Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
File: cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft (raw, json)
Hash identifier: 4Z1lYiy3bCtkDWvCcYpwKqn8etPJ+gi4l1MvuvDMxIM=
Subject key identifier: C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
Authority key identifier: 72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
Certificate issuer: /CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Certificate serial: 0535
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
Manifest number: 0535
Signing time: Sat 23 Aug 2025 16:06:27 +0000
Manifest this update: Sat 23 Aug 2025 16:06:27 +0000
Manifest next update: Sat 23 Aug 2025 22:06:27 +0000
Files and hashes: 1: cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl (hash: C+BsUD/k4XY6AuREk2i6VVLZMjIMQfOdc1pIpU4Y6gw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Validity
Not Before: Aug 23 16:06:27 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C93F2E5387A0222D27A24BD4D7ACB6009A499DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:78:69:0c:54:06:49:2c:cf:ed:c9:48:01:
3b:b7:d3:9b:4d:80:cb:34:32:c2:96:28:be:e7:b4:
c1:c4:85:d2:e0:cd:84:73:a2:b1:31:5e:38:59:85:
e8:98:ac:3c:17:10:8c:1e:5f:53:b7:4f:de:f5:29:
d6:e0:43:a8:03:32:54:a8:3f:83:66:fb:a5:49:04:
4a:2d:6a:75:26:44:7b:b7:69:60:f8:66:08:80:03:
3f:61:64:c0:fd:bd:ab:ef:e0:69:8f:26:28:f1:19:
a0:a9:2a:1b:14:d6:68:05:5c:73:8a:93:04:b9:4d:
a0:70:f7:54:a4:c8:9a:c6:94:52:1c:70:8d:b4:9a:
5f:b9:46:47:1a:e8:91:12:84:b0:ed:e2:2c:72:ba:
e4:ee:de:0a:2a:f8:26:51:ea:1d:9d:50:24:ca:f5:
95:17:5a:6b:6f:fa:47:04:04:5e:b0:a1:05:28:f5:
3c:27:e8:6b:e9:f8:16:24:08:4d:52:71:ce:04:b2:
cd:69:6f:b3:90:3b:dd:0a:54:ba:60:82:72:fa:42:
3f:65:87:18:7f:88:99:8a:10:a5:7a:f0:0c:47:dc:
d0:40:9f:68:b1:e2:34:eb:90:cb:bf:b3:79:f7:fc:
54:cf:b5:13:55:14:26:a7:6f:4c:de:4a:dc:31:6d:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
X509v3 Authority Key Identifier:
keyid:72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:a4:f5:a8:b3:f6:c6:d0:94:12:a0:81:54:95:67:5a:aa:2f:
8e:ef:1e:6c:99:ed:63:9f:ea:91:af:1e:b9:b9:70:a7:06:14:
09:4d:23:03:17:87:7c:ae:61:38:e2:a3:ca:7c:b9:47:4f:da:
db:3d:de:8f:76:6e:d2:9a:b5:cb:58:a7:f1:43:f3:dc:a5:a9:
20:de:de:59:36:f3:7e:ae:86:f7:64:00:1a:24:11:67:70:2f:
fe:3d:58:78:45:49:dc:e7:14:db:01:ce:c6:a4:9f:6b:f7:31:
3c:d7:4d:04:d1:45:a0:eb:06:0f:25:ce:db:8d:1d:17:78:7c:
ff:bf:85:15:fd:53:07:29:36:c3:3f:c4:fa:5c:a0:3f:0f:bf:
3b:56:51:7a:f9:c0:76:cd:56:53:c0:59:aa:7e:88:0a:1d:b4:
4d:22:8d:96:a0:b2:55:47:0a:af:93:8b:f1:42:e7:36:31:03:
69:cc:e9:84:62:e1:e8:43:3a:28:fc:35:c3:0a:70:8a:85:f3:
46:95:b9:db:83:6f:dd:9e:c5:cf:b9:74:96:65:3d:a3:f7:83:
21:1b:7f:30:d8:c9:a7:b3:c7:65:72:13:6e:54:8a:6d:f4:de:
01:0c:10:21:c2:9e:3a:87:29:ee:36:85:e3:b4:c1:d4:be:37:
ee:b7:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:22:29 2025 by rpki-client