Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
File: HjLVp6TGq1Ov4e_srAET7e7SZYI.mft (raw, json)
Hash identifier: GjuC69zzyirYvJ4nU3BPwKR36rU7P2cegl4TBWUHL/g=
Subject key identifier: C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
Authority key identifier: 1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82
Certificate issuer: /CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
Certificate serial: 0687
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
Manifest number: 0687
Signing time: Sat 17 May 2025 22:40:38 +0000
Manifest this update: Sat 17 May 2025 22:40:38 +0000
Manifest next update: Sun 18 May 2025 04:40:38 +0000
Files and hashes: 1: HjLVp6TGq1Ov4e_srAET7e7SZYI.crl (hash: 2JfMatcaOQ8FbsXnTi/KX0pl14N6x1m0fttmNPLeBC8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
Validity
Not Before: May 17 22:40:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C353D4450C543C80DEDD52A146BC23765C53C480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:47:61:83:b2:d0:c6:93:4d:ae:70:cb:ad:
de:df:6e:ff:90:b4:4d:50:36:eb:1b:51:ca:37:c3:
5c:29:98:84:9d:df:ca:37:e1:3d:cd:e1:a9:f6:b9:
d9:0f:e4:6c:b3:fb:e7:e4:dd:28:11:16:d5:aa:08:
bc:d9:d5:3c:bf:bc:a4:66:a3:28:21:9a:f6:74:e3:
f6:15:bd:aa:35:5f:49:48:03:33:7f:7b:85:1b:43:
04:9f:8e:fc:74:dd:22:94:3c:91:67:e9:1c:0a:14:
81:89:56:9e:0e:77:bc:f0:73:fe:ce:74:89:52:38:
94:54:62:9c:7c:cf:a4:8c:4e:a6:bb:3f:42:04:73:
86:08:49:59:c7:5d:7d:b8:4c:36:02:80:a7:35:de:
47:48:15:d7:9b:95:a2:5c:1d:bb:89:91:35:69:de:
e8:e1:66:22:cc:e7:86:a3:81:a8:aa:f2:af:08:36:
86:c7:e3:fa:47:55:a3:f8:b1:52:80:57:76:36:b8:
f1:84:32:c5:e8:fc:35:25:3a:3f:50:39:cb:93:29:
6d:fb:0d:c1:ee:91:2c:fa:d4:f8:c9:83:ec:17:53:
89:bc:ce:82:71:00:d9:4b:e0:2b:23:cb:7a:6e:bc:
11:7e:66:5a:06:be:a7:29:05:01:a0:c0:c4:7b:cb:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
X509v3 Authority Key Identifier:
keyid:1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:cc:dc:06:71:8c:c6:2e:74:00:35:12:e9:53:5e:e5:e4:
3b:0b:34:0b:eb:e3:84:b6:e8:c7:f3:35:a6:d3:51:b1:e4:7f:
b9:8c:01:f8:d2:f6:95:6d:0c:67:dd:62:cb:10:ce:62:34:a1:
46:ad:b1:66:de:10:6c:25:47:35:a4:c9:5e:1b:72:3d:97:17:
58:65:ad:26:c6:56:b7:2f:26:7e:fd:33:e4:83:6d:8c:01:47:
cd:ef:cc:c7:00:a9:b9:2a:a9:9c:bc:d4:39:38:a0:8f:19:c4:
20:ca:22:46:db:dc:07:c2:b3:63:72:7c:ca:c7:7d:19:d4:67:
69:30:a0:0e:d6:10:eb:34:64:50:ff:84:48:1e:ae:3d:7e:72:
7b:16:20:b0:f8:d9:3a:ea:fa:d8:92:76:17:28:66:24:1f:7d:
1a:4e:76:60:56:bd:2d:a2:eb:ad:5c:99:7d:2b:a1:b4:b1:31:
7b:6a:6d:b4:9e:11:41:79:ac:b0:db:f8:17:d9:13:c1:3f:ea:
ff:8d:86:1b:3c:2c:bb:d0:63:ad:ad:b9:08:5c:b0:10:c4:e9:
a4:83:03:d8:27:d9:93:01:01:33:b3:71:f7:90:4b:57:20:4b:
a6:83:52:1e:8b:1d:8d:72:63:58:82:73:a4:81:b4:cd:dd:11:
e0:54:97:c8
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUz
MkQ1QTdBNEM2QUI1M0FGRTFFRkVDQUMwMTEzRURFRUQyNjU4MjAeFw0yNTA1MTcy
MjQwMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMzNTNENDQ1MEM1NDND
ODBERURENTJBMTQ2QkMyMzc2NUM1M0M0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8xkdhg7LQxpNNrnDLrd7fbv+QtE1QNusbUco3w1wpmISd38o3
4T3N4an2udkP5Gyz++fk3SgRFtWqCLzZ1Ty/vKRmoyghmvZ04/YVvao1X0lIAzN/
e4UbQwSfjvx03SKUPJFn6RwKFIGJVp4Od7zwc/7OdIlSOJRUYpx8z6SMTqa7P0IE
c4YISVnHXX24TDYCgKc13kdIFdeblaJcHbuJkTVp3ujhZiLM54ajgaiq8q8INobH
4/pHVaP4sVKAV3Y2uPGEMsXo/DUlOj9QOcuTKW37DcHukSz61PjJg+wXU4m8zoJx
ANlL4Csjy3puvBF+ZloGvqcpBQGgwMR7y83hAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUw1PURQxUPIDe3VKhRrwjdlxTxIAwHwYDVR0jBBgwFoAUHjLVp6TGq1Ov4e/s
rAET7e7SZYIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
Mi9IakxWcDZUR3ExT3Y0ZV9zckFFVDdlN1NaWUkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0hqTFZwNlRHcTFPdjRlX3NyQUVUN2U3U1pZSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvSGpMVnA2VEdxMU92
NGVfc3JBRVQ3ZTdTWllJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKL0zNwGcYzGLnQANRLpU17l5DsLNAvr44S26MfzNabTUbHkf7mMAfjS9pVt
DGfdYssQzmI0oUatsWbeEGwlRzWkyV4bcj2XF1hlrSbGVrcvJn79M+SDbYwBR83v
zMcAqbkqqZy81Dk4oI8ZxCDKIkbb3AfCs2NyfMrHfRnUZ2kwoA7WEOs0ZFD/hEge
rj1+cnsWILD42Trq+tiSdhcoZiQffRpOdmBWvS2i661cmX0robSxMXtqbbSeEUF5
rLDb+BfZE8E/6v+Nhhs8LLvQY62tuQhcsBDE6aSDA9gn2ZMBATOzcfeQS1cgS6aD
Uh6LHY1yY1iCc6SBtM3dEeBUl8g=
-----END CERTIFICATE-----
Generated at Sun May 18 04:43:33 2025 by rpki-client