This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
File:                     fG2F62AxocqYwos7xhqYL63H-Eo.mft (raw, json)
Hash identifier:          btknZgqbwxdrfvVMVLqprksoUvIimSBbjLmvVD0Gmjw=
Subject key identifier:   19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33
Authority key identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A
Certificate issuer:       /CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
Certificate serial:       01B4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
Manifest number:          01B4
Signing time:             Sun 25 Jan 2026 20:57:00 +0000
Manifest this update:     Sun 25 Jan 2026 20:57:00 +0000
Manifest next update:     Mon 26 Jan 2026 02:57:00 +0000
Files and hashes:         1: fG2F62AxocqYwos7xhqYL63H-Eo.crl (hash: 3eBH1civKGYIjqZzJqIsUWL3AnhonuG5eOmN7edaJX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
        Validity
            Not Before: Jan 25 20:57:00 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=1928F0D1BE79DB8D4C1701ED62EA80C315DEAE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:40:f3:65:2d:5b:b7:39:73:47:f4:69:be:
                    a0:6b:ce:c9:bd:2b:3c:cb:40:99:38:58:71:1b:d7:
                    b9:f7:54:b8:1a:f3:0f:50:b9:a4:9d:4b:95:96:8a:
                    dd:ff:d9:8f:0b:34:ff:73:51:6a:b6:96:d1:09:a6:
                    e8:b8:86:df:dc:ae:0c:1e:2d:98:be:06:07:00:2a:
                    1b:cb:28:a0:b5:4b:49:72:2c:bd:1c:80:fe:38:ac:
                    f7:52:6f:0c:ce:24:33:4e:6d:3b:16:a5:ea:a1:ba:
                    37:4e:6c:bf:ce:c2:9e:25:56:2b:d1:67:49:b2:79:
                    1b:0b:b6:91:f1:36:44:5d:d3:91:56:33:26:cc:ab:
                    f0:d9:03:e5:5b:ab:d5:5b:b2:26:75:9d:46:51:bb:
                    29:7e:51:81:97:d4:b3:66:86:08:0f:1a:43:41:83:
                    65:5e:e4:b3:d9:35:35:62:0f:de:c5:c1:31:35:f7:
                    fb:1e:00:28:9a:4a:28:a0:d8:18:8d:0f:fd:61:d5:
                    fb:8f:c3:95:2b:58:89:36:dd:4c:eb:9b:f1:86:4c:
                    25:19:f5:c3:68:7d:7f:e8:3a:01:aa:4a:de:61:d7:
                    99:ee:4a:23:f3:fa:a0:5b:f6:72:34:aa:49:cb:67:
                    a3:32:1e:51:4c:84:aa:d4:4d:fc:c9:60:9c:da:a3:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33
            X509v3 Authority Key Identifier:
                keyid:7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:80:11:60:9a:c0:6e:3c:c8:3f:70:fd:eb:cd:6a:4f:6f:ab:
         ab:67:1a:28:4b:2b:74:cf:f4:7e:34:a0:bb:e3:f2:b9:a7:61:
         1b:61:b4:77:e6:b8:f7:f2:e6:04:31:03:ec:b2:87:01:98:0f:
         45:87:17:42:ea:9a:02:fd:12:20:23:69:20:aa:59:de:96:61:
         cb:69:ae:58:c8:07:a7:12:99:43:f8:b5:da:b0:9e:a4:48:a9:
         69:3d:bf:e2:bb:ff:59:20:82:73:d4:6c:fd:84:d8:1c:f3:b5:
         af:41:29:fd:9d:bb:d1:0c:40:98:44:57:c6:00:87:78:a2:f3:
         0c:db:1a:01:30:14:da:83:e7:00:4a:ab:44:bf:90:46:8b:6d:
         f6:2d:20:e0:3f:af:a5:26:06:bf:00:62:6f:ed:f2:8a:13:18:
         44:a8:17:09:d9:8d:f8:c1:40:d6:55:2d:56:dc:cf:5e:5f:3b:
         94:20:93:d3:96:c0:bf:18:32:15:39:75:65:26:d2:5e:9f:39:
         8d:fe:8b:0a:d1:db:26:03:51:30:3c:83:02:94:7e:e1:14:ce:
         39:49:40:9b:94:b5:b8:4c:c7:93:11:03:c1:08:7f:d5:86:46:
         5c:d6:ec:8c:38:72:fe:16:ef:d8:d9:4e:6f:1d:3f:db:42:a1:
         64:fa:c5:19
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
RDg1RUI2MDMxQTFDQTk4QzI4QjNCQzYxQTk4MkZBREM3Rjg0QTAeFw0yNjAxMjUy
MDU3MDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDE5MjhGMEQxQkU3OURC
OEQ0QzE3MDFFRDYyRUE4MEMzMTVERUFFMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMw0DzZS1btzlzR/RpvqBrzsm9KzzLQJk4WHEb17n3VLga8w9Q
uaSdS5WWit3/2Y8LNP9zUWq2ltEJpui4ht/crgweLZi+BgcAKhvLKKC1S0lyLL0c
gP44rPdSbwzOJDNObTsWpeqhujdObL/Owp4lVivRZ0myeRsLtpHxNkRd05FWMybM
q/DZA+Vbq9VbsiZ1nUZRuyl+UYGX1LNmhggPGkNBg2Ve5LPZNTViD97FwTE19/se
ACiaSiig2BiND/1h1fuPw5UrWIk23Uzrm/GGTCUZ9cNofX/oOgGqSt5h15nuSiPz
+qBb9nI0qknLZ6MyHlFMhKrUTfzJYJzaozwjAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUGSjw0b55241MFwHtYuqAwxXerjMwHwYDVR0jBBgwFoAUfG2F62AxocqYwos7
xhqYL63H+EowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw
OC9mRzJGNjJBeG9jcVl3b3M3eGhxWUw2M0gtRW8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZHMkY2MkF4b2NxWXdvczd4aHFZTDYzSC1Fby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDgvZkcyRjYyQXhvY3FZ
d29zN3hocVlMNjNILUVvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJKAEWCawG48yD9w/evNak9vq6tnGihLK3TP9H40oLvj8rmnYRthtHfmuPfy
5gQxA+yyhwGYD0WHF0LqmgL9EiAjaSCqWd6WYctprljIB6cSmUP4tdqwnqRIqWk9
v+K7/1kggnPUbP2E2Bzzta9BKf2du9EMQJhEV8YAh3ii8wzbGgEwFNqD5wBKq0S/
kEaLbfYtIOA/r6UmBr8AYm/t8ooTGESoFwnZjfjBQNZVLVbcz15fO5Qgk9OWwL8Y
MhU5dWUm0l6fOY3+iwrR2yYDUTA8gwKUfuEUzjlJQJuUtbhMx5MRA8EIf9WGRlzW
7Iw4cv4W79jZTm8dP9tCoWT6xRk=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:58 2026 by rpki-client