Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
File: HsPdz0dl7wGHxupiZgyDpkGedEQ.mft (raw, json)
Hash identifier: /2LAI1y1nZmkD8V+3KPHElRoXhGLyNwFfgBLU0Gpudo=
Subject key identifier: 97:9C:35:02:7F:CF:77:42:6D:98:CD:C3:B1:61:A6:F0:D9:98:92:68
Authority key identifier: 1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
Certificate issuer: /CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Certificate serial: 4B83
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
Manifest number: 4B83
Signing time: Sun 19 Oct 2025 23:04:17 +0000
Manifest this update: Sun 19 Oct 2025 23:04:17 +0000
Manifest next update: Mon 20 Oct 2025 05:04:17 +0000
Files and hashes: 1: HsPdz0dl7wGHxupiZgyDpkGedEQ.crl (hash: FOgVR9hI7hr2Yl7S0h41WObDlpBS3rXF5SEi9tEFVRQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19331 (0x4b83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Validity
Not Before: Oct 19 23:04:17 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=979C35027FCF77426D98CDC3B161A6F0D9989268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:98:c3:04:16:47:da:5e:3c:99:21:e3:15:
d2:a9:58:95:0d:5f:44:f9:a3:fb:b2:b7:13:3d:30:
a5:73:ef:b6:40:a1:80:39:c3:eb:ea:04:99:29:ab:
68:58:73:98:5b:04:18:ea:b5:c1:df:79:0c:66:19:
da:41:7c:1e:03:90:41:b9:11:57:f2:ed:2c:71:f9:
58:cc:77:3b:5e:09:86:d8:46:0a:e3:38:ec:ef:c3:
ae:e5:89:5d:52:8e:ca:83:aa:f8:30:1d:d4:a2:90:
41:db:74:b9:13:0a:96:61:70:8a:42:9e:28:3f:3c:
a4:68:5f:b4:9d:5d:55:71:cc:91:a7:82:5e:ac:cd:
27:f4:1c:fe:a1:66:9c:22:5f:d2:b9:53:f9:df:85:
fe:fb:cb:4f:d7:83:cf:3a:02:5f:a9:57:69:4d:7d:
f7:1b:64:44:15:99:f3:b6:30:6e:33:1d:ad:4f:ee:
65:e4:44:fb:0a:72:55:02:ea:3e:dd:0a:8b:95:e5:
8f:0c:55:79:03:ad:36:c4:d8:b7:17:f1:67:b0:68:
10:6b:ed:84:70:e9:77:44:2c:df:0e:d1:4c:19:43:
d6:76:bb:85:f4:20:00:6a:3e:c8:13:a3:06:a4:f0:
9a:21:b7:ed:45:54:59:cd:fa:2d:33:72:b1:ab:77:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9C:35:02:7F:CF:77:42:6D:98:CD:C3:B1:61:A6:F0:D9:98:92:68
X509v3 Authority Key Identifier:
keyid:1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:74:02:34:09:f0:f2:fc:cb:85:07:44:cc:75:f6:83:98:
43:c2:fe:ec:2a:67:57:1d:68:e8:b6:56:0f:4e:bb:d9:5a:06:
23:30:15:cb:64:1d:56:a7:cf:01:dd:81:47:36:65:ce:5e:c3:
d7:38:19:25:ff:cd:f9:55:b0:de:ba:42:05:2d:99:0f:fb:04:
9b:84:69:fb:97:41:12:f4:62:de:7c:1c:66:35:30:07:8f:1f:
fc:c8:d6:f9:5e:77:d9:f7:7d:33:c2:12:6e:e6:8f:67:73:b7:
f5:f2:45:7a:56:f4:c3:43:24:d5:dc:5f:a4:6d:4d:80:a7:64:
61:b9:64:2a:40:e5:2f:96:62:27:a2:fb:38:70:d0:fa:9e:9a:
47:c2:28:31:64:af:48:95:1a:81:2c:f8:ac:9b:11:4a:66:6b:
13:fb:cf:f4:86:f8:d1:6e:18:9a:fc:49:cd:50:ae:54:cf:08:
c6:37:ad:4c:ef:56:c8:4e:38:07:ed:e0:5e:8d:f7:47:a6:1b:
93:74:a5:79:02:4f:22:ad:b6:64:e1:16:fb:c2:4f:5d:ec:c2:
b0:1f:76:bd:3a:39:51:50:54:d6:84:27:2e:33:94:07:30:d9:
f9:4b:a3:65:15:49:c1:ae:48:31:ff:df:0d:84:a9:c7:4a:83:
86:69:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:52:18 2025 by rpki-client