This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft
File:                     u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft (raw, json)
Hash identifier:          pmCREtUsJTf5lyU9ofiEjxFnz4Sf8aR1Qhr67TuvFwA=
Subject key identifier:   07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED
Authority key identifier: BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E
Certificate issuer:       /CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E
Certificate serial:       0111
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft
Manifest number:          0111
Signing time:             Sun 25 Jan 2026 20:57:28 +0000
Manifest this update:     Sun 25 Jan 2026 20:57:28 +0000
Manifest next update:     Mon 26 Jan 2026 02:57:28 +0000
Files and hashes:         1: u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl (hash: lsO0S+UM28zHTxFaRAQJl9In61nS4ipUNQJQSHnW1vo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBA1E412C28B4526C598C0BF7BC3DC83A4A5937E
        Validity
            Not Before: Jan 25 20:57:28 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=07E57340ECD3535DFA997C96B96862C1C595FBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:94:11:9b:7c:99:4c:86:d0:03:bf:01:01:
                    e7:1e:f1:6e:57:b8:72:cd:8e:78:ec:13:99:6b:4b:
                    a8:42:36:0a:8e:85:bf:2b:61:24:a8:8c:7b:e5:92:
                    3c:bd:bc:b0:70:58:a6:e0:7d:6a:2f:d2:3c:f9:80:
                    d9:56:e5:8a:9c:4a:54:1f:f5:92:1f:2d:d7:48:f7:
                    ba:3d:31:be:40:2a:6e:f7:33:89:21:4b:e1:6a:8b:
                    c8:17:87:85:c2:d1:b0:4c:f5:5b:63:c2:18:f0:54:
                    52:80:27:0e:45:42:fe:a5:8c:eb:06:23:9d:7b:c7:
                    f0:6a:38:8a:fb:1d:c5:1e:d7:e3:c4:47:f0:98:81:
                    87:e9:cf:5f:40:55:fe:41:53:25:58:ec:b7:d4:c5:
                    48:f5:af:02:df:a1:05:18:53:15:27:58:e4:0a:20:
                    4f:46:ef:d1:fd:7b:91:a3:aa:5d:cf:b8:11:72:af:
                    07:87:c2:bf:67:25:f5:2f:28:9d:a6:de:21:06:fc:
                    46:e9:cc:af:e5:2b:e6:1b:47:4b:22:bb:07:c3:b7:
                    62:db:57:cd:b8:be:90:c4:9e:6c:43:c9:5e:8a:e7:
                    6d:35:42:68:be:41:72:40:91:c2:72:87:1b:f0:62:
                    24:8e:e2:a6:6f:46:a6:f9:c9:36:3c:ff:03:5d:62:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E5:73:40:EC:D3:53:5D:FA:99:7C:96:B9:68:62:C1:C5:95:FB:ED
            X509v3 Authority Key Identifier:
                keyid:BB:A1:E4:12:C2:8B:45:26:C5:98:C0:BF:7B:C3:DC:83:A4:A5:93:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u6HkEsKLRSbFmMC_e8Pcg6Slk34.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/u6HkEsKLRSbFmMC_e8Pcg6Slk34.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:bd:56:5d:f6:21:91:dc:9c:1d:38:8e:e2:39:86:9d:13:
         6b:9d:ac:2e:0a:98:2f:69:03:3f:b8:a1:44:25:8a:fd:41:73:
         c1:c4:97:d4:98:26:7d:9e:bc:77:db:74:82:c6:b6:49:ca:7e:
         96:5e:b8:15:1a:49:a8:60:bd:0d:42:b6:4c:e8:dd:72:88:d5:
         3b:00:40:01:5a:38:b2:bc:3f:2b:81:7f:4d:50:ff:4a:5a:88:
         cc:f2:d3:cb:0f:76:24:43:99:52:67:b6:8b:21:b5:bc:cb:2e:
         43:f2:b2:69:51:57:2c:72:cc:f6:f6:d2:d4:fb:90:74:92:bf:
         c6:f3:db:cd:ec:f6:dc:f7:41:b9:0a:09:d4:fe:f5:c8:db:3a:
         10:0a:a7:03:f7:45:40:0d:75:82:4e:41:19:37:45:78:79:02:
         dc:cc:9e:95:9e:49:27:06:fe:53:4a:ec:62:a2:fc:3c:5a:40:
         cf:04:25:48:9d:49:0f:04:1d:79:e4:f2:6c:24:12:73:2c:95:
         48:a6:29:13:1d:8c:3a:0a:47:0d:00:80:18:1a:b5:4a:0a:9f:
         c0:62:46:e4:0c:e3:6b:8f:6d:be:bb:23:b5:68:b2:c0:1a:fd:
         a5:af:49:f1:b8:a6:78:cf:02:27:9f:77:1c:25:e2:50:7f:5f:
         fc:c4:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:06:54 2026 by rpki-client