This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft
File:                     FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json)
Hash identifier:          eWJSTv2OLq9fI1bnXjS2MkP6avI9o/4P+GQgQTFyRm4=
Subject key identifier:   1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B
Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93
Certificate issuer:       /CN=142C1E399B31366420EC47D2E3171B1A5965B893
Certificate serial:       039D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft
Manifest number:          039D
Signing time:             Mon 26 Jan 2026 01:57:22 +0000
Manifest this update:     Mon 26 Jan 2026 01:57:22 +0000
Manifest next update:     Mon 26 Jan 2026 07:57:22 +0000
Files and hashes:         1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: Oachzc262rpGtsdA+SZyLW6Ct1OHSLYX9OPYoYWi8Bg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893
        Validity
            Not Before: Jan 26 01:57:22 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd:
                    71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c:
                    c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22:
                    9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae:
                    03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20:
                    a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f:
                    b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20:
                    4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e:
                    9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88:
                    71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb:
                    0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52:
                    b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3:
                    0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5:
                    63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb:
                    98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51:
                    0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc:
                    ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B
            X509v3 Authority Key Identifier:
                keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:b5:33:25:5d:ff:b0:30:f9:bd:1f:24:f7:d4:3b:bf:bb:
         c5:04:03:c1:03:94:47:84:fd:9e:1d:1f:85:7d:bc:16:54:85:
         7e:99:55:1e:eb:3b:11:6b:76:4e:15:ca:92:9c:03:83:82:1f:
         94:e8:39:6d:f1:98:58:a6:1c:ee:ae:b4:72:49:1e:73:22:cd:
         65:eb:42:d3:32:e1:4b:0a:4b:0f:51:2a:85:6c:36:c3:cb:df:
         a1:1b:56:c7:4b:eb:e5:d2:03:f9:15:99:66:c4:54:03:46:14:
         a1:68:ff:a1:85:17:ad:93:d2:1f:d5:44:58:77:d1:b0:bf:3e:
         46:f3:88:5a:ec:e3:df:20:2c:f1:41:86:cc:72:2d:76:da:ef:
         c5:b8:64:83:aa:7e:c2:03:63:22:52:3d:c9:4c:dc:46:73:a8:
         f4:d8:f2:25:8a:0d:4b:16:53:5a:f9:8a:f3:eb:d7:fa:e4:de:
         1e:d2:e5:1e:60:97:06:3c:88:21:d1:87:31:ac:38:f4:81:80:
         2b:52:1a:76:b8:89:1d:05:1b:53:88:df:4c:c3:cc:54:4f:0e:
         f0:20:c2:23:8f:8a:66:e6:7e:39:ab:c2:4c:79:66:6d:07:eb:
         b4:2e:15:c8:f3:11:cc:ba:e5:d4:3c:c5:1c:e0:39:4a:e7:67:
         87:23:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:35:44 2026 by rpki-client