Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft
File: 27TF-pa4dBv2i0i_AE29b9ljb60.mft (raw, json)
Hash identifier: Rp/sjayst/Id01vwIRysc1AGPR0BXdObGddWBfiDF5Q=
Subject key identifier: 07:0D:A8:59:23:E7:EA:E8:4F:78:94:3C:B0:70:FA:86:84:6F:CF:30
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0E2A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft
Manifest number: 0DB0
Signing time: Sat 23 Aug 2025 14:03:35 +0000
Manifest this update: Sat 23 Aug 2025 14:03:35 +0000
Manifest next update: Sat 23 Aug 2025 20:03:35 +0000
Files and hashes: 1: 27TF-pa4dBv2i0i_AE29b9ljb60.crl (hash: XrrU4Pcr+0W8IY+cj7s4X6FLDI9EXc9IjKuCanmnaNY=)
2: 3TIEWP84BmFIIi4G7TJzEFgiS1w.roa (hash: nHKlqvVgO7w8V0G3QBUpxbqxGDv9WPU/hFXpv2dTHJU=)
3: HYC2xe1ZSZQjXGa4r-0mXSPDHc4.roa (hash: g+Pp+4TjYRX7JcCX7XO+o2aSurbcf7YJCYM1qsG5jA8=)
4: YyhKthcstRYuxEk3vjZ1r9l9QLU.roa (hash: q/lDyBbaaNfLnxkYm+vwzCtroSsOL+Bif2m9eBvik+0=)
5: cVRq_KmISs8jA_YPdCjYBCQ5kTc.roa (hash: Sksv/IM1jZC1hZ0MSPfBP+FrKOgsA8MZANzitkQ0gYo=)
6: mZ655_Mm_AAI4kl8dUpMGZf7mbY.roa (hash: i4ZU88VES3WnFdjiM6ip7erWQPo+8zUMkZM1KAuvcFE=)
7: rCpq4Xp_P_54Lf9l73xLd74CVDs.roa (hash: rMg9xMvifp6cG1OLKpe0ElaE1f2GFC7wKKLuYfVyce0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3626 (0xe2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: Aug 23 14:03:35 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=070DA85923E7EAE84F78943CB070FA86846FCF30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:a0:75:38:c1:1b:18:f2:ba:3b:e1:ca:76:
60:7b:8a:a8:c6:59:67:a5:93:02:0d:e6:27:78:57:
91:90:30:46:7b:fd:17:56:9b:85:a2:62:3c:31:05:
12:cb:e6:b8:d3:a7:56:36:88:4b:97:0b:cb:e8:89:
d2:bf:78:12:b7:7a:e7:68:f9:7d:86:63:35:be:ad:
7a:25:2c:fe:a5:9c:35:a9:82:7c:be:dd:13:2b:03:
a3:45:43:93:d3:91:92:8f:1d:b2:a1:89:17:fb:4d:
69:a3:62:c0:9a:6f:08:e7:7a:cc:2b:9f:46:f8:2e:
61:38:ef:7d:fd:96:71:0d:5c:3f:64:74:6f:17:36:
51:a0:59:cb:3e:83:94:16:de:e0:b4:28:d5:cb:2c:
92:34:cf:37:3d:a9:01:e6:e6:b3:d9:8d:a6:c4:39:
f7:9c:a9:f0:3e:9b:e5:79:cb:0e:66:64:20:80:43:
a0:5e:7d:9d:f8:fe:1b:37:f2:a0:36:da:c1:74:82:
b3:67:71:2c:80:aa:84:a9:24:6a:4a:ec:96:36:5e:
5f:7e:eb:ff:22:67:58:19:58:20:93:d7:08:f5:4d:
1d:cf:95:5e:d4:96:16:28:80:5e:19:52:b7:0e:13:
6b:43:41:7e:78:51:04:09:09:b5:01:3c:e2:d1:3b:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:A8:59:23:E7:EA:E8:4F:78:94:3C:B0:70:FA:86:84:6F:CF:30
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:27:dc:98:96:cf:a0:8e:81:8a:77:97:01:67:b0:a1:c1:
91:23:55:80:f3:64:00:06:18:48:53:e2:d4:f7:b8:25:fe:00:
c6:d6:84:e8:77:10:87:79:31:ca:1f:c2:2a:7d:ae:92:12:91:
4d:c3:bb:9f:a7:f3:b9:a4:9e:e4:b2:c1:c6:fe:39:65:34:b7:
75:2d:0d:27:b5:55:3e:f7:26:06:4e:62:37:18:4d:b4:29:7a:
fc:66:e7:91:cc:4c:bf:8d:ac:65:08:f0:d4:05:a5:33:9a:11:
cf:c4:b4:0d:0b:ef:f0:30:db:77:1c:96:b9:85:b6:b2:fe:ea:
bc:34:81:12:b0:fa:4b:66:52:0d:e3:9e:6b:8c:53:87:8d:d3:
a2:c3:c8:2f:39:28:55:86:1f:fc:55:82:13:df:1a:66:9e:77:
58:b7:62:b4:21:ac:14:27:cc:4b:21:e4:fb:37:d4:89:c7:5c:
7f:9d:5a:b9:57:26:ef:4f:36:67:3b:0c:57:7d:09:0f:8d:45:
40:a4:c5:6d:1b:1f:c4:1f:4e:2b:88:01:fa:8f:64:ea:fb:71:
82:98:ee:6d:a0:e5:b4:0e:aa:1d:ed:2a:2c:fe:22:62:c4:f5:
bf:40:26:8f:20:3c:70:8b:26:7a:d8:34:29:d8:fa:4b:d4:8e:
49:7f:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:37:19 2025 by rpki-client