This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft
File:                     ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft (raw, json)
Hash identifier:          7CLHnhzs2CL1OxeX2EjR8B8wLqo3bi+vKL1YvGX6ToA=
Subject key identifier:   50:B8:21:69:B8:90:76:52:8D:D6:1B:23:8E:15:FE:DD:22:C9:83:BB
Authority key identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA
Certificate issuer:       /CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA
Certificate serial:       0DF4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft
Manifest number:          0DF4
Signing time:             Sun 25 Jan 2026 20:59:01 +0000
Manifest this update:     Sun 25 Jan 2026 20:59:01 +0000
Manifest next update:     Mon 26 Jan 2026 02:59:01 +0000
Files and hashes:         1: ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl (hash: hcwvZKEPeBRihFqDaavm+oOb8IZPpGZUVaA2H4uWKYg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3572 (0xdf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA
        Validity
            Not Before: Jan 25 20:59:01 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=50B82169B89076528DD61B238E15FEDD22C983BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:b3:a2:cd:a4:5c:f5:ec:20:8b:e5:c5:0b:
                    d8:cd:85:f0:94:a8:b8:33:24:aa:cf:74:a3:bf:24:
                    9d:fc:f9:43:96:b9:ae:5c:41:7d:28:c2:b9:21:16:
                    c1:0c:d5:dc:bd:a3:9e:43:ad:52:df:da:cf:43:4d:
                    d7:71:74:8b:78:66:29:34:3e:1e:70:b0:fb:42:86:
                    cb:a6:cb:60:27:45:ac:ff:40:92:1c:58:7e:15:a4:
                    b8:cd:4c:8b:47:f7:ed:78:f5:cf:d2:2d:93:61:cb:
                    7a:61:f9:58:97:b0:86:91:b8:c4:5d:e7:43:df:47:
                    de:e8:88:ca:5c:5e:1a:16:24:6b:e5:13:46:80:8a:
                    70:f3:0e:9f:c1:d8:3b:f8:12:87:c6:51:11:cb:32:
                    c4:d4:f9:d9:04:7f:db:f2:ae:12:d1:45:cc:68:47:
                    5d:d3:59:f3:79:a5:3d:54:23:9c:e1:45:5a:c4:3b:
                    c2:06:ae:d1:a9:a1:55:d5:f8:75:52:46:cd:ce:85:
                    e0:62:8e:44:d1:06:74:2f:5b:cd:e6:54:f9:8e:22:
                    29:b6:ca:1b:11:11:39:54:e2:cb:2c:33:bb:22:04:
                    c4:11:f0:d4:a8:bf:a8:00:0f:ce:ab:38:11:79:c7:
                    9c:b8:75:84:68:ec:a0:88:be:f5:7b:00:e3:a7:5d:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:21:69:B8:90:76:52:8D:D6:1B:23:8E:15:FE:DD:22:C9:83:BB
            X509v3 Authority Key Identifier:
                keyid:8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:38:6b:e1:69:3b:49:a7:00:42:a3:47:0f:44:28:ca:07:5a:
         12:f0:d6:e9:f5:9f:9a:69:86:69:64:93:bb:aa:68:7f:9b:da:
         ec:d3:be:99:ad:5f:20:66:11:de:31:33:af:1a:46:15:8d:39:
         87:2d:f1:2d:2e:0d:f4:da:34:5f:61:1d:bc:1d:9a:ab:05:eb:
         2b:5b:ba:3d:be:7f:c7:2a:be:d3:46:d7:e6:74:21:f6:e8:80:
         8d:62:f6:fc:9b:0b:cf:6b:91:86:09:b8:fc:5f:83:24:00:c8:
         99:34:46:e1:3e:78:1b:ca:32:cd:b2:b8:63:ce:8c:1a:08:ef:
         49:f6:72:24:24:42:a2:a4:99:9a:a7:5a:70:31:8f:7a:20:e0:
         93:a6:15:dc:47:d9:48:0e:88:d3:d9:69:cf:47:48:51:7f:5b:
         9c:9f:68:9e:21:fe:f2:56:1c:6d:64:86:b4:73:bf:8e:71:ef:
         d7:3d:dc:da:4a:ce:d3:bb:49:3d:0d:f1:db:b9:c0:9e:60:59:
         70:63:5f:4d:b7:4b:44:3c:07:6d:1e:45:1b:96:b0:a6:02:e2:
         6b:b8:20:80:8d:b7:9f:89:b1:8d:86:41:de:c3:4f:af:52:08:
         32:6f:07:13:21:63:0f:eb:d8:8d:aa:4f:6f:bc:fb:e7:9e:9c:
         d5:40:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:57 2026 by rpki-client