This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft
File:                     TAQw41GKWvUbwN9iVn4NFXylI8E.mft (raw, json)
Hash identifier:          E+fBXJ6kTNTPRkYPP1bV35kwyTlvx5rUQiyuQ/ExLHM=
Subject key identifier:   03:C5:5C:36:36:47:B2:D7:F6:51:A1:96:33:EF:E9:36:EE:B0:A1:BF
Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
Certificate issuer:       /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Certificate serial:       020B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft
Manifest number:          01FE
Signing time:             Wed 24 Dec 2025 04:08:43 +0000
Manifest this update:     Wed 24 Dec 2025 04:08:43 +0000
Manifest next update:     Wed 24 Dec 2025 10:08:43 +0000
Files and hashes:         1: 3chrI5RdhjIBoTWIkcprsQK-7Yo.roa (hash: Z6c3X/e7f8O3PvItxRFteZOKzRAOLRNJsPpjkYKmHUs=)
                          2: QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa (hash: Uo1NXgmxduN8ZLxUAEiSzkhrWOTJAv90VkspB9KZxo0=)
                          3: QJumW8JVOTIBPSJm600tKrKrEFU.roa (hash: frjTXPXRplruxuvW/Y/CAhH4DknwM2tPMCNNSkv/bOY=)
                          4: TAQw41GKWvUbwN9iVn4NFXylI8E.crl (hash: o9nduzJVQMtbOoTvE7PpInqrBNSt0gFsYYbYjU2QxKw=)
                          5: YV-bcU71KiaRsGqggAmcQHSDYO0.roa (hash: OEsCMgj+PCyrMdRauHOXf98dueA82V9PBQVMmn2JjQ8=)
                          6: mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa (hash: ZrEAdpoVCNctVRbTxo9U8dnLeO6B+qrscOutZSSo1gU=)
                          7: ndp2cKpKYwn8dFgo2JYcOamWIEw.roa (hash: lMcyc7+N5/lOY7lK9mB4EJFp8B3fuByvIbeutE1lkd4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
        Validity
            Not Before: Dec 24 04:08:43 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=03C55C363647B2D7F651A19633EFE936EEB0A1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:2c:2e:36:ff:09:4e:87:01:78:9c:0f:74:
                    07:26:00:76:c1:e7:5e:ca:b3:cb:12:72:f3:ce:fa:
                    90:86:38:6f:59:5f:97:26:96:f9:bc:0a:ca:c0:26:
                    b5:49:46:ef:3b:e9:e1:62:22:a2:36:1c:50:e6:79:
                    fa:2e:e4:8b:81:8d:4c:a7:b9:83:5d:7f:2e:0f:95:
                    63:ab:3a:6c:2c:9f:07:18:e4:f5:16:9f:46:b5:80:
                    f3:62:84:98:86:5f:4d:f2:99:c6:92:b5:62:6c:3b:
                    89:0d:4f:47:65:b2:ac:16:ad:5d:d1:12:5f:f4:38:
                    1b:a4:66:03:81:85:23:9d:ae:4f:22:33:e7:37:90:
                    b0:99:b0:1f:1a:93:7f:21:a4:63:78:7f:d4:94:16:
                    4a:b6:23:97:21:22:fd:98:0e:66:01:bb:94:47:df:
                    fb:99:4a:9e:11:b8:b9:ba:44:6d:46:e5:9a:b4:ba:
                    9a:7e:9b:45:6d:26:79:4e:24:71:d0:ad:98:b5:ef:
                    30:ad:d5:fe:d0:3a:15:14:f1:f7:86:e9:72:a2:fb:
                    d4:27:f9:3e:0c:f7:a2:25:23:a1:bd:83:53:7b:5a:
                    6c:fb:5b:ce:fe:c7:9f:20:79:1c:84:b6:72:47:61:
                    d9:e3:b8:d5:92:e1:0d:1a:9d:a8:19:a5:6c:9b:4d:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:5C:36:36:47:B2:D7:F6:51:A1:96:33:EF:E9:36:EE:B0:A1:BF
            X509v3 Authority Key Identifier:
                keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:be:36:82:66:c3:e0:a2:cc:23:b7:c0:6a:b7:11:4e:7c:
         a9:08:a1:22:ca:33:9c:31:94:50:4c:6a:93:92:f3:75:a0:0e:
         cd:3c:c2:94:17:e9:d0:4c:e0:b2:8c:1d:93:62:31:1c:ef:61:
         ef:7c:99:00:84:a1:8a:c0:14:9d:8e:7c:fe:cc:2b:64:19:aa:
         ef:ad:de:13:68:f4:a7:05:fb:16:9d:75:98:97:44:91:18:1b:
         c6:8e:35:59:5b:03:09:47:71:68:8e:e2:a1:97:87:18:6a:0d:
         b1:38:4d:73:29:bf:3c:89:2f:e7:cb:38:a4:ec:d3:4c:74:82:
         2b:92:a1:83:9d:16:d0:a7:b3:48:2c:fd:4c:a1:b7:c6:af:91:
         46:6b:f1:a6:ee:6f:37:a0:66:48:cf:bf:20:be:b3:ac:72:16:
         a9:99:19:14:4e:d2:e3:26:21:f2:f4:da:28:f1:d0:e2:c3:6b:
         cc:95:e1:74:b7:13:a2:41:04:a1:2f:c2:0e:f5:e0:c3:41:3e:
         a8:4c:07:4c:6c:31:69:c1:11:c0:38:41:fa:3e:8b:db:cd:d2:
         a9:3e:da:23:ba:c7:99:a4:56:a0:5b:ed:52:ad:84:3d:b3:91:
         2c:05:eb:66:7e:e9:db:a1:6e:79:6d:33:98:05:07:dd:7d:56:
         25:41:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----