Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
File: -apYG28sznwRZ_8uDAIJY5n_aHQ.mft (raw, json)
Hash identifier: oLPjvWNGMn2Ce8nOzsg6LSoYOvAjo0l++b6CkHA8dCo=
Subject key identifier: F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
Authority key identifier: F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
Certificate issuer: /CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Certificate serial: 0891
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
Manifest number: 0891
Signing time: Sat 23 Aug 2025 21:02:35 +0000
Manifest this update: Sat 23 Aug 2025 21:02:35 +0000
Manifest next update: Sun 24 Aug 2025 03:02:35 +0000
Files and hashes: 1: -apYG28sznwRZ_8uDAIJY5n_aHQ.crl (hash: X+wB9+ErBh45GpmBaOoukbe0wIqSGjwWlMUl5nHzung=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Validity
Not Before: Aug 23 21:02:35 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=F6BE244A9EA105ACF95769A4EE1FE02A7635E532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ac:c3:8a:ec:46:74:e6:0f:fd:0b:2c:51:
0e:25:65:06:03:2f:b6:88:d0:2d:b7:b4:5c:11:2a:
c1:9c:81:61:5f:b8:c5:76:cf:d0:66:9d:49:1b:75:
39:e5:76:e3:07:4c:bb:98:71:9b:c1:b1:19:7d:b2:
47:f7:aa:25:c9:95:fc:15:8c:75:f3:d9:7f:02:26:
54:04:8b:25:4c:01:0d:9c:cf:34:6e:c8:9a:a5:3f:
a7:b9:27:63:76:cd:0c:f7:2d:e0:4d:43:fa:30:55:
c3:ca:59:eb:d9:1d:be:74:84:b4:c9:c5:55:62:40:
c4:ef:aa:3b:3a:c2:42:a2:59:e8:81:e8:ed:df:87:
4c:ae:a7:a9:23:d6:4d:8b:7a:e8:ff:91:15:c4:73:
84:02:79:2d:28:57:ec:8a:9e:ee:52:08:23:0b:9f:
26:2c:73:44:db:61:e4:db:5a:5d:80:b9:53:ca:c4:
29:a5:cf:c1:3a:73:c1:89:ea:49:38:d2:3f:f8:3f:
1e:99:df:a4:09:fd:5c:e4:0c:83:e9:48:2d:c4:72:
1d:65:92:82:40:12:e9:4e:d8:f0:db:85:a5:85:0e:
e6:7c:cb:26:76:69:44:4f:16:44:5e:8e:49:3e:7e:
74:eb:16:87:d6:8b:b9:d7:2b:6f:51:85:0b:66:d3:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
X509v3 Authority Key Identifier:
keyid:F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e4:69:cf:15:24:b9:42:0b:92:08:4e:95:0e:91:bc:94:fb:
f3:2b:e1:24:c4:13:6d:2c:68:f4:15:e3:fd:e2:22:92:a5:8d:
bb:e3:68:7b:76:91:fb:1c:91:00:a2:a7:5d:81:26:1f:4a:0b:
07:9f:3e:f9:60:cd:16:07:01:3c:7b:5d:6d:ba:f7:11:9a:b8:
38:55:6f:58:b2:cd:57:85:4d:ff:71:21:af:b9:c8:33:2d:bb:
e0:b7:06:e4:45:7d:4f:3e:f2:01:88:17:90:5f:35:ea:14:5a:
6b:67:7f:1d:b1:65:38:0f:65:64:6d:46:76:db:d1:2b:88:72:
2f:4a:ec:8f:95:4f:81:ba:4e:5b:3e:ac:77:13:8b:ac:d3:9e:
7d:b1:25:cd:8f:9d:4e:73:99:f2:e5:db:ae:ab:88:b0:7b:a1:
b7:f9:78:eb:72:24:07:27:d2:9c:d3:92:e7:71:04:7e:64:3f:
4e:75:ad:86:ac:e5:89:08:4c:8e:ae:d2:ba:a8:25:7d:a1:1e:
f8:b5:94:c2:04:c5:9f:ff:d3:dc:31:41:77:e7:09:85:e0:43:
98:34:77:f5:70:5d:59:fc:64:59:7b:9c:2c:48:41:b6:f4:4c:
94:d3:1e:c3:47:a0:37:3b:34:be:61:79:90:45:3e:d3:72:9a:
98:35:6d:46
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlB
QTU4MUI2RjJDQ0U3QzExNjdGRjJFMEMwMjA5NjM5OUZGNjg3NDAeFw0yNTA4MjMy
MTAyMzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY2QkUyNDRBOUVBMTA1
QUNGOTU3NjlBNEVFMUZFMDJBNzYzNUU1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzQazDiuxGdOYP/QssUQ4lZQYDL7aI0C23tFwRKsGcgWFfuMV2
z9BmnUkbdTnlduMHTLuYcZvBsRl9skf3qiXJlfwVjHXz2X8CJlQEiyVMAQ2czzRu
yJqlP6e5J2N2zQz3LeBNQ/owVcPKWevZHb50hLTJxVViQMTvqjs6wkKiWeiB6O3f
h0yup6kj1k2Leuj/kRXEc4QCeS0oV+yKnu5SCCMLnyYsc0TbYeTbWl2AuVPKxCml
z8E6c8GJ6kk40j/4Px6Z36QJ/VzkDIPpSC3Ech1lkoJAEulO2PDbhaWFDuZ8yyZ2
aURPFkRejkk+fnTrFofWi7nXK29RhQtm05WBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU9r4kSp6hBaz5V2mk7h/gKnY15TIwHwYDVR0jBBgwFoAU+apYG28sznwRZ/8u
DAIJY5n/aHQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
MC8tYXBZRzI4c3pud1JaXzh1REFJSlk1bl9hSFEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLy1hcFlHMjhzem53UlpfOHVEQUlKWTVuX2FIUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTAvLWFwWUcyOHN6bndS
Wl84dURBSUpZNW5fYUhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAL3kac8VJLlCC5IITpUOkbyU+/Mr4STEE20saPQV4/3iIpKljbvjaHt2kfsc
kQCip12BJh9KCwefPvlgzRYHATx7XW269xGauDhVb1iyzVeFTf9xIa+5yDMtu+C3
BuRFfU8+8gGIF5BfNeoUWmtnfx2xZTgPZWRtRnbb0SuIci9K7I+VT4G6Tls+rHcT
i6zTnn2xJc2PnU5zmfLl266riLB7obf5eOtyJAcn0pzTkudxBH5kP051rYas5YkI
TI6u0rqoJX2hHvi1lMIExZ//09wxQXfnCYXgQ5g0d/VwXVn8ZFl7nCxIQbb0TJTT
HsNHoDc7NL5heZBFPtNympg1bUY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:03 2025 by rpki-client