Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft
File: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft (raw, json)
Hash identifier: iQorFNuPq33LaGkRYfCTGxI4QHSnO18K5/H7blJRj+c=
Subject key identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0
Authority key identifier: 6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74
Certificate issuer: /CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974
Certificate serial: A1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft
Manifest number: A1
Signing time: Sat 23 Aug 2025 16:02:58 +0000
Manifest this update: Sat 23 Aug 2025 16:02:58 +0000
Manifest next update: Sat 23 Aug 2025 22:02:58 +0000
Files and hashes: 1: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl (hash: MYrO1h7LE3wqAmLoVkEsxYR3yX+AZw7UpOfrnyAatE4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974
Validity
Not Before: Aug 23 16:02:58 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4F37AC7133852E9A205BC5879E706788C5BB1AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:16:b5:f6:93:22:b5:ad:56:4e:7f:8f:99:4d:
bc:1e:85:7b:07:2f:5d:a9:7d:25:78:c3:fc:8e:ae:
e7:0a:94:5f:a4:0a:83:25:9f:c6:e8:60:89:03:81:
1b:aa:04:62:5b:dd:b9:86:a1:5a:ac:c6:82:e2:1f:
61:df:3d:01:da:c4:87:17:6a:24:b6:af:46:7b:22:
bd:ad:0b:8c:fa:93:ed:46:8a:3e:48:44:3a:78:3b:
f8:b4:a5:19:15:79:8c:c2:d2:56:a5:b5:90:3b:39:
19:f3:79:a4:60:9e:15:cd:ed:94:87:ec:49:34:9a:
91:54:32:09:8d:b6:e7:df:fa:84:50:95:31:ce:b0:
88:74:81:53:bb:f7:00:fd:a7:cc:e1:4e:b4:ea:11:
89:89:88:fa:1d:ee:58:b1:e3:f0:52:cd:4c:52:4b:
d1:e7:ee:68:2b:88:d9:41:46:51:a4:bf:9a:54:b9:
14:ce:4d:4c:85:52:1d:84:59:2e:74:95:d3:26:d3:
11:82:84:f3:c8:a4:c3:81:53:e7:a5:0c:fa:f4:36:
bf:86:20:aa:96:b4:35:0f:87:95:0b:5d:bd:66:fa:
4a:cd:c0:8b:a2:ab:70:28:c6:6e:a2:5e:e9:9f:02:
7c:32:aa:84:56:f8:4e:fb:6d:c5:71:5f:1f:96:ed:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0
X509v3 Authority Key Identifier:
keyid:6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:54:3a:a3:4b:49:3e:f8:5b:ee:5c:90:1c:0f:ef:f6:98:7b:
b2:05:a6:9b:75:46:be:72:9a:8e:8b:44:c3:88:3a:68:08:17:
04:73:c0:6e:52:a3:53:56:72:4e:09:57:05:d2:43:66:2e:51:
16:92:b9:3d:81:b9:bc:7b:6d:b9:9e:87:bc:38:77:c7:3a:1b:
9e:23:f3:ac:00:eb:15:5a:3f:1d:8d:8b:9a:9e:78:97:e4:89:
97:7e:01:cc:fe:ed:a1:cc:dc:a3:57:7d:78:5b:ff:38:5c:08:
78:84:02:c6:5d:83:03:05:ca:31:20:f0:1e:ad:62:29:80:4b:
62:d0:cf:3e:d5:09:63:6d:44:66:75:61:8a:58:32:53:bd:0c:
e0:9e:b8:dc:3e:0b:d5:fe:a4:8d:2e:ff:21:17:7e:b4:7f:a1:
2f:92:0e:a3:27:f3:34:96:6e:84:7b:59:19:ed:fe:48:ea:49:
a6:9e:6e:17:af:55:de:28:27:24:f2:04:61:dc:74:9a:56:91:
dc:05:8f:d5:18:1b:c9:fc:e4:cf:9f:0a:63:1c:e7:a5:5a:b3:
92:33:c4:55:22:eb:64:96:b3:ef:b6:17:95:c2:75:8e:a0:db:
20:95:f4:5a:93:e0:f6:c1:4d:5f:39:68:61:bc:a2:c3:e2:8c:
93:90:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:23:36 2025 by rpki-client