Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft
File: MhLECXbovqr84IRHL8u8MS-Szow.mft (raw, json)
Hash identifier: SAvyzGCxf/bVyV1o9kdbmeaxpi5f2TZYVvRtJHhQ2EU=
Subject key identifier: 8F:4E:72:36:9C:B7:C3:91:35:92:C8:ED:1B:D1:83:39:AB:1E:9A:A1
Authority key identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C
Certificate issuer: /CN=3212C40976E8BEAAFCE084472FCBBC312F92CE8C
Certificate serial: 0390
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MhLECXbovqr84IRHL8u8MS-Szow.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft
Manifest number: 0390
Signing time: Sat 23 Aug 2025 16:04:08 +0000
Manifest this update: Sat 23 Aug 2025 16:04:08 +0000
Manifest next update: Sat 23 Aug 2025 22:04:08 +0000
Files and hashes: 1: MhLECXbovqr84IRHL8u8MS-Szow.crl (hash: p3DTcjbx3xvj2LEsghqoahFvZYYw38UHnCtMOOnVPrY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3212C40976E8BEAAFCE084472FCBBC312F92CE8C
Validity
Not Before: Aug 23 16:04:08 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=8F4E72369CB7C3913592C8ED1BD18339AB1E9AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:73:c0:0a:10:46:57:fc:81:4a:e0:16:96:
31:df:e3:b6:c6:55:c2:5b:37:e9:32:93:3c:d6:08:
4b:ad:c3:79:e9:c9:ca:d1:66:48:f0:81:07:20:30:
9a:21:e2:86:e4:b3:6c:94:7a:f7:66:52:19:6e:54:
a5:56:6c:4a:33:eb:bf:c7:b1:b3:1a:4e:45:3f:09:
67:cf:88:10:38:9e:1b:dd:33:b6:40:d3:d5:57:e0:
ab:a1:56:98:80:67:1a:8d:79:2a:f2:37:a0:58:ce:
cf:6c:df:56:ac:ce:8f:66:3f:83:43:14:57:f5:3c:
49:58:7b:e1:5e:e0:96:92:3e:28:28:b1:d8:27:7a:
6c:98:45:ba:fd:d3:2d:8a:4b:25:74:83:ea:ad:7d:
c9:7c:54:8a:0c:ac:9d:85:8f:26:a6:95:06:4d:0a:
b7:91:7d:8e:e8:40:48:ab:f1:f4:67:25:9f:33:5f:
d0:88:92:1d:d2:f7:52:f6:3b:a9:bb:d4:9d:8e:15:
ef:33:78:3f:91:12:1a:19:32:ca:01:da:b1:e3:15:
ec:94:f1:ce:a4:93:4b:3a:02:05:ef:34:e5:a3:9b:
82:22:32:60:50:c0:b5:46:87:fe:ee:2a:b9:14:fb:
7d:89:98:11:31:c8:4d:08:e5:32:d2:37:93:72:d2:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:72:36:9C:B7:C3:91:35:92:C8:ED:1B:D1:83:39:AB:1E:9A:A1
X509v3 Authority Key Identifier:
keyid:32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MhLECXbovqr84IRHL8u8MS-Szow.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:21:c2:e1:f2:78:85:0d:7d:89:bb:57:18:f2:82:1e:86:
ac:ea:fd:1f:db:3b:6e:7e:99:91:49:25:59:ea:8b:73:53:1b:
22:c7:be:22:61:f6:a4:58:41:c7:a5:6d:95:c2:3e:a3:3f:1c:
f4:2d:9f:37:96:ca:fc:84:54:1b:28:24:33:d6:7b:4b:29:34:
ca:99:b0:39:0a:34:4b:55:5e:7c:ea:aa:b0:14:e7:bc:15:e1:
fa:cc:33:23:6b:17:4d:66:ab:e1:a9:70:9b:77:1a:35:f1:b4:
06:ab:3e:31:db:bd:b3:cd:07:7f:b2:05:50:bc:e2:56:8b:2d:
67:95:b1:97:c6:c8:6d:9a:ed:44:87:c4:2f:ba:73:5f:ac:4c:
a8:ff:e9:ea:bd:f0:57:db:a3:91:1f:13:13:0d:5c:28:6c:a4:
57:df:4a:46:3e:ed:0f:10:e4:d8:e8:b4:32:55:c9:19:bb:7f:
e3:5e:2d:cd:80:04:34:3f:79:fe:07:c4:b4:68:68:c0:fa:ac:
6b:bb:a6:e8:d8:6a:dd:18:ee:38:85:d5:75:f4:74:17:8b:77:
ab:56:91:de:3b:3a:d1:71:eb:4b:27:57:13:cd:1f:a7:b5:cd:
44:d8:5c:8f:3f:89:a7:c3:5a:22:c6:63:c3:40:fd:28:00:13:
eb:d3:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:26:45 2025 by rpki-client