate issuer: /CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177
Certificate serial: 01DD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft
Manifest number: 01D9
Signing time: Sat 23 Aug 2025 14:03:10 +0000
Manifest this update: Sat 23 Aug 2025 14:03:10 +0000
Manifest next update: Sat 23 Aug 2025 20:03:10 +0000
Files and hashes: 1: TKnrtNTELADG1a1ccPtrRXZYMXc.crl (hash: d9ZmfHHHZhyKc6MCLGb6zj8qVGwdrkf6H/I4kI0hzUw=)
2: g_rwJqn620T5ukN94yTzIjH-qVo.roa (hash: 96Avw8eFjSbQ575II11/refxqKik+Cak4C6VORPkNEs=)
3: vRMEkXhgMgYExHesqADIPCrhlMY.roa (hash: Qi9qPsWUwvCaipSHqdP/turP9n7D7ImvplBkZhPm8Ms=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177
Validity
Not Before: Aug 23 14:03:10 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=ADD23BB7E03D1C252CA7A0EDD28753CBC17D8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:7c:2a:59:0b:f4:f7:2c:ae:6f:07:1c:0a:
ec:1a:4f:06:d5:0b:eb:2f:f0:a3:4d:9c:9e:a9:d4:
ba:04:ba:01:35:0d:73:ff:81:12:ad:6d:0e:a8:0e:
73:2e:15:25:a1:54:eb:18:25:de:b1:25:6c:de:be:
b0:b3:7c:7d:b4:46:d3:04:f9:6a:b0:6e:b7:3d:87:
a6:6c:e7:49:d4:59:5a:77:f5:4b:96:8a:3e:31:da:
1a:15:dc:be:14:a6:74:74:a6:a0:83:0d:f4:a3:1b:
db:2f:eb:55:c5:0f:84:b6:bf:de:96:a8:4d:c4:46:
ca:35:3b:18:89:b4:9f:74:3b:23:20:fa:9c:61:0f:
a4:58:5b:61:57:4d:88:ba:59:5e:b2:18:ad:96:eb:
10:15:b7:2b:a5:6a:3d:21:e2:70:19:ea:58:29:db:
00:fd:a1:4e:cc:27:5a:05:a9:91:38:ec:d7:f7:41:
a2:f9:df:c0:d7:b4:dc:50:1a:b5:fb:cd:9c:a3:e9:
c0:a3:89:17:dc:ff:1e:cd:f3:c6:a7:9d:0f:f5:c9:
66:fc:a9:99:b5:5a:88:26:7f:2e:b0:43:a1:0e:84:
80:a4:68:c2:b5:42:07:ca:14:b8:ee:49:b3:48:22:
36:59:b9:ae:40:25:6a:1f:44:34:91:af:30:68:64:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:3B:B7:E0:3D:1C:25:2C:A7:A0:ED:D2:87:53:CB:C1:7D:86:62
X509v3 Authority Key Identifier:
keyid:4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:ab:c4:6e:78:1f:fa:6f:5a:47:31:2d:a0:8f:25:d2:0f:
b3:54:c7:9d:d9:e5:54:13:c2:09:81:c3:af:d0:01:b3:6c:7c:
a6:2a:80:25:72:c3:6a:1d:27:f2:7c:47:41:89:0c:56:7a:b8:
30:e2:c2:8f:db:e5:5c:73:e1:af:d2:ed:6d:6a:4a:f5:29:c4:
41:0c:1c:ee:61:58:63:29:4a:8a:a2:0b:61:ae:78:5a:db:0f:
0e:c2:7e:34:e8:5e:68:9c:86:da:b2:81:e9:10:ee:df:98:78:
2b:37:0b:ba:1f:f6:7e:9e:90:fe:a8:66:ac:24:49:22:7c:d0:
aa:db:01:7b:06:c9:df:cd:f0:8e:7f:5d:1b:1d:87:a5:07:d6:
d2:20:25:b3:8d:70:56:3e:6e:11:a6:39:d6:de:1f:91:19:52:
fc:b7:0f:9f:d4:ad:73:6c:9a:fd:a7:f4:cb:94:f2:5d:02:32:
5b:94:90:ea:6b:08:b0:71:b4:d2:20:c9:c2:a4:fa:62:a0:67:
4f:73:ba:c7:d6:0e:8b:d5:83:26:a3:da:af:c2:93:ac:c8:b5:
2b:4a:7b:30:bf:9e:22:37:50:81:b2:56:96:1c:7d:ff:bb:1f:
66:1b:22:55:fb:71:76:2e:7e:f0:fc:1d:c7:e6:6c:98:84:b8:
9e:d5:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:45 2025 by rpki-client