This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
File:                     AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json)
Hash identifier:          3yY59GcViKuIuIenu2IjUWEm9Io0Wqjmqxz3CSAdDco=
Subject key identifier:   0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Certificate issuer:       /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial:       2877
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
Manifest number:          284D
Signing time:             Tue 23 Dec 2025 18:12:22 +0000
Manifest this update:     Tue 23 Dec 2025 18:12:22 +0000
Manifest next update:     Wed 24 Dec 2025 00:12:22 +0000
Files and hashes:         1: 4UrDTuI3fRzxDkq9jmbrDmI-UHA.roa (hash: oZG+CE81ah9aXVNLu38K4yiAAENpfLNqjhEmoyhOSrs=)
                          2: 7kLaRkHSmk9FaIeZ9oqI6e4fEsA.roa (hash: l7vT3x/Y9LqsoHI32O0Jgooo5alWA0xNagrRT3pm/fk=)
                          3: 8UazvGr8myutsZuYchfmJiGlpPU.roa (hash: dwAzogItaSJiR8s2XycaBfjUY/ztu1XyATE78EINMAs=)
                          4: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: yNC9XrcevG98XghEUATNT6PRI+aTcz7fUT9ZxwHQx8U=)
                          5: PgDSg7mQ46gIqctq9zQXrcxELlc.roa (hash: W/toZWcf74z12WeSOci6llIBq7P2QTL5WkC9d3tFvB8=)
                          6: QWNPUriuPTu9mMN7kkS5vSl3FpQ.roa (hash: wpNrPvLlM/Y/pcvk+2/pS1oFpwzKcTWyZzPhM+/WiEw=)
                          7: YpwK3_bJXKkI0e_B_z4zrFIz0EA.roa (hash: 9i43Ta8Fk/x5/xuaVmL+szlJLf0d5Et3A4ddM98phuE=)
                          8: YtgPMpzsRzGXBs45mr1kyGJf1Os.roa (hash: 98gJqd8+/J+xFOWdPMc/FU4rHgZx0N080kCzwFikk9U=)
                          9: aekWbbTAGrNHbz8lLX-GB4mJ8ik.roa (hash: FkyXPmVJ+75fAa1b8K1Ig0vIl03U88Oy2qI2mnVkFoA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10359 (0x2877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
        Validity
            Not Before: Dec 23 18:12:22 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=0ACA00C337354773164EFA107456DA00F2479420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35:
                    84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4:
                    15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5:
                    55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba:
                    61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c:
                    56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0:
                    bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d:
                    e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16:
                    1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60:
                    c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c:
                    87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e:
                    75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c:
                    fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b:
                    fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91:
                    a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70:
                    b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7:
                    28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
            X509v3 Authority Key Identifier:
                keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:0f:11:9b:b0:8e:14:98:cd:98:b3:ad:e6:74:22:04:18:
         b3:6f:8f:1e:6c:39:22:c9:b8:89:fc:72:0f:07:4f:49:6b:1f:
         07:d9:c1:e5:51:0a:26:06:12:8e:31:98:bf:7f:51:2a:0a:84:
         a4:69:10:03:02:52:c2:8d:93:57:e0:5f:bb:dd:72:10:56:eb:
         f7:ea:3a:46:2f:48:f4:75:6e:52:aa:f3:65:62:a6:30:5f:5f:
         51:c4:18:fe:7d:25:d6:63:0d:ff:20:21:f1:01:8f:7c:fc:c0:
         37:bf:bf:3b:88:f6:d6:1f:b2:ba:39:19:ed:bb:01:8f:12:3d:
         9d:8e:f8:91:b0:4d:39:fd:09:50:71:e9:fe:de:25:d0:cf:2d:
         66:e9:70:ac:cc:3f:69:65:d0:20:0c:27:7e:4d:e5:ae:66:f0:
         2f:34:ae:d1:dd:0f:60:da:09:24:17:4e:55:0d:67:29:82:73:
         f9:08:88:67:bf:11:6d:01:d5:88:fe:b3:ec:80:07:5b:aa:ed:
         95:2b:bd:6e:d8:04:e3:ab:a4:f5:dc:ac:c7:a5:61:80:2c:2c:
         5a:3c:5b:74:0e:87:e5:c7:02:cd:4a:a6:be:21:c7:84:6e:b4:
         0d:64:cc:58:56:32:55:ef:8c:9b:6a:fa:0a:80:7c:b0:87:7f:
         3d:16:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----