Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
File: jBp_tNDRawix7CtJn6KrIwEhaB8.mft (raw, json)
Hash identifier: PPvgv/N80E2GAg8LZy3B3sj7i0jZaBWBdhBeI610T8E=
Subject key identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F
Authority key identifier: 8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F
Certificate issuer: /CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F
Certificate serial: 02CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
Manifest number: 02CB
Signing time: Sat 23 Aug 2025 16:03:26 +0000
Manifest this update: Sat 23 Aug 2025 16:03:26 +0000
Manifest next update: Sat 23 Aug 2025 22:03:26 +0000
Files and hashes: 1: jBp_tNDRawix7CtJn6KrIwEhaB8.crl (hash: MNbcfRw+0mBtE5gGK+1HgZADgCQjiqb9joqRj/Q1GE0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F
Validity
Not Before: Aug 23 16:03:26 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4E93D5B4B60FDE24CD4D953117CB16205463E80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:0f:64:73:4b:fc:42:4f:a8:3c:99:e7:36:
45:72:c0:9f:a3:34:dd:df:d7:45:b4:ed:a9:8b:ed:
8e:89:d7:6f:37:c6:42:9c:bd:90:e2:03:ee:67:3d:
60:c8:e2:45:18:0a:97:a8:50:cf:d9:b0:ee:b7:20:
09:19:b5:4d:45:dd:18:df:b2:18:d4:07:8d:aa:18:
db:ed:aa:37:a9:92:82:b7:2a:8e:15:b6:13:43:80:
2e:15:0f:df:39:f3:20:f1:cd:a7:de:a1:32:e0:54:
d4:37:26:9f:e8:68:ca:3e:af:fe:34:16:4d:fe:9a:
07:14:57:6d:4a:d8:8a:73:11:51:0a:61:cb:a4:1e:
b5:c9:66:6c:80:8f:5f:f4:44:bb:9e:bb:9c:54:80:
05:c1:a1:be:b4:e5:1b:ae:7c:2b:bf:57:ad:98:a4:
65:be:bc:0e:61:3d:44:1c:68:f5:d5:cb:17:d2:02:
1a:66:35:d1:19:b7:a5:76:e6:78:28:7d:a3:83:31:
52:79:a3:8c:69:7d:d3:83:2d:af:90:b3:67:ed:1b:
13:79:b8:63:19:9b:66:36:dd:46:54:5d:8b:43:e4:
0a:ad:ef:e4:46:47:f0:b3:91:6a:e3:b8:3b:40:96:
5f:50:bd:19:0c:4d:5c:40:a0:c2:7c:53:6f:97:23:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F
X509v3 Authority Key Identifier:
keyid:8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:d0:1d:5a:97:81:21:4a:94:7f:b4:4c:57:bb:2a:bc:73:17:
8d:3d:83:a9:57:9d:06:1b:0b:97:86:af:cc:a8:0b:6c:30:ed:
6a:d6:c0:db:11:bb:26:1e:6a:ea:d6:5a:e3:2e:e1:b1:31:d9:
72:d7:f7:0c:fd:4a:a8:94:7d:b4:50:06:04:de:52:11:8c:fb:
46:02:0f:4c:57:5b:a1:2e:d7:57:2d:7b:6c:3b:25:09:1f:60:
d1:ae:3d:60:cd:f0:1c:b9:8b:01:47:47:3c:1c:fc:de:31:85:
1d:cf:68:f1:89:8d:0d:6d:2f:75:aa:e7:06:93:6f:57:13:5a:
b3:22:f1:1c:d9:8b:fc:cb:4b:8d:cb:97:1e:b1:47:0b:89:93:
38:a8:13:38:29:5c:4d:0a:f3:05:dd:47:3a:a4:cd:bc:a6:42:
be:41:f9:83:98:bf:8a:1b:a1:ad:72:0f:84:0d:16:89:93:8b:
d3:f2:5f:1b:e9:70:6c:d5:c5:d2:b9:65:18:13:b1:a1:7d:ba:
e7:ee:54:89:76:53:23:db:25:3e:b7:dc:31:4c:63:a1:3b:23:
a4:05:09:11:7e:61:74:71:55:fa:27:44:30:ea:0a:30:62:3f:
4e:32:c4:a9:a2:77:7c:46:1a:ba:51:d6:0e:fa:40:10:95:13:
14:83:99:56
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx
QTdGQjREMEQxNkIwOEIxRUMyQjQ5OUZBMkFCMjMwMTIxNjgxRjAeFw0yNTA4MjMx
NjAzMjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDRFOTNENUI0QjYwRkRF
MjRDRDREOTUzMTE3Q0IxNjIwNTQ2M0U4MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ/g9kc0v8Qk+oPJnnNkVywJ+jNN3f10W07amL7Y6J1283xkKc
vZDiA+5nPWDI4kUYCpeoUM/ZsO63IAkZtU1F3RjfshjUB42qGNvtqjepkoK3Ko4V
thNDgC4VD9858yDxzafeoTLgVNQ3Jp/oaMo+r/40Fk3+mgcUV21K2IpzEVEKYcuk
HrXJZmyAj1/0RLueu5xUgAXBob605RuufCu/V62YpGW+vA5hPUQcaPXVyxfSAhpm
NdEZt6V25ngofaODMVJ5o4xpfdODLa+Qs2ftGxN5uGMZm2Y23UZUXYtD5Aqt7+RG
R/CzkWrjuDtAll9QvRkMTVxAoMJ8U2+XI8inAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUTpPVtLYP3iTNTZUxF8sWIFRj6A8wHwYDVR0jBBgwFoAUjBp/tNDRawix7CtJ
n6KrIwEhaB8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1
OC9qQnBfdE5EUmF3aXg3Q3RKbjZLckl3RWhhQjguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2pCcF90TkRSYXdpeDdDdEpuNktySXdFaGFCOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTgvakJwX3RORFJhd2l4
N0N0Sm42S3JJd0VoYUI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJnQHVqXgSFKlH+0TFe7KrxzF409g6lXnQYbC5eGr8yoC2ww7WrWwNsRuyYe
aurWWuMu4bEx2XLX9wz9SqiUfbRQBgTeUhGM+0YCD0xXW6Eu11cte2w7JQkfYNGu
PWDN8By5iwFHRzwc/N4xhR3PaPGJjQ1tL3Wq5waTb1cTWrMi8RzZi/zLS43Llx6x
RwuJkzioEzgpXE0K8wXdRzqkzbymQr5B+YOYv4oboa1yD4QNFomTi9PyXxvpcGzV
xdK5ZRgTsaF9uufuVIl2UyPbJT633DFMY6E7I6QFCRF+YXRxVfonRDDqCjBiP04y
xKmid3xGGrpR1g76QBCVExSDmVY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:28:23 2025 by rpki-client