Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3384/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.mft
File: _jLzsa0kZXSFtEO5cMb5v6Eil3Q.mft (raw, json)
Hash identifier: L7WLo0wMTzBH7X2p3WycS3ie/qUoF2cRyLzrzbY28TE=
Subject key identifier: BA:91:79:61:2F:49:5C:3E:A5:AA:2D:5F:79:06:13:4F:93:AA:07:DC
Authority key identifier: FE:32:F3:B1:AD:24:65:74:85:B4:43:B9:70:C6:F9:BF:A1:22:97:74
Certificate issuer: /CN=FE32F3B1AD24657485B443B970C6F9BFA1229774
Certificate serial: 01BE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.mft
Manifest number: 01BE
Signing time: Mon 20 Oct 2025 20:04:11 +0000
Manifest this update: Mon 20 Oct 2025 20:04:11 +0000
Manifest next update: Tue 21 Oct 2025 02:04:11 +0000
Files and hashes: 1: _jLzsa0kZXSFtEO5cMb5v6Eil3Q.crl (hash: +7ZHAP0fuy4DFKmw8MYJSB+vEOW2dFgoSxVdIjEk8jE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE32F3B1AD24657485B443B970C6F9BFA1229774
Validity
Not Before: Oct 20 20:04:11 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=BA9179612F495C3EA5AA2D5F7906134F93AA07DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:ae:65:bc:9c:54:93:c9:e9:23:f8:90:98:
e6:e5:29:6f:96:6b:8c:31:f1:07:cd:14:a6:bc:57:
12:de:ef:bc:03:b3:be:74:93:13:d5:72:83:c1:00:
f2:f2:be:f0:04:b0:fb:ba:f5:f4:af:17:80:85:93:
0f:75:58:7d:db:71:8e:5a:83:f4:06:ed:c8:ab:01:
39:4f:2f:d3:a8:ed:c7:1b:cd:8a:c1:29:c2:82:fc:
f4:11:38:d5:03:a1:c9:f8:88:7c:dc:02:c0:6a:f8:
1c:20:18:ab:84:e5:99:8d:78:1b:3f:ec:a7:eb:0a:
e8:3e:d1:a0:99:98:48:26:03:5f:4b:10:72:44:2d:
81:8d:4a:f9:f3:85:85:97:43:d5:48:af:e1:17:6e:
ec:2e:29:1f:71:b9:a0:51:c3:63:06:98:ae:1b:5a:
94:a7:59:07:78:e9:8c:63:3e:1a:b6:b4:62:a0:01:
0e:f6:c1:8b:ff:14:aa:25:51:c4:8f:0f:26:06:d1:
d2:42:ee:e8:23:81:8d:b7:6d:a1:4a:b6:f9:44:d1:
11:8c:6f:5e:c5:0a:b9:96:66:ec:fa:98:6f:2b:36:
43:a6:0d:c5:cd:87:be:00:70:fd:ed:ae:99:83:8d:
4f:7e:fa:38:3f:c9:27:59:d5:65:4c:7c:9c:a6:06:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:79:61:2F:49:5C:3E:A5:AA:2D:5F:79:06:13:4F:93:AA:07:DC
X509v3 Authority Key Identifier:
keyid:FE:32:F3:B1:AD:24:65:74:85:B4:43:B9:70:C6:F9:BF:A1:22:97:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:75:db:81:b7:a1:48:b1:39:69:7a:ff:46:d2:24:e9:d6:f8:
5e:23:ba:b1:8b:5e:48:56:7f:73:f0:51:ee:4d:5c:96:94:6e:
53:1e:43:4c:2b:9c:92:f5:8a:b4:1e:a1:14:31:2d:3f:21:cd:
55:00:72:e9:38:45:d2:20:75:f2:24:96:72:3b:b4:16:b3:13:
8c:11:2e:9e:c2:6d:ad:e9:46:cf:b4:d1:c9:b1:0a:c2:b5:af:
58:6f:02:f5:da:9e:48:09:b8:20:0c:48:9d:21:66:2a:c2:52:
77:12:ff:68:cb:fc:c7:db:80:b4:3a:71:e5:0c:47:20:59:9e:
8a:8a:75:f9:c3:79:96:31:9e:75:e6:18:ad:d1:e0:d1:42:35:
92:a2:f7:6a:67:04:41:5b:56:4b:2f:e5:66:59:8a:6c:b4:c9:
9c:aa:57:d2:ac:84:62:77:ae:27:bf:69:6c:59:84:76:ca:0a:
77:61:df:28:8a:e2:c4:d8:6c:c0:24:d6:4a:f0:9f:c0:05:c2:
45:2d:b4:86:31:23:ad:ee:3f:4b:95:3b:7f:ce:4f:fc:2c:5c:
8e:ee:7f:f3:36:d5:86:b4:86:ad:22:b5:9b:39:46:f9:20:a6:
17:6e:bb:ec:cc:bb:41:cb:ac:93:78:12:fd:7c:a2:72:4c:0d:
c6:58:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:37:28 2025 by rpki-client