Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft
File: zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft (raw, json)
Hash identifier: 8t8OIu9Yedg1t47dVjc+lk+wgPrshJM7QKdR9wMO/AM=
Subject key identifier: 21:38:FF:FC:8A:F5:9D:1A:AB:0D:F9:2B:BB:31:E2:3E:8A:CC:52:93
Authority key identifier: CC:A3:A7:1D:32:66:EE:BF:E6:F1:89:DE:EE:42:9E:A9:E0:43:A4:E7
Certificate issuer: /CN=CCA3A71D3266EEBFE6F189DEEE429EA9E043A4E7
Certificate serial: 17EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft
Manifest number: 17EB
Signing time: Mon 20 Oct 2025 17:05:27 +0000
Manifest this update: Mon 20 Oct 2025 17:05:27 +0000
Manifest next update: Mon 20 Oct 2025 23:05:27 +0000
Files and hashes: 1: zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl (hash: 3HY+su9Z/qg/lKAPuVMX94ngS7sdHtvIdr6pLsEHjPs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6123 (0x17eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCA3A71D3266EEBFE6F189DEEE429EA9E043A4E7
Validity
Not Before: Oct 20 17:05:27 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2138FFFC8AF59D1AAB0DF92BBB31E23E8ACC5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:a3:31:f7:55:c2:81:3d:f1:f6:5d:15:b4:
1c:43:09:ec:a0:49:5e:74:40:a7:c8:4a:c8:bb:71:
1b:db:d5:a9:40:3b:f9:7a:60:6a:bb:84:8c:51:9c:
fe:7a:94:61:a4:f6:5f:c7:c6:5e:9d:97:39:8a:71:
be:e4:c6:0d:a5:d1:de:2a:1c:c3:56:fa:da:29:1a:
fe:fb:49:f9:53:27:ee:40:8d:5b:50:2b:d7:af:3e:
4a:d9:36:ac:b3:f0:62:77:a9:2e:7e:07:bb:41:bd:
b5:35:4a:bc:bd:78:35:13:4a:3e:15:d6:9e:13:58:
bc:70:dd:fe:d2:ae:58:24:09:50:97:95:3f:53:4f:
07:dd:0e:e6:d8:14:4e:01:94:d5:4b:a4:ad:da:e6:
a7:e6:9f:1c:ca:47:f9:1f:38:a2:fe:ff:a1:f0:41:
91:c9:8f:e5:07:9c:e9:49:33:3b:53:d7:d0:ef:91:
64:53:a6:d6:e4:9f:a7:52:cd:51:5a:b8:4f:eb:b6:
da:9a:d3:f9:4d:de:9b:43:04:d8:ad:ed:50:c6:ff:
08:c4:a6:24:7e:4a:cb:72:5f:cf:6d:5c:8b:e4:34:
6e:1b:86:20:29:b7:e2:91:7f:ec:20:48:d0:e2:45:
4a:96:bf:b9:46:31:0f:1c:8b:b0:fe:e5:42:eb:fc:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:FF:FC:8A:F5:9D:1A:AB:0D:F9:2B:BB:31:E2:3E:8A:CC:52:93
X509v3 Authority Key Identifier:
keyid:CC:A3:A7:1D:32:66:EE:BF:E6:F1:89:DE:EE:42:9E:A9:E0:43:A4:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ba:cc:33:14:38:f8:ac:eb:83:cb:3f:82:41:5f:40:b8:8e:
f1:59:7b:87:45:28:86:f3:42:c6:45:ff:a1:c0:20:69:36:97:
b0:91:f4:30:dd:4a:56:27:50:12:04:12:31:5d:44:95:f8:58:
95:7a:7d:66:cd:33:47:fd:f0:69:bc:30:e9:f7:be:8a:59:88:
f7:ad:1d:52:c0:64:7c:b7:3d:be:b5:18:f0:74:b3:3b:d0:5b:
66:73:34:5c:a6:5c:67:8e:7e:61:41:9b:8d:62:14:06:f1:8b:
52:3a:24:d1:f8:49:12:d6:1b:16:b0:cb:b8:f8:c4:a7:f1:c7:
eb:b0:33:00:2f:88:1a:c3:6e:a3:0c:71:d1:69:29:b2:c2:0b:
4e:85:d2:fe:18:9b:88:5c:36:f4:ae:4b:31:13:20:2f:70:67:
56:c4:ec:50:ba:18:51:e5:0a:2b:23:59:68:a7:27:f6:c6:1f:
ad:9a:5e:a3:81:1a:6c:be:9c:d5:5a:bf:b5:28:6b:3b:ad:35:
65:b2:f9:2a:4a:84:02:f5:50:30:f6:49:ba:97:69:a4:be:a5:
13:a5:ba:17:5e:fc:ec:cb:52:05:e6:b0:e0:a9:ac:12:47:d7:
78:d4:64:fa:e4:ac:a8:5c:be:bc:67:48:11:96:c2:0e:56:53:
e4:d4:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:01 2025 by rpki-client