Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
File: 2hcs9oXXoU8egRnVmgEv4GHAblE.mft (raw, json)
Hash identifier: ZJpf8rmFhewezKCOlv1n9BGHOTBErcTFNPNZJ8QxZh8=
Subject key identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA
Authority key identifier: DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51
Certificate issuer: /CN=DA172CF685D7A14F1E8119D59A012FE061C06E51
Certificate serial: 20B0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
Manifest number: 20B0
Signing time: Sat 23 Aug 2025 16:04:42 +0000
Manifest this update: Sat 23 Aug 2025 16:04:42 +0000
Manifest next update: Sat 23 Aug 2025 22:04:42 +0000
Files and hashes: 1: 2hcs9oXXoU8egRnVmgEv4GHAblE.crl (hash: /fpayigTyFLfdYEhNV6pDbycz53t+7cwtjZK+NqHxhU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8368 (0x20b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA172CF685D7A14F1E8119D59A012FE061C06E51
Validity
Not Before: Aug 23 16:04:42 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A14412443289FF6A8840257C69CC8F1CBDC61DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:fc:db:c0:7d:9c:8e:a7:df:5d:1b:49:fd:
08:8d:a0:1b:06:86:cb:1c:b9:e7:00:72:bd:1a:73:
94:98:01:66:a5:ab:68:96:69:cb:ab:fc:be:c2:93:
59:a9:e5:2b:b0:19:f4:33:0c:a6:db:77:ba:a5:56:
0d:da:d6:f5:04:ea:ff:48:10:69:99:e9:78:43:29:
56:01:bd:0d:90:26:43:1e:6d:b5:0a:90:73:12:4b:
35:4e:43:75:8e:83:7f:c5:db:0f:72:09:5d:90:9b:
83:c9:f6:0d:8b:1e:41:68:db:9c:8e:10:0e:1f:3a:
1a:d9:62:a2:40:29:2e:5b:54:08:53:80:d2:6b:1f:
c3:96:cb:b9:8b:5d:3b:8a:5f:c9:55:42:02:cf:7a:
5a:d9:04:f6:cd:a9:22:10:0e:30:51:28:06:25:02:
bb:65:38:04:0a:b5:00:b5:60:d5:d2:62:0c:92:72:
b5:9f:32:8a:ea:54:cc:d2:b0:e7:f5:c8:51:cc:db:
15:6f:08:be:19:aa:4b:5b:0e:38:18:d2:e6:4e:04:
59:23:a4:01:0c:98:bd:94:5c:f0:59:aa:d7:d7:0f:
72:80:01:8c:09:0a:88:7c:72:b6:b7:a4:44:9a:70:
cc:8e:5a:bf:67:32:49:1c:4c:58:9a:1d:2c:69:20:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA
X509v3 Authority Key Identifier:
keyid:DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7a:85:64:2c:08:7f:4f:e6:a2:e2:d3:73:d8:5e:d6:d8:f5:
1f:12:ab:99:ce:7a:1b:d1:1b:ee:a4:b4:10:bb:bb:ff:f2:59:
8b:1e:19:8a:e6:81:3a:95:ba:50:79:cc:8d:cf:85:3e:19:b6:
a7:8b:2e:d6:97:01:65:43:ee:72:3c:f4:a3:6b:fe:f6:2f:36:
dc:1c:67:d1:8d:3e:1b:c5:4e:95:7c:f0:9e:5e:94:74:8c:10:
9e:c6:0f:08:0b:67:43:a9:fb:51:fc:19:5f:02:b3:05:f6:c9:
c9:64:05:d6:54:b8:06:7e:81:fa:57:bf:13:9b:be:59:02:66:
e2:f8:58:0f:cd:e8:09:22:c5:8a:55:0b:42:a8:71:13:e1:42:
2f:b3:ea:82:81:ea:f9:64:13:7f:1c:49:d2:cb:ff:2f:a9:ed:
48:47:55:01:48:6f:2c:0f:b3:96:94:52:2f:1a:ec:3c:73:91:
45:dc:38:a5:a5:50:90:42:82:29:3a:7e:c8:d2:73:1a:3b:85:
a5:f1:0d:b7:d9:9b:ae:df:50:5c:e0:30:3a:cc:c3:2a:57:37:
11:91:72:58:23:4e:c3:84:e2:67:7b:1f:7d:13:75:16:27:40:
06:0e:79:ac:d6:74:81:de:92:59:fa:3e:21:77:18:ed:ed:68:
41:00:86:20
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICILAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx
NzJDRjY4NUQ3QTE0RjFFODExOUQ1OUEwMTJGRTA2MUMwNkU1MTAeFw0yNTA4MjMx
NjA0NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEExNDQxMjQ0MzI4OUZG
NkE4ODQwMjU3QzY5Q0M4RjFDQkRDNjFERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNRfzbwH2cjqffXRtJ/QiNoBsGhsscuecAcr0ac5SYAWalq2iW
acur/L7Ck1mp5SuwGfQzDKbbd7qlVg3a1vUE6v9IEGmZ6XhDKVYBvQ2QJkMebbUK
kHMSSzVOQ3WOg3/F2w9yCV2Qm4PJ9g2LHkFo25yOEA4fOhrZYqJAKS5bVAhTgNJr
H8OWy7mLXTuKX8lVQgLPelrZBPbNqSIQDjBRKAYlArtlOAQKtQC1YNXSYgyScrWf
MorqVMzSsOf1yFHM2xVvCL4ZqktbDjgY0uZOBFkjpAEMmL2UXPBZqtfXD3KAAYwJ
Coh8cra3pESacMyOWr9nMkkcTFiaHSxpIMZ9AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUoUQSRDKJ/2qIQCV8acyPHL3GHfowHwYDVR0jBBgwFoAU2hcs9oXXoU8egRnV
mgEv4GHAblEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3
LzJoY3M5b1hYb1U4ZWdSblZtZ0V2NEdIQWJsRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMmhjczlvWFhvVThlZ1JuVm1nRXY0R0hBYmxFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3LzJoY3M5b1hYb1U4ZWdS
blZtZ0V2NEdIQWJsRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC9eoVkLAh/T+ai4tNz2F7W2PUfEquZznob0RvupLQQu7v/8lmLHhmK5oE6lbpQ
ecyNz4U+Gbaniy7WlwFlQ+5yPPSja/72LzbcHGfRjT4bxU6VfPCeXpR0jBCexg8I
C2dDqftR/BlfArMF9snJZAXWVLgGfoH6V78Tm75ZAmbi+FgPzegJIsWKVQtCqHET
4UIvs+qCger5ZBN/HEnSy/8vqe1IR1UBSG8sD7OWlFIvGuw8c5FF3DilpVCQQoIp
On7I0nMaO4Wl8Q232Zuu31Bc4DA6zMMqVzcRkXJYI07DhOJnex99E3UWJ0AGDnms
1nSB3pJZ+j4hdxjt7WhBAIYg
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:23:21 2025 by rpki-client