Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft
File: yBaRp6Fgd_PQnd6P2rl55b19wAg.mft (raw, json)
Hash identifier: HQdqCpXJjk+sNWxMFTFYozrPRfritHVxV5f9zfzL6/E=
Subject key identifier: 59:9D:CD:3B:00:C6:3C:1D:1B:FF:EA:DB:5E:77:53:30:93:79:5E:D2
Authority key identifier: C8:16:91:A7:A1:60:77:F3:D0:9D:DE:8F:DA:B9:79:E5:BD:7D:C0:08
Certificate issuer: /CN=C81691A7A16077F3D09DDE8FDAB979E5BD7DC008
Certificate serial: E4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft
Manifest number: E2
Signing time: Sun 24 Aug 2025 02:02:53 +0000
Manifest this update: Sun 24 Aug 2025 02:02:53 +0000
Manifest next update: Sun 24 Aug 2025 08:02:53 +0000
Files and hashes: 1: yBaRp6Fgd_PQnd6P2rl55b19wAg.crl (hash: wsVy2fqHr4PoqyUNVG2Fi40JvFit/qvpuPSLI2JvKhY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C81691A7A16077F3D09DDE8FDAB979E5BD7DC008
Validity
Not Before: Aug 24 02:02:53 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=599DCD3B00C63C1D1BFFEADB5E77533093795ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:29:87:6b:e6:d0:cd:83:79:e8:82:ae:2b:
22:08:3a:db:17:5b:fb:7d:82:ac:92:41:65:b6:de:
8d:8c:9d:75:0a:ee:88:89:c0:e7:9d:10:9c:df:82:
0d:f9:29:6e:bb:d6:0d:65:27:01:a2:c4:5c:dd:e3:
fb:27:1f:c6:34:eb:0e:8e:00:a2:e5:11:77:88:2f:
96:df:30:43:f8:5d:2c:5e:07:66:8a:89:b6:c6:31:
b4:62:23:b1:03:b7:0f:05:42:41:d7:f9:b1:9e:11:
a4:45:40:ba:0e:a9:50:72:3e:0e:ae:ae:ce:a6:24:
67:27:57:ba:0b:37:15:d7:7b:a6:90:88:8b:8e:42:
08:7b:7a:b7:c8:ca:67:4a:c7:d6:50:d4:7a:b0:cf:
06:af:dc:e6:01:ce:8d:ca:78:df:7e:f7:e8:8a:80:
54:47:f1:9b:fa:ef:ef:db:ef:01:cb:5e:86:e5:10:
a3:fb:79:99:d4:b9:95:82:cf:58:35:6f:cc:8a:73:
92:ab:08:20:8d:d3:26:23:b2:c7:b9:bb:b8:bd:c2:
56:18:d8:60:93:b7:1f:e0:ee:99:8a:f5:0b:92:f6:
26:0c:33:f3:16:5f:a1:b9:e2:21:5e:51:ff:c7:02:
8b:58:8f:2f:82:5f:7b:bc:05:fa:7d:b5:9f:df:01:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:CD:3B:00:C6:3C:1D:1B:FF:EA:DB:5E:77:53:30:93:79:5E:D2
X509v3 Authority Key Identifier:
keyid:C8:16:91:A7:A1:60:77:F3:D0:9D:DE:8F:DA:B9:79:E5:BD:7D:C0:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:92:ee:52:96:54:bf:46:0e:30:ca:5c:84:28:58:ef:40:6b:
d2:bd:b3:13:82:8f:2a:36:11:38:1a:9e:d6:65:4f:b2:82:9c:
e7:96:68:11:57:ed:d8:72:84:33:50:34:77:b3:a2:46:aa:ee:
35:e1:1b:06:c4:e2:e3:0c:4a:87:ba:69:a3:76:68:03:e2:f2:
31:d0:ab:ac:4d:42:1d:ea:f1:e5:53:b9:3c:18:32:30:20:c3:
9f:c1:45:f2:7e:cf:44:0d:ab:db:74:3d:48:17:72:8e:84:94:
55:a8:dc:c7:40:c7:a3:33:ed:7c:7f:38:91:62:11:f7:80:f6:
8b:68:bb:0a:b3:e5:b7:8c:02:79:aa:54:8b:fc:38:1e:97:be:
ea:6c:d2:b6:bb:48:d0:f5:68:2b:75:de:86:0e:e1:47:f7:c7:
66:95:99:f9:22:fe:db:16:c7:f9:46:92:55:5a:b6:28:c5:4c:
a6:25:0a:b3:35:d1:f7:e1:7f:e5:7c:5e:d6:44:ae:87:6a:97:
b1:0d:a4:b0:a4:ee:10:af:00:ea:54:6b:e8:7f:76:41:bc:4b:
63:f6:ca:b9:49:a0:a5:8f:1a:c1:19:8e:38:bb:ff:24:ef:78:
dd:5e:cb:38:ff:37:b5:d5:e9:ce:7c:89:ad:83:7e:64:48:2a:
c6:22:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:27:00 2025 by rpki-client