
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft
File: CZkX2MUTgArhbVggcgZ8KTd8Jik.mft (raw, json)
Hash identifier: b+vIM2ztPxsCCPzDxMVaC1QZUZFsoXu+fW8GLcse/ik=
Subject key identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6
Authority key identifier: 09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29
Certificate issuer: /CN=099917D8C513800AE16D582072067C29377C2629
Certificate serial: 03BC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft
Manifest number: 03BC
Signing time: Sun 19 Oct 2025 23:04:24 +0000
Manifest this update: Sun 19 Oct 2025 23:04:24 +0000
Manifest next update: Mon 20 Oct 2025 05:04:24 +0000
Files and hashes: 1: CZkX2MUTgArhbVggcgZ8KTd8Jik.crl (hash: 9esTlKx/52mKQIN95FmG/RrTqhDbeflTXNzR+OStXiw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099917D8C513800AE16D582072067C29377C2629
Validity
Not Before: Oct 19 23:04:24 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A3FF29CFD23BB00C4218F91914122C83CB18F8F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:5e:98:92:b3:79:0e:37:55:5d:95:bf:18:
53:30:b8:fb:e5:ce:b8:5b:8f:83:37:66:a1:2e:84:
4b:23:1f:6a:f1:52:80:f7:a3:08:f1:8c:d3:75:94:
4c:18:f8:07:3f:97:1c:a5:3b:6c:f7:19:0d:80:1e:
b4:aa:4b:b6:4f:cf:37:de:9f:e8:02:3a:45:95:ac:
54:98:55:de:cb:2b:79:5e:e5:d2:8a:05:f9:38:b3:
80:35:9f:cd:a4:0b:b4:3b:2e:1c:ae:ba:5f:fd:02:
0a:23:8d:b7:4c:45:28:a3:7d:f4:41:0e:ef:2e:bb:
83:00:06:ce:e7:8d:12:34:c9:ba:32:56:52:1b:8b:
6f:e7:ea:fd:61:f6:54:6c:cd:73:25:a2:18:85:1f:
62:b9:27:13:dc:be:1b:be:9c:63:6c:8c:44:23:aa:
43:a4:46:e9:68:19:af:54:07:c0:f1:2d:7a:d5:d2:
82:cc:05:b0:f4:31:38:0c:83:15:98:fa:19:10:9e:
ba:ec:67:e9:b9:38:27:20:1a:2c:ae:28:21:89:87:
6b:aa:c8:00:ef:60:60:ae:7d:fa:d6:78:ad:b7:14:
5a:ba:f1:ea:17:d9:16:4f:b8:e0:9f:66:4d:be:66:
31:77:fc:35:72:f8:cf:cb:9b:f3:5e:2c:c3:cd:b9:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6
X509v3 Authority Key Identifier:
keyid:09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:4e:00:80:4d:1a:38:6b:ee:d7:05:8e:0e:93:4f:ab:ec:
32:c3:49:de:a8:c5:ec:e8:4c:fd:3a:f0:a2:48:eb:3b:e1:40:
f0:75:b2:5e:2d:60:9a:e2:b8:c6:33:8d:ed:a2:2b:af:e9:7e:
0d:14:16:5c:a8:4c:5d:8f:d5:a3:fa:e9:f3:ac:eb:3a:47:38:
d5:46:1e:b1:b2:85:54:43:fb:a9:33:34:15:46:34:29:b2:7a:
08:06:e1:88:12:3c:95:01:a9:58:98:34:5c:d9:4f:55:63:c4:
56:95:7f:82:04:ab:eb:2c:2a:fa:77:06:23:90:d7:05:cb:e3:
6f:07:47:e2:ad:f0:24:06:9b:78:14:62:40:1e:58:ce:d3:75:
88:0b:7d:91:1b:ee:7c:d0:c3:98:62:31:f3:73:d1:d6:36:65:
0d:f8:8a:56:ab:a2:44:3c:47:d5:3d:9f:7f:7c:ff:32:6c:1a:
4d:94:47:eb:4c:91:fb:d9:e4:bc:23:d6:28:b1:14:1a:8f:fc:
c3:d2:84:34:f9:c4:01:63:b8:1a:e2:31:32:72:42:ea:a0:3c:
3b:09:8b:03:e6:25:69:25:17:ec:2c:66:96:a9:3b:45:31:4b:
bc:66:c2:1c:e3:cd:e2:ac:af:2d:f7:f8:b3:30:15:16:fe:e4:
1e:4f:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:30 2025 by rpki-client