This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft
File:                     i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft (raw, json)
Hash identifier:          8SINUgdxK+j6HfRN8q5Kn/67snzURo0crDzzo3HQ8/c=
Subject key identifier:   6B:46:0F:C9:99:83:C8:30:CB:B7:32:0B:1B:58:53:48:55:D0:30:A2
Authority key identifier: 8B:FC:D9:8C:13:46:C5:16:65:27:1F:E1:C5:71:21:BE:FF:45:36:41
Certificate issuer:       /CN=8BFCD98C1346C51665271FE1C57121BEFF453641
Certificate serial:       6D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft
Manifest number:          6D
Signing time:             Sun 25 Jan 2026 20:56:50 +0000
Manifest this update:     Sun 25 Jan 2026 20:56:50 +0000
Manifest next update:     Mon 26 Jan 2026 02:56:50 +0000
Files and hashes:         1: i_zZjBNGxRZlJx_hxXEhvv9FNkE.crl (hash: rwcUppLp0h+XBFPu1XC3icgl8OyBiQiJ90p3rkH7S+k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BFCD98C1346C51665271FE1C57121BEFF453641
        Validity
            Not Before: Jan 25 20:56:50 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=6B460FC99983C830CBB7320B1B58534855D030A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:60:bd:2e:63:c7:47:9a:b9:b8:01:1b:d6:
                    22:0a:8c:15:f5:b3:dc:18:96:72:1e:14:5a:69:e6:
                    39:6d:79:db:b5:82:b7:13:38:8a:18:2b:2f:f1:a8:
                    00:01:14:fa:57:56:18:46:60:1e:bd:5c:f4:ad:19:
                    1c:ea:aa:88:26:8a:cf:ea:79:80:7a:01:39:23:89:
                    d2:70:20:18:34:f4:bb:8b:01:8d:15:b8:9b:08:88:
                    fe:57:bb:0f:ad:3f:f8:30:75:48:d9:22:e6:e0:f6:
                    7a:27:97:a7:de:bf:d4:ab:00:34:20:56:9a:27:3f:
                    e1:79:23:27:31:57:f4:21:d2:5f:1d:90:13:37:d2:
                    b3:f1:68:4d:9c:0b:99:4a:d9:bb:da:8c:c2:d3:61:
                    80:4a:07:bb:a3:bc:c8:29:44:89:92:b1:bc:51:60:
                    df:2a:a7:56:a5:e0:d5:7e:fa:fb:63:05:53:0c:70:
                    9a:dd:40:e0:38:9d:f6:67:bd:07:91:3b:cf:07:49:
                    56:45:af:fc:d2:e6:20:9e:5b:25:63:e0:06:64:82:
                    23:14:89:63:1e:7f:16:81:bc:54:8d:c7:6f:45:56:
                    c4:33:c9:56:2e:90:3d:a7:9c:48:db:72:ff:1c:83:
                    44:16:c0:d1:1e:ac:88:88:e7:57:c4:c9:04:e9:34:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:0F:C9:99:83:C8:30:CB:B7:32:0B:1B:58:53:48:55:D0:30:A2
            X509v3 Authority Key Identifier:
                keyid:8B:FC:D9:8C:13:46:C5:16:65:27:1F:E1:C5:71:21:BE:FF:45:36:41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/i_zZjBNGxRZlJx_hxXEhvv9FNkE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3422/i_zZjBNGxRZlJx_hxXEhvv9FNkE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:14:42:52:33:d9:bf:38:7c:a8:6c:b5:08:8f:57:2c:fa:
         89:68:76:b3:ca:4d:ce:fa:16:cb:fc:27:dc:10:65:39:6e:12:
         b8:57:ef:8b:67:70:b4:a8:21:89:0c:6a:8f:ec:16:30:ab:f5:
         0b:b7:9c:d4:5a:fb:71:b9:7a:a2:4d:47:57:0a:ec:29:4a:f6:
         6e:52:a7:74:a3:ee:6a:cd:dd:af:c3:bd:1e:c4:7d:2b:db:66:
         ab:38:7b:0d:a0:6f:da:37:37:bf:6d:cf:c9:bb:3f:a4:5f:3c:
         47:c0:f0:6a:5a:21:a7:b6:e3:2b:7e:10:8f:7c:76:21:a4:8e:
         a4:7a:22:a5:b1:e8:95:6c:d1:21:76:28:07:a2:a5:a7:0d:a4:
         dd:a3:6c:e6:5d:21:72:eb:70:29:5f:fb:35:37:9e:2f:93:ba:
         a2:43:af:8d:c2:a3:85:e2:1f:bc:e3:50:93:4e:14:68:93:e8:
         d2:3e:1b:e5:70:32:8f:e5:9d:fa:4e:f4:f0:01:c8:a1:01:80:
         bc:b8:8c:43:50:98:54:e4:e4:5b:f8:a3:1b:c6:b3:c6:1c:4b:
         e4:35:0f:99:e6:c1:a3:34:49:5f:ba:59:3b:b9:a7:8d:c5:bc:
         28:81:9a:78:26:b3:69:b3:1c:f3:4c:53:28:6e:f3:69:a2:32:
         be:88:53:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QkZD
RDk4QzEzNDZDNTE2NjUyNzFGRTFDNTcxMjFCRUZGNDUzNjQxMB4XDTI2MDEyNTIw
NTY1MFoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoNkI0NjBGQzk5OTgzQzgz
MENCQjczMjBCMUI1ODUzNDg1NUQwMzBBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALekYL0uY8dHmrm4ARvWIgqMFfWz3BiWch4UWmnmOW1527WCtxM4
ihgrL/GoAAEU+ldWGEZgHr1c9K0ZHOqqiCaKz+p5gHoBOSOJ0nAgGDT0u4sBjRW4
mwiI/le7D60/+DB1SNki5uD2eieXp96/1KsANCBWmic/4XkjJzFX9CHSXx2QEzfS
s/FoTZwLmUrZu9qMwtNhgEoHu6O8yClEiZKxvFFg3yqnVqXg1X76+2MFUwxwmt1A
4Did9me9B5E7zwdJVkWv/NLmIJ5bJWPgBmSCIxSJYx5/FoG8VI3Hb0VWxDPJVi6Q
PaecSNty/xyDRBbA0R6siIjnV8TJBOk0CusCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBRrRg/JmYPIMMu3MgsbWFNIVdAwojAfBgNVHSMEGDAWgBSL/NmME0bFFmUnH+HF
cSG+/0U2QTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDIy
L2lfelpqQk5HeFJabEp4X2h4WEVodnY5Rk5rRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvaV96WmpCTkd4UlpsSnhfaHhYRWh2djlGTmtFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQyMi9pX3paakJOR3hSWmxK
eF9oeFhFaHZ2OUZOa0UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdOUUQlIz2b84fKhstQiPVyz6iWh2s8pNzvoWy/wn3BBlOW4SuFfvi2dwtKgh
iQxqj+wWMKv1C7ec1Fr7cbl6ok1HVwrsKUr2blKndKPuas3dr8O9HsR9K9tmqzh7
DaBv2jc3v23Pybs/pF88R8Dwalohp7bjK34Qj3x2IaSOpHoipbHolWzRIXYoB6Kl
pw2k3aNs5l0hcutwKV/7NTeeL5O6okOvjcKjheIfvONQk04UaJPo0j4b5XAyj+Wd
+k708AHIoQGAvLiMQ1CYVOTkW/ijG8azxhxL5DUPmebBozRJX7pZO7mnjcW8KIGa
eCazabMc80xTKG7zaaIyvohTCA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:11 2026 by rpki-client