Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
File: l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft (raw, json)
Hash identifier: 3cgxStWipmSvT2mqw3pGZC66wFRBn5a5y1LNZ1WXE7U=
Subject key identifier: 2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34
Authority key identifier: 97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15
Certificate issuer: /CN=974591FE6CE9D9B1D7338743509FD4920BA15715
Certificate serial: 021F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
Manifest number: 021F
Signing time: Sun 19 Oct 2025 18:04:15 +0000
Manifest this update: Sun 19 Oct 2025 18:04:15 +0000
Manifest next update: Mon 20 Oct 2025 00:04:15 +0000
Files and hashes: 1: l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl (hash: K7ogsjWzUaNgyekUVX+YVYhv4eCuwX4vQnneq15lcis=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974591FE6CE9D9B1D7338743509FD4920BA15715
Validity
Not Before: Oct 19 18:04:15 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2EC1A35BE4D5AD0A5782E218CDA2B72EB5D49634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:45:27:cd:1f:be:d0:60:27:8d:73:ea:12:
e7:5a:68:6b:ed:15:49:34:f6:20:5b:0e:e1:7a:7a:
a6:ce:9e:d8:08:32:51:26:de:e7:a1:54:80:33:9a:
0e:68:4d:4a:64:82:5c:e8:79:1d:18:91:77:c7:f8:
61:6f:b4:96:0a:42:85:72:a2:72:d5:91:02:1d:37:
21:45:f2:93:68:aa:e6:d2:e7:68:a2:2a:c1:ae:2d:
c3:9d:2a:fb:46:04:71:c6:44:87:31:d7:ab:08:0b:
50:b8:62:fa:80:b2:2c:6b:66:3f:8a:78:6a:40:b3:
63:59:1b:a7:04:a1:d6:ff:fc:43:5a:2a:10:63:94:
08:d0:3a:fa:c5:d0:c5:7f:3d:c2:b8:5c:2e:52:eb:
bd:91:2d:51:9f:f4:97:28:3a:44:8d:c1:a6:2a:f5:
39:d9:5e:8b:63:39:b9:09:05:50:c5:34:8f:44:86:
3c:b2:08:c9:f0:f3:99:2d:b1:35:81:9b:38:0c:74:
2e:56:57:bd:dc:70:60:4f:9d:3a:ec:8e:a9:bb:91:
3d:f0:fc:d8:c7:54:a2:44:3c:f8:9e:c1:64:a3:67:
8a:6b:a2:53:1e:79:38:3b:c3:12:58:e5:de:34:5c:
8f:3b:f7:37:23:86:70:0f:ed:f9:e1:64:ff:b1:07:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34
X509v3 Authority Key Identifier:
keyid:97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:be:49:b4:cc:3d:7c:05:eb:17:cf:69:1a:5c:bb:f7:66:59:
96:8a:6c:dc:b4:8d:fb:b4:10:39:6e:d8:66:af:c3:15:61:03:
4b:b1:43:87:a5:b5:6a:6d:1f:61:fe:56:4e:2b:88:eb:29:96:
30:75:cf:53:9d:b3:5c:f9:9e:7b:8b:1b:54:b6:df:a9:5f:59:
fd:a4:76:d3:6e:9c:be:4b:f8:f2:4c:bf:7e:04:fd:55:74:e3:
87:49:05:7f:37:fb:05:a1:1e:a5:2b:2b:71:bd:33:8a:db:bb:
39:8b:cd:97:5b:74:24:b4:52:eb:6e:ee:04:76:73:3f:20:8a:
73:87:24:ab:92:b0:4d:51:9e:d6:c6:14:3e:fe:57:a7:15:fe:
d8:4a:3d:17:ea:05:a1:a9:3b:ec:4c:c0:51:bf:90:a7:b4:87:
5d:42:51:32:b1:bf:21:ac:7d:1b:d1:8e:33:f5:71:df:f1:98:
81:54:5c:ba:5c:e2:74:6e:93:56:3e:3d:85:89:f9:99:b6:f0:
ea:98:bc:98:8b:19:ff:15:94:3a:01:14:48:53:22:64:3f:95:
3c:69:14:f0:f5:c7:3a:0b:49:f8:f5:c8:f4:48:a7:31:09:41:
3e:02:7f:40:33:7c:86:ef:da:c4:ae:64:0f:22:22:41:1b:e8:
c4:86:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:32:34 2025 by rpki-client