Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft
File: -DEYqbYNbw6dOVbPQZKnnEAgR2U.mft (raw, json)
Hash identifier: KnxzKdw2+V2dwlQxJO3DNa9+VdFY5yDvPVXyXnqq1N8=
Subject key identifier: F7:3C:33:38:07:49:B2:F8:20:94:3F:C0:E0:5E:F0:39:6B:3D:4E:2B
Authority key identifier: F8:31:18:A9:B6:0D:6F:0E:9D:39:56:CF:41:92:A7:9C:40:20:47:65
Certificate issuer: /CN=F83118A9B60D6F0E9D3956CF4192A79C40204765
Certificate serial: 14C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft
Manifest number: 14C5
Signing time: Sat 17 May 2025 13:13:35 +0000
Manifest this update: Sat 17 May 2025 13:13:35 +0000
Manifest next update: Sat 17 May 2025 19:13:35 +0000
Files and hashes: 1: -DEYqbYNbw6dOVbPQZKnnEAgR2U.crl (hash: PqejIe69RuFBW3RsC9UfL9FU49lUEp/6rJLBXEmdR5w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5317 (0x14c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F83118A9B60D6F0E9D3956CF4192A79C40204765
Validity
Not Before: May 17 13:13:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F73C33380749B2F820943FC0E05EF0396B3D4E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:53:04:f2:1a:ef:c0:c9:a5:77:de:4e:45:
7f:9f:77:fb:ad:b1:b0:6d:16:2f:dc:07:b0:3f:e0:
e8:f7:33:5b:c1:5c:5c:2b:f4:71:ef:b4:ec:60:7e:
1e:38:33:fa:1b:bb:9a:9f:7c:f5:68:e0:72:88:a0:
e5:ed:1a:00:af:93:06:b6:46:78:87:d5:82:88:f4:
88:ee:fa:44:10:49:db:62:95:a0:df:4f:c3:ea:fa:
49:d5:3d:18:49:4b:7c:70:7c:ee:de:40:25:ca:ae:
5f:9f:6f:2e:56:04:4a:59:58:9e:df:71:e3:73:fd:
74:13:fa:33:1a:c6:23:7e:80:92:e6:8c:dd:d5:9b:
d8:9f:f3:f4:eb:bb:01:c9:31:d6:96:e2:f0:94:7f:
91:d6:b0:a2:2f:09:e1:a7:0e:68:b2:f0:ec:6d:5d:
00:5a:00:a6:32:b1:55:65:3a:c5:a2:8a:b1:a1:62:
6b:89:1e:74:af:50:e5:9e:4b:81:a6:77:cd:62:56:
36:30:10:1a:21:32:8a:72:eb:56:8d:6a:13:ff:50:
f3:81:0f:b9:3a:cd:46:79:e2:a7:7e:df:a8:cb:0e:
fc:ac:4c:11:c8:57:93:e4:07:bc:e0:da:2c:fa:70:
e9:00:3f:13:b0:9f:77:f6:a8:6f:0a:0c:fd:a9:34:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:33:38:07:49:B2:F8:20:94:3F:C0:E0:5E:F0:39:6B:3D:4E:2B
X509v3 Authority Key Identifier:
keyid:F8:31:18:A9:B6:0D:6F:0E:9D:39:56:CF:41:92:A7:9C:40:20:47:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:6a:9b:e4:3b:da:35:ee:a3:d0:dd:06:c9:81:99:1f:8f:
e4:02:22:8f:d6:db:81:31:8f:10:58:51:e1:35:b5:3a:42:cc:
cf:15:bd:21:88:7e:97:b1:25:6e:63:60:0d:8e:9f:81:d3:2f:
c7:c0:bd:f5:da:d6:b5:04:71:b0:74:fb:98:2e:0b:ea:0e:b9:
67:03:16:9b:7c:31:5d:f7:9b:d1:18:6c:77:57:54:ec:5d:00:
4f:61:16:79:91:65:81:af:7e:52:9b:ff:ae:b0:61:e4:32:bb:
dd:0d:ea:fb:cc:92:95:3e:dd:97:2a:d1:49:7e:65:73:a9:86:
2b:cb:f1:96:c6:c1:7c:64:04:73:f5:27:b1:d5:75:2b:64:30:
a3:2a:f5:25:b6:22:a4:d0:dd:8e:e2:72:92:11:3e:08:bc:0a:
5a:c0:f4:8c:74:ea:a9:6f:88:9b:ad:67:40:44:80:25:6c:05:
dd:88:aa:f6:52:e2:0f:c6:91:62:3f:b6:c6:5f:65:42:df:a6:
4a:c1:ac:cc:1a:41:06:57:50:11:84:ab:90:b4:46:89:a0:8d:
e0:55:dc:40:be:98:75:9e:83:83:75:f9:3b:f5:ba:d5:a4:15:
d0:2f:81:40:12:db:9f:16:1e:3e:e8:a4:e6:e7:e3:20:41:50:
b3:8d:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:31:36 2025 by rpki-client