Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft
File: q0l_YqMvEGl9yE5qo11y99Gms9Q.mft (raw, json)
Hash identifier: XadZYJdVzsDxj1bhcCEMXqw0NUFErPMrSWyyfoJAvuc=
Subject key identifier: 34:0D:E5:9C:E4:EA:EE:DF:F7:26:AE:9C:16:C3:10:C5:A0:63:B1:6C
Authority key identifier: AB:49:7F:62:A3:2F:10:69:7D:C8:4E:6A:A3:5D:72:F7:D1:A6:B3:D4
Certificate issuer: /CN=AB497F62A32F10697DC84E6AA35D72F7D1A6B3D4
Certificate serial: 9E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft
Manifest number: 9E
Signing time: Mon 20 Oct 2025 17:07:18 +0000
Manifest this update: Mon 20 Oct 2025 17:07:18 +0000
Manifest next update: Mon 20 Oct 2025 23:07:18 +0000
Files and hashes: 1: q0l_YqMvEGl9yE5qo11y99Gms9Q.crl (hash: ogLHCN3lL6LCRQk5e7kmLNbwn9204V4kgw2id99PJns=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB497F62A32F10697DC84E6AA35D72F7D1A6B3D4
Validity
Not Before: Oct 20 17:07:18 2025 GMT
Not After : Sep 18 07:36:05 2026 GMT
Subject: CN=340DE59CE4EAEEDFF726AE9C16C310C5A063B16C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:42:7d:87:7c:f2:99:01:27:e4:b2:ac:97:
18:5e:33:07:92:92:56:2c:45:37:96:77:06:b8:60:
13:c2:0b:7a:29:0c:3c:a7:28:f6:72:b8:74:2f:45:
af:a1:27:f8:f7:2c:4d:f6:44:96:f1:62:52:d4:fc:
04:19:a5:2d:40:d2:1a:06:e2:11:0e:40:cb:5b:c5:
e9:0e:0d:7f:34:93:86:06:d4:34:ab:e4:c2:f2:c6:
34:43:66:0e:15:ad:75:8d:11:05:60:21:5a:85:c9:
01:a2:aa:5f:97:71:0c:7d:ed:a3:71:9d:d3:bc:df:
b7:82:7d:05:11:7b:1e:d2:13:46:ce:6c:3d:4b:7b:
67:8a:2d:a8:bc:34:09:af:7d:98:4a:66:50:a6:e1:
0f:63:f7:ff:ca:99:71:d9:0c:a2:a7:62:33:22:a9:
64:6c:38:f3:69:f1:59:f7:2e:63:32:27:7c:97:20:
59:7e:6f:a4:23:55:15:d7:42:1e:0a:5a:77:e8:fd:
a2:cf:7f:d8:a1:b5:59:44:81:60:61:94:b3:dd:04:
2e:53:bb:fc:c8:84:fa:9f:f3:59:63:5b:0d:86:2e:
79:68:09:06:f3:a1:da:d9:cf:44:7c:7d:4e:ea:a5:
8a:c0:76:5b:c1:93:fa:11:81:bd:60:8b:7f:98:70:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:E5:9C:E4:EA:EE:DF:F7:26:AE:9C:16:C3:10:C5:A0:63:B1:6C
X509v3 Authority Key Identifier:
keyid:AB:49:7F:62:A3:2F:10:69:7D:C8:4E:6A:A3:5D:72:F7:D1:A6:B3:D4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q0l_YqMvEGl9yE5qo11y99Gms9Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3395/q0l_YqMvEGl9yE5qo11y99Gms9Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:02:5c:66:f5:29:fb:5d:28:18:35:33:33:ee:c5:e3:4a:
1d:37:10:a9:82:fd:bf:7e:96:ad:a2:81:ae:12:4b:3c:ed:03:
43:f5:ff:4a:4b:ca:f7:62:cf:60:92:b2:3d:fd:ff:37:95:2c:
6f:56:8c:b3:47:05:c0:91:28:af:18:f1:cf:b2:ea:47:df:99:
db:2c:8d:77:ed:dc:e5:d4:51:09:87:30:4d:ae:41:78:b7:63:
49:30:dc:be:e4:94:75:54:22:5f:0c:33:51:b9:41:eb:81:89:
e3:8c:ca:b2:60:b3:1d:df:80:c6:97:07:db:1f:52:d2:3a:25:
eb:6e:f8:44:78:73:af:a9:ab:dd:e8:36:5b:50:f8:7e:ba:01:
ba:be:c4:b0:d9:32:71:26:e5:b5:95:64:49:3c:4f:3c:1a:05:
63:ee:9d:f4:32:5d:21:8c:4c:59:73:e5:2a:c7:80:fd:5c:c1:
39:8f:e4:40:c1:a5:9f:74:66:c0:60:3e:d9:3c:d8:43:f6:08:
c3:e2:5a:5d:77:19:0d:10:30:29:06:c6:f6:3b:ac:f5:88:e0:
28:c9:90:6b:17:84:e5:bb:c3:da:09:08:46:f4:d6:ed:1e:a6:
ce:4d:d7:5b:aa:fd:8f:f3:d5:d1:1d:de:1f:0b:a2:e5:af:3a:
74:ce:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:29:19 2025 by rpki-client