Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
File: 43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json)
Hash identifier: weKLLSjYph1HaAHy+GGUxWYl3I8KPMiANaYncNDKhIg=
Subject key identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
Certificate issuer: /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Certificate serial: 08F6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
Manifest number: 08F6
Signing time: Sat 23 Aug 2025 21:04:43 +0000
Manifest this update: Sat 23 Aug 2025 21:04:43 +0000
Manifest next update: Sun 24 Aug 2025 03:04:43 +0000
Files and hashes: 1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: 7SIAD6wv/mYIxlLWS0D/I30yF1/PV165FE2UIPoHUUw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Validity
Not Before: Aug 23 21:04:43 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=11520E6037D0A611A827119800481055018824E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e:
b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63:
76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d:
61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4:
4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20:
22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0:
60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c:
62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2:
84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f:
54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2:
bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60:
87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82:
03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2:
3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70:
8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53:
71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea:
e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
X509v3 Authority Key Identifier:
keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c9:41:00:57:f7:09:9c:39:07:41:68:bc:c5:03:69:4a:0a:
2f:8c:60:84:06:e1:9a:7e:f9:61:6e:b1:b4:00:b7:3d:3c:31:
c6:ca:cc:77:0a:24:e5:37:56:4e:89:38:0b:54:c8:88:8e:a0:
b7:1f:80:f2:77:bc:17:67:33:9b:66:c7:e0:3d:dc:2a:ba:39:
66:1a:c9:f2:e1:82:0b:40:4a:97:83:f0:03:54:ce:7a:fe:c4:
96:c7:45:d5:d9:0a:cc:b7:4e:87:60:df:6a:75:f9:55:c9:02:
9d:7d:12:59:ca:c2:72:5a:15:a8:fe:ca:67:a5:a7:5b:cd:55:
49:a3:ae:58:12:4c:97:39:06:c8:fd:cb:b5:96:26:94:92:e7:
97:3f:e2:fe:02:6c:ac:a8:38:f6:2e:f9:21:3b:5a:f3:ff:df:
48:e7:ed:84:e2:d5:15:07:08:89:6d:05:b8:d3:77:62:bf:70:
d0:ff:b0:51:18:52:6c:de:c9:3c:da:3d:12:43:d0:85:08:97:
d6:d5:11:e3:51:c1:46:c4:36:1e:cd:0a:3f:7f:1e:d3:ef:fb:
25:05:66:ae:a3:4e:83:7f:23:47:b0:81:52:96:3d:54:8b:39:
f4:9a:91:27:1c:b7:c4:c6:6b:17:bd:8e:4f:2e:62:db:3c:c2:
b6:1c:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:33:03 2025 by rpki-client