Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
File: 3rhuqt7hwX7OKn_2OIUm96kmDUc.mft (raw, json)
Hash identifier: dzFTuTA64OSXIjJ6BxoUQZT+xZAuYTI17FCBVgWk98s=
Subject key identifier: C7:3F:FE:BA:34:40:B8:77:61:EE:7C:3D:5B:F5:EB:72:18:D8:FD:57
Authority key identifier: DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
Certificate issuer: /CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Certificate serial: 11E9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
Manifest number: 0D23
Signing time: Sat 23 Aug 2025 16:04:56 +0000
Manifest this update: Sat 23 Aug 2025 16:04:56 +0000
Manifest next update: Sat 23 Aug 2025 22:04:56 +0000
Files and hashes: 1: 3rhuqt7hwX7OKn_2OIUm96kmDUc.crl (hash: 20F8qFq83SsWTBXHxDa0BhqNqm6b0in6m3kd77H5IM8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4585 (0x11e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Validity
Not Before: Aug 23 16:04:56 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C73FFEBA3440B87761EE7C3D5BF5EB7218D8FD57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:01:e0:b0:b2:31:84:7a:35:1b:f4:3f:e9:
6a:5d:0a:ad:f4:89:98:f9:ee:10:38:35:c8:21:e6:
39:c7:8a:d8:8e:b0:ae:21:12:22:d6:4d:eb:86:ef:
37:a1:2e:4a:a1:ca:65:ad:2a:5a:fa:4b:4d:2c:82:
ad:ff:0e:4a:ce:4e:0e:04:85:3f:9b:cb:5e:36:46:
68:46:38:f0:91:de:2f:6d:e0:e2:dd:af:84:c0:9d:
dd:c7:1f:0a:e3:ea:67:a7:c7:4a:eb:e6:54:d3:14:
42:df:9c:4c:5c:e8:6f:61:03:f0:04:9c:73:21:0a:
7c:2d:70:1a:07:41:49:d3:36:be:36:b9:0e:a7:6a:
a4:b7:e7:23:72:5b:a0:4b:84:fe:e2:f7:13:63:f9:
71:0b:92:65:82:1a:3b:7e:70:96:79:d1:de:0e:b4:
61:19:d6:fe:20:fe:e7:3f:21:d0:76:33:69:9a:b7:
b6:5c:74:a5:24:8a:09:6a:c7:66:b6:26:5c:55:ff:
96:0f:c0:ef:0f:fe:2b:af:42:d4:dd:d2:2b:0f:bd:
68:36:cb:62:3f:65:84:74:1b:d4:f7:2b:82:f8:18:
94:16:eb:3c:10:ea:92:ad:6a:96:75:6d:77:e8:0d:
6e:83:0a:a8:ec:dd:3d:ae:e1:c0:28:f2:a4:64:17:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:FE:BA:34:40:B8:77:61:EE:7C:3D:5B:F5:EB:72:18:D8:FD:57
X509v3 Authority Key Identifier:
keyid:DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:af:3e:97:09:13:0e:da:c1:e2:98:92:3a:59:8c:24:5b:f0:
be:7d:5b:1f:56:65:8e:65:91:3e:43:2d:a0:0d:25:38:ac:84:
5a:f0:e4:1a:61:d5:32:2f:6e:61:62:4a:e0:6a:0e:c6:4d:5a:
a9:fc:d1:99:37:86:ad:7f:ba:e8:94:fa:39:ab:ef:8e:09:37:
4f:af:f2:33:62:95:a8:92:cb:a2:91:df:39:af:b0:a9:e3:5a:
25:e0:fb:f3:7f:64:69:20:2d:08:33:ae:65:ea:f3:4f:0d:b3:
43:1a:1f:35:fb:2f:07:52:de:2f:fc:18:ad:6b:d5:b7:c7:f2:
bd:0e:81:19:14:00:32:7f:57:cc:48:30:1a:13:b5:78:99:ce:
87:ff:3c:e1:41:6b:bc:3a:00:36:ee:80:2a:fc:0c:88:f7:1a:
81:55:86:ab:a8:9a:2a:ce:8b:2d:2f:07:0c:6d:e3:e0:2a:a4:
64:3a:dc:c8:d7:23:f1:86:6b:07:4a:84:cc:40:20:7a:b1:bb:
76:c8:75:8f:7a:bf:af:44:c9:fe:47:9c:a6:5c:5f:05:bf:25:
ff:c3:2c:7f:9d:ed:90:42:a6:7c:4f:75:3f:f1:ac:18:28:2a:
63:7e:85:9d:f5:bf:f1:6c:3a:73:1a:df:59:14:ab:46:48:d8:
40:41:49:e4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICEekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC
ODZFQUFERUUxQzE3RUNFMkE3RkY2Mzg4NTI2RjdBOTI2MEQ0NzAeFw0yNTA4MjMx
NjA0NTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM3M0ZGRUJBMzQ0MEI4
Nzc2MUVFN0MzRDVCRjVFQjcyMThEOEZENTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4wgHgsLIxhHo1G/Q/6WpdCq30iZj57hA4Ncgh5jnHitiOsK4h
EiLWTeuG7zehLkqhymWtKlr6S00sgq3/DkrOTg4EhT+by142RmhGOPCR3i9t4OLd
r4TAnd3HHwrj6menx0rr5lTTFELfnExc6G9hA/AEnHMhCnwtcBoHQUnTNr42uQ6n
aqS35yNyW6BLhP7i9xNj+XELkmWCGjt+cJZ50d4OtGEZ1v4g/uc/IdB2M2mat7Zc
dKUkiglqx2a2JlxV/5YPwO8P/iuvQtTd0isPvWg2y2I/ZYR0G9T3K4L4GJQW6zwQ
6pKtapZ1bXfoDW6DCqjs3T2u4cAo8qRkF5HbAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUxz/+ujRAuHdh7nw9W/XrchjY/VcwHwYDVR0jBBgwFoAU3rhuqt7hwX7OKn/2
OIUm96kmDUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
LzNyaHVxdDdod1g3T0tuXzJPSVVtOTZrbURVYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvM3JodXF0N2h3WDdPS25fMk9JVW05NmttRFVjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzNyaHVxdDdod1g3T0tu
XzJPSVVtOTZrbURVYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB9rz6XCRMO2sHimJI6WYwkW/C+fVsfVmWOZZE+Qy2gDSU4rIRa8OQaYdUyL25h
Ykrgag7GTVqp/NGZN4atf7rolPo5q++OCTdPr/IzYpWoksuikd85r7Cp41ol4Pvz
f2RpIC0IM65l6vNPDbNDGh81+y8HUt4v/Bita9W3x/K9DoEZFAAyf1fMSDAaE7V4
mc6H/zzhQWu8OgA27oAq/AyI9xqBVYarqJoqzostLwcMbePgKqRkOtzI1yPxhmsH
SoTMQCB6sbt2yHWPer+vRMn+R5ymXF8FvyX/wyx/ne2QQqZ8T3U/8awYKCpjfoWd
9b/xbDpzGt9ZFKtGSNhAQUnk
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:24:41 2025 by rpki-client