Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
File: bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json)
Hash identifier: 395R/ovKBujybJ4gkByEoJtmMXKvYXu0YUHh9hpK+rU=
Subject key identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D
Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE
Certificate issuer: /CN=6C7185696188085985206B5BC3C453E127ED0FDE
Certificate serial: 0536
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
Manifest number: 0536
Signing time: Sat 23 Aug 2025 19:04:23 +0000
Manifest this update: Sat 23 Aug 2025 19:04:23 +0000
Manifest next update: Sun 24 Aug 2025 01:04:23 +0000
Files and hashes: 1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: v3kDGxY6bTi6F8jAGgGBvKM8jnZYSPuCUk9+U+3I+ok=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE
Validity
Not Before: Aug 23 19:04:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85:
81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db:
0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14:
70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2:
0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6:
90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d:
de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1:
97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b:
d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00:
4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4:
9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59:
fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1:
e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9:
ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14:
06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85:
c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f:
1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D
X509v3 Authority Key Identifier:
keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f6:28:a1:dc:76:aa:ec:cb:47:e8:0d:e2:91:6c:8a:98:9a:
f9:2a:b7:f7:66:79:55:4b:02:b4:ab:87:70:fc:0d:90:69:55:
04:e5:12:9c:c8:c6:4e:0d:35:7b:db:65:eb:05:e1:1b:12:a7:
aa:5c:3e:ab:6b:e1:31:be:eb:a4:e2:3e:f9:3b:e8:3b:b2:c2:
cc:96:4b:2f:ee:2b:6f:fe:74:51:39:86:af:fd:5a:1f:2c:4f:
78:e7:37:ce:2a:98:ec:30:1a:9b:7c:d5:ff:3f:4c:d2:59:5c:
8b:30:bf:10:83:a7:d5:84:bc:e5:82:e2:4c:ed:ac:44:c5:b5:
d9:66:7f:14:27:65:66:4f:69:1d:03:a6:e0:d4:c9:b7:d6:15:
4a:27:64:1c:66:50:34:08:bd:62:12:fd:68:b3:b8:51:eb:a6:
d2:7d:89:56:fc:e2:6f:79:11:5a:b6:00:c3:54:c1:e1:54:a7:
10:b4:93:e9:23:0a:e9:96:06:04:ad:e8:08:8d:44:68:97:3e:
37:9e:89:9a:63:ce:e4:82:e7:a8:82:1f:b3:44:f4:e2:00:90:
49:56:9a:03:88:b3:f9:8d:f6:71:11:7c:36:ec:ed:16:91:d4:
d8:00:62:61:25:88:eb:c4:45:e9:df:18:8c:90:ea:48:9e:3e:
10:3a:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:35 2025 by rpki-client