Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft
File: yHk93n6DuKXGasUI_NGLn1hMkng.mft (raw, json)
Hash identifier: 41e7WIq/djxShlhDMiBpM0KM2hWDs1NkaBSmyR4ekZU=
Subject key identifier: 67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E
Authority key identifier: C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78
Certificate issuer: /CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278
Certificate serial: EC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft
Manifest number: EC
Signing time: Sat 23 Aug 2025 21:02:25 +0000
Manifest this update: Sat 23 Aug 2025 21:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: yHk93n6DuKXGasUI_NGLn1hMkng.crl (hash: 51/qpCdpMKzNp61olBQT3EvVTAZZ96rIngdifa5dzUA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278
Validity
Not Before: Aug 23 21:02:25 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=67D0EC2C23DB72F7191514F0D95CB5F7CA7B5B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:8b:ee:7c:97:9f:21:3e:06:47:9a:65:f4:
61:7d:f8:b9:50:54:ab:37:b6:87:b2:01:be:cf:59:
8d:4f:5c:86:9b:53:01:73:53:5a:16:49:2e:f8:a2:
fe:63:4d:45:8a:fd:6a:ac:f1:44:12:13:41:30:83:
e3:92:ef:5c:cb:7d:62:81:a9:d9:a3:c3:c1:61:6e:
5f:f2:90:60:38:6e:70:0b:d7:ea:dc:72:03:eb:ab:
ee:e9:85:0c:9b:d3:c5:02:c3:a1:a7:09:40:62:f2:
1d:b8:df:00:b3:d3:cc:2b:f9:56:85:83:c3:51:ed:
62:55:00:06:de:75:8a:5f:3a:48:a8:c1:90:8c:83:
37:3f:50:d4:b1:9b:49:98:7f:24:72:a8:2c:e6:f7:
d9:33:13:1e:f8:06:0f:85:26:58:3b:4c:1e:d2:04:
bd:19:6f:49:14:4c:4d:f4:49:92:80:f4:a8:20:7e:
e8:1a:67:cf:74:52:e8:61:fc:c8:58:19:65:42:ee:
22:23:aa:3e:ae:26:1a:25:95:d1:47:52:3e:d3:ed:
3a:1c:d5:45:bb:16:42:ff:95:71:e9:63:3f:63:aa:
e8:4e:5f:85:8e:bb:b1:c2:ab:49:28:4a:b7:59:61:
e9:0a:d4:0e:e6:8c:6f:e4:9a:4c:b1:2e:48:65:60:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E
X509v3 Authority Key Identifier:
keyid:C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4a:18:4d:c7:50:1e:80:1e:d9:78:c0:ba:a3:49:70:67:43:
34:d3:ff:48:31:4a:26:bb:b7:7e:cd:b5:9f:cc:cf:98:b3:f3:
41:69:ed:59:a4:0d:6f:ae:87:19:9c:8d:ca:b4:3b:7e:d2:e2:
fa:1e:be:97:53:df:e2:72:1d:85:b8:4d:ba:5d:e0:81:3d:b4:
aa:0e:34:c1:4c:c7:e4:e7:b4:3d:ac:5c:95:a7:ed:44:b9:a0:
01:c4:6d:12:a4:c6:f1:5e:fc:d9:79:c1:73:a6:45:fa:73:ee:
94:bd:a8:37:b0:e5:83:52:f3:02:0c:6b:e3:eb:2c:2f:2a:39:
ad:9c:94:98:12:29:1b:ec:ba:d4:39:de:13:f0:6d:da:55:ff:
b7:da:16:43:cc:84:c2:a2:df:fc:1c:23:5e:b4:42:52:59:db:
47:4f:5b:a2:dd:33:34:2c:a0:6e:32:7b:9f:b7:14:b2:f4:11:
5d:a1:e8:23:86:17:1d:7b:fc:7a:93:89:88:59:8e:19:38:8b:
3f:9a:55:f4:57:80:98:95:39:2c:d1:52:e1:28:29:92:a7:6b:
e6:8b:53:85:aa:52:d6:dc:ef:48:2d:ed:93:9b:f5:bf:28:06:
2c:cc:5c:86:74:51:1f:0b:10:3e:c6:37:cd:f6:e4:4d:51:3f:
f2:33:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:15:23 2025 by rpki-client