This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
File:                     w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft (raw, json)
Hash identifier:          X/uuZ3rc3t8MG9zO6HUj2HdbT8kZGRMswQJrp4xBY3E=
Subject key identifier:   08:2F:6C:DB:C8:26:3E:CD:3E:1C:F5:31:ED:9B:03:05:04:4E:E0:47
Authority key identifier: C3:69:59:F6:27:BF:3F:94:AE:15:5C:10:2E:73:DB:1C:07:FB:DD:78
Certificate issuer:       /CN=C36959F627BF3F94AE155C102E73DB1C07FBDD78
Certificate serial:       4ACC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
Manifest number:          4ACC
Signing time:             Sun 25 Jan 2026 20:58:28 +0000
Manifest this update:     Sun 25 Jan 2026 20:58:28 +0000
Manifest next update:     Mon 26 Jan 2026 02:58:28 +0000
Files and hashes:         1: w2lZ9ie_P5SuFVwQLnPbHAf73Xg.crl (hash: 2lnsENuZFgnvo0OgQSCadhnq2kfGGl4XNGOAzkeqtcI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19148 (0x4acc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C36959F627BF3F94AE155C102E73DB1C07FBDD78
        Validity
            Not Before: Jan 25 20:58:28 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=082F6CDBC8263ECD3E1CF531ED9B0305044EE047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:60:c5:b6:29:37:32:7f:68:0e:8f:d2:f0:
                    a2:e8:2d:7e:22:15:da:3a:ef:2c:ce:5a:81:07:35:
                    35:4b:4b:16:a4:de:a1:2d:a4:f4:23:09:5f:43:db:
                    a5:9b:78:35:cc:ab:97:0c:52:d1:81:26:73:3e:af:
                    b2:59:71:71:bc:8b:56:9c:57:b2:ed:ca:05:d0:b9:
                    78:1a:c5:e0:89:53:30:9d:8f:e9:e7:a7:d1:c9:9a:
                    b6:8d:a9:8c:09:a2:29:ea:1c:77:e4:7e:02:01:4c:
                    90:0a:06:31:c5:2a:c2:ec:a2:b8:32:93:0b:b4:78:
                    58:7f:94:ce:3c:b7:1b:a9:50:78:a0:2e:24:88:77:
                    03:3f:64:34:32:9d:05:ab:77:f2:3c:57:6e:e1:95:
                    3f:2f:19:db:27:5a:b5:eb:90:a0:9a:5f:55:a5:d2:
                    53:bb:db:21:c8:c8:55:ba:95:7d:7a:c0:9a:fe:63:
                    35:d7:0d:92:1b:9c:5e:82:3e:a0:56:bb:4c:e3:19:
                    76:ec:00:95:46:30:b4:f1:d8:9b:a7:b9:90:34:38:
                    3f:3a:e9:63:40:81:8d:52:2e:00:ee:5b:f4:b1:12:
                    c5:2c:5d:42:02:7d:a1:56:4b:45:a5:e4:f3:ce:30:
                    d9:1f:e9:d7:69:48:92:db:3f:07:51:c9:f3:ed:72:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:6C:DB:C8:26:3E:CD:3E:1C:F5:31:ED:9B:03:05:04:4E:E0:47
            X509v3 Authority Key Identifier:
                keyid:C3:69:59:F6:27:BF:3F:94:AE:15:5C:10:2E:73:DB:1C:07:FB:DD:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:0b:24:0b:68:55:87:2b:a8:ec:53:cf:23:02:7e:ed:26:
         da:69:0f:30:a5:31:85:d6:8d:03:30:6d:32:2a:66:b2:e0:0b:
         61:00:58:7f:eb:64:97:ee:67:ed:99:6a:05:15:1e:dd:d4:8f:
         96:05:ff:eb:69:9f:39:51:c6:d0:76:3d:5d:3f:7a:2d:fc:4d:
         5d:06:4d:65:91:1b:d1:b7:dd:75:bc:fa:44:3d:1d:03:c3:49:
         3d:12:8c:99:1d:a9:3f:57:c2:0f:65:ac:ba:b5:98:67:4f:a3:
         46:af:2b:81:69:f3:e1:75:ff:10:9e:69:b6:2f:74:4f:45:43:
         a2:e3:62:42:54:29:a0:f6:2c:50:d0:78:e3:82:be:7e:b3:fd:
         ab:80:2d:d2:ed:ea:d1:1a:cb:81:ac:5c:de:3f:ee:f9:39:e3:
         40:a6:2b:b9:3b:32:c4:8a:5e:98:c5:ad:5b:8c:d0:b0:ee:d5:
         dc:96:a3:f0:f5:4a:49:58:6f:eb:88:fe:9d:8a:c1:3e:8f:6a:
         96:f7:16:83:9d:01:d1:68:9d:aa:ba:14:78:0c:e7:44:2a:3b:
         e1:07:9d:75:4f:a6:92:20:5d:52:ae:46:69:23:2d:fb:b1:c7:
         ec:bd:09:a4:d2:c5:06:00:b7:c1:98:2c:8c:92:33:6e:5b:a9:
         15:2f:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:10:42 2026 by rpki-client