This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
File:                     MtXsFcXlZORw7HsUzUfeLYYqzoM.mft (raw, json)
Hash identifier:          kN+VGb3B+rMQ+ys+KNac4elfyMxFYE6eh9U86RnkEws=
Subject key identifier:   47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
Certificate issuer:       /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Certificate serial:       07A8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
Manifest number:          07A0
Signing time:             Sat 06 Dec 2025 21:20:54 +0000
Manifest this update:     Sat 06 Dec 2025 21:20:54 +0000
Manifest next update:     Sun 07 Dec 2025 03:20:54 +0000
Files and hashes:         1: HP2pPWqilKqEwxxLYf1Bc0eNRZ8.roa (hash: nzM/sVo6T3wrJOKA8s9C/r1i/A+SHE4RxkcR9ZuDMqw=)
                          2: MtXsFcXlZORw7HsUzUfeLYYqzoM.crl (hash: mBn9DpnlKVrGy71MEMtYkQdHMVybEhx3AD26p2urlqQ=)
                          3: bC40d1-ghgM21ALWbp1O1UkgkdU.roa (hash: 9yTQDJvjPR2trUFfN17YffGLD8jC8nwJrrCPuFbW2Vc=)
                          4: dj52fO6wCS8Lsoe-ihgKdkrnwnE.roa (hash: 7aICgRrTtrePB+0YhNu9XutmrrOoUeqPXvBeqh7Qv/Y=)
                          5: mrsHKrTmE4mOslEo5lBsb9iRJlk.roa (hash: a/F6thmLhHVyrowSSbW9el8yqJWv7IOkNKEtetCNUq8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
        Validity
            Not Before: Dec  6 21:20:54 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=47AC346E7B3AC13DA66FB22DEB396C0EE042F7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:ad:80:a7:c7:cb:d9:7d:75:2c:0c:3f:cd:
                    c2:0d:d0:0f:94:80:71:80:08:b7:0d:13:d2:22:2e:
                    1f:69:28:26:a3:1f:7b:5b:82:d2:b7:18:d1:6b:dc:
                    dd:7a:40:ed:ab:f0:fa:0b:60:77:af:60:f3:87:e8:
                    42:da:79:19:1c:dc:e1:96:7a:b5:cd:15:32:74:d9:
                    78:00:f9:ed:c6:df:84:c8:58:88:9a:91:31:55:c1:
                    21:2d:57:8c:47:bf:a1:ce:cc:9b:dd:07:18:30:67:
                    a2:a9:94:4c:69:ea:53:21:88:d6:5c:10:c3:f1:a7:
                    b4:90:07:76:2e:23:65:d9:ee:4a:48:ab:82:aa:20:
                    49:96:56:a2:82:28:70:db:75:f7:51:7d:82:16:97:
                    b5:05:af:af:f5:ea:ee:ec:4a:e0:12:d8:ba:30:1b:
                    11:b3:aa:d5:db:a9:3d:12:36:63:cd:09:e9:b8:b4:
                    4d:cc:4b:d0:a9:a2:d2:e9:66:a0:cd:7a:e6:1c:b2:
                    09:c2:0c:7a:5e:5c:13:94:b5:64:28:13:c3:a6:c1:
                    02:5f:67:c7:b0:62:2a:2e:00:c8:15:04:d7:4f:59:
                    e8:8c:7f:84:b6:f2:3d:50:37:04:31:c8:8a:88:b6:
                    4a:77:c9:be:89:01:e8:ca:76:2c:05:d7:91:52:25:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
            X509v3 Authority Key Identifier:
                keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4b:de:b0:04:ba:3d:1a:cf:73:22:58:72:ca:78:26:da:e2:
         11:db:6d:c2:3e:48:87:35:ca:ff:33:fb:60:f0:ff:dc:59:bc:
         ba:5a:b9:d1:71:8d:38:8a:19:81:e9:7c:15:88:91:1e:e8:e1:
         30:28:29:33:11:0d:c1:ce:e2:22:8b:fe:c2:29:0c:75:b9:66:
         d6:ae:bf:91:05:5b:ff:bd:bf:18:fc:13:8e:3e:ee:fd:cd:e3:
         03:ca:68:80:f1:34:81:09:65:10:9d:cb:60:70:67:47:e8:e7:
         b9:82:cb:1a:71:42:0d:26:b9:f5:2d:1b:4c:2a:15:7d:e4:80:
         33:30:77:ec:45:84:5f:c0:38:95:71:a3:69:48:6c:ff:5b:65:
         3a:89:08:58:80:47:0f:a0:86:68:00:ae:f5:75:a7:d6:7d:f2:
         49:52:21:da:0e:85:c2:08:b0:53:c5:3f:8a:c8:b0:1b:d5:89:
         1c:f6:be:67:ed:e3:fa:44:2f:44:7d:a9:cd:33:5e:c3:65:b1:
         ce:54:40:1d:59:cd:f9:b9:e9:2c:82:f2:d1:c5:85:51:35:5f:
         92:45:ee:2d:cb:8e:fb:9b:4f:71:fc:f6:82:bf:33:71:27:99:
         73:a2:bd:d3:4b:ac:0a:29:ad:57:04:03:e2:7c:de:12:ca:68:
         73:8c:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----