This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
File:                     Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft (raw, json)
Hash identifier:          CybEl2oAxXx1dkGYJLxutCsS421ZCniBj/BajxQucN8=
Subject key identifier:   CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
Authority key identifier: 67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2
Certificate issuer:       /CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
Certificate serial:       0742
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
Manifest number:          0742
Signing time:             Mon 26 Jan 2026 02:59:35 +0000
Manifest this update:     Mon 26 Jan 2026 02:59:35 +0000
Manifest next update:     Mon 26 Jan 2026 08:59:35 +0000
Files and hashes:         1: Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl (hash: w+MAU57JQDVK8BwoJdW0mGHLbS/AWoNQUFHADto2jrA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
        Validity
            Not Before: Jan 26 02:59:35 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=CC89F50C62CD7DA153A019DDCEF4FC2C12C0BDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:97:d7:85:73:b4:03:b3:98:d0:f3:24:a5:
                    cd:91:aa:28:98:f8:5a:15:d0:96:54:3a:c1:1a:17:
                    e1:5b:a3:79:c0:51:c9:2f:0a:43:12:ab:1b:56:fd:
                    64:eb:1b:ef:d7:2a:2a:95:23:65:bf:2e:5d:6c:c9:
                    e5:ae:2c:e9:b7:05:b5:f7:22:43:8b:ab:d9:1e:d1:
                    a4:d4:ed:6c:99:5d:c0:71:4e:7f:63:39:c0:65:66:
                    72:57:0e:10:95:80:d5:c9:fb:87:5c:c6:2c:3f:07:
                    95:31:f8:5d:aa:28:87:59:77:0e:f5:d7:49:0c:82:
                    83:6a:1c:94:a0:ea:c7:87:1e:7b:eb:e8:b9:56:90:
                    9a:b3:df:16:e4:e0:aa:42:6a:00:5a:d2:dc:89:43:
                    af:9f:0d:ba:2b:ad:ac:62:5c:57:0f:c8:15:ff:81:
                    b8:72:77:0e:fd:ae:d0:24:71:1f:e1:0c:87:00:f5:
                    a8:9f:db:f5:95:aa:6c:12:76:e5:2b:90:d9:96:c4:
                    f6:ba:37:a9:1c:6a:47:d2:4f:50:49:01:99:2d:3a:
                    74:37:97:a3:75:56:db:5c:37:9a:33:77:a7:9b:42:
                    a1:ef:9a:39:37:65:0d:75:73:cf:13:14:41:56:5c:
                    ed:dc:cb:60:92:1d:29:a7:53:cb:97:61:dc:db:18:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
            X509v3 Authority Key Identifier:
                keyid:67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:63:4a:ed:ed:c4:ff:e7:87:b9:8d:94:30:f2:68:4f:1b:
         d4:4e:b6:87:76:1f:68:6d:a4:38:3c:fe:00:98:59:ee:da:e2:
         71:f6:ab:13:30:66:5f:d2:44:a3:0b:44:3f:b5:19:2d:e7:bd:
         b7:5a:64:f8:c0:3c:db:f6:b8:65:08:e0:4d:81:58:53:33:68:
         1c:b4:d6:11:a1:f2:e7:c9:6e:79:fc:3a:a7:d0:ac:3e:e3:c3:
         f5:d7:07:81:e2:66:bb:ba:f1:a5:85:e9:cb:22:dd:35:6f:e3:
         bb:eb:4c:9e:5d:d2:4c:3d:8a:2a:89:63:59:78:65:81:42:df:
         50:87:cb:60:f3:25:30:f4:94:69:68:5a:b6:44:d3:6b:d8:8f:
         81:70:23:9e:c7:92:86:0f:8d:0a:a1:48:9a:1a:04:a1:32:68:
         93:8a:b6:d3:fd:10:d8:e0:4c:d5:68:fa:94:f8:f0:a2:57:bb:
         f8:93:f8:ce:35:9e:d8:6a:91:46:e6:07:f1:eb:09:2a:ca:5d:
         3d:53:eb:61:80:31:40:f2:cf:3b:69:4f:18:41:2b:16:ab:e4:
         16:d5:89:95:7f:05:3c:f4:c0:17:96:a6:43:ab:49:30:57:d4:
         88:5f:59:dc:70:e2:9c:bd:ab:ae:e6:48:d1:13:db:0b:62:35:
         ef:ba:81:5e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc5
QjNCMDFBNDgwNjIwMjBCQTBBMEMxOEJDN0REMEVERTFDQkJEMjAeFw0yNjAxMjYw
MjU5MzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKENDODlGNTBDNjJDRDdE
QTE1M0EwMTlERENFRjRGQzJDMTJDMEJEQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr9ZfXhXO0A7OY0PMkpc2RqiiY+FoV0JZUOsEaF+Fbo3nAUckv
CkMSqxtW/WTrG+/XKiqVI2W/Ll1syeWuLOm3BbX3IkOLq9ke0aTU7WyZXcBxTn9j
OcBlZnJXDhCVgNXJ+4dcxiw/B5Ux+F2qKIdZdw7110kMgoNqHJSg6seHHnvr6LlW
kJqz3xbk4KpCagBa0tyJQ6+fDborraxiXFcPyBX/gbhydw79rtAkcR/hDIcA9aif
2/WVqmwSduUrkNmWxPa6N6kcakfST1BJAZktOnQ3l6N1VttcN5ozd6ebQqHvmjk3
ZQ11c88TFEFWXO3cy2CSHSmnU8uXYdzbGOg3AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUzIn1DGLNfaFToBndzvT8LBLAvbowHwYDVR0jBBgwFoAUZ5s7AaSAYgILoKDB
i8fdDt4cu9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx
L1o1czdBYVNBWWdJTG9LREJpOGZkRHQ0Y3U5SS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWjVzN0FhU0FZZ0lMb0tEQmk4ZmREdDRjdTlJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYxL1o1czdBYVNBWWdJTG9L
REJpOGZkRHQ0Y3U5SS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBtJmNK7e3E/+eHuY2UMPJoTxvUTraHdh9obaQ4PP4AmFnu2uJx9qsTMGZf0kSj
C0Q/tRkt5723WmT4wDzb9rhlCOBNgVhTM2gctNYRofLnyW55/Dqn0Kw+48P11weB
4ma7uvGlhenLIt01b+O760yeXdJMPYoqiWNZeGWBQt9Qh8tg8yUw9JRpaFq2RNNr
2I+BcCOex5KGD40KoUiaGgShMmiTirbT/RDY4EzVaPqU+PCiV7v4k/jONZ7YapFG
5gfx6wkqyl09U+thgDFA8s87aU8YQSsWq+QW1YmVfwU89MAXlqZDq0kwV9SIX1nc
cOKcvauu5kjRE9sLYjXvuoFe
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:35:44 2026 by rpki-client