This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
File:                     MtXsFcXlZORw7HsUzUfeLYYqzoM.mft (raw, json)
Hash identifier:          bDuI+kM81FKCuYXCg9XJqw9apVnsf2WQ3YaOQ4M7pHU=
Subject key identifier:   47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
Certificate issuer:       /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Certificate serial:       089E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
Manifest number:          0896
Signing time:             Sun 25 Jan 2026 12:00:37 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:37 +0000
Manifest next update:     Sun 25 Jan 2026 18:00:37 +0000
Files and hashes:         1: HP2pPWqilKqEwxxLYf1Bc0eNRZ8.roa (hash: nzM/sVo6T3wrJOKA8s9C/r1i/A+SHE4RxkcR9ZuDMqw=)
                          2: MtXsFcXlZORw7HsUzUfeLYYqzoM.crl (hash: z8lefZPNUlANrcg4vTGS4t9nvToPHTLHQkwyhW2NRKA=)
                          3: bC40d1-ghgM21ALWbp1O1UkgkdU.roa (hash: 9yTQDJvjPR2trUFfN17YffGLD8jC8nwJrrCPuFbW2Vc=)
                          4: dj52fO6wCS8Lsoe-ihgKdkrnwnE.roa (hash: 7aICgRrTtrePB+0YhNu9XutmrrOoUeqPXvBeqh7Qv/Y=)
                          5: mrsHKrTmE4mOslEo5lBsb9iRJlk.roa (hash: a/F6thmLhHVyrowSSbW9el8yqJWv7IOkNKEtetCNUq8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
        Validity
            Not Before: Jan 25 12:00:37 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=47AC346E7B3AC13DA66FB22DEB396C0EE042F7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:ad:80:a7:c7:cb:d9:7d:75:2c:0c:3f:cd:
                    c2:0d:d0:0f:94:80:71:80:08:b7:0d:13:d2:22:2e:
                    1f:69:28:26:a3:1f:7b:5b:82:d2:b7:18:d1:6b:dc:
                    dd:7a:40:ed:ab:f0:fa:0b:60:77:af:60:f3:87:e8:
                    42:da:79:19:1c:dc:e1:96:7a:b5:cd:15:32:74:d9:
                    78:00:f9:ed:c6:df:84:c8:58:88:9a:91:31:55:c1:
                    21:2d:57:8c:47:bf:a1:ce:cc:9b:dd:07:18:30:67:
                    a2:a9:94:4c:69:ea:53:21:88:d6:5c:10:c3:f1:a7:
                    b4:90:07:76:2e:23:65:d9:ee:4a:48:ab:82:aa:20:
                    49:96:56:a2:82:28:70:db:75:f7:51:7d:82:16:97:
                    b5:05:af:af:f5:ea:ee:ec:4a:e0:12:d8:ba:30:1b:
                    11:b3:aa:d5:db:a9:3d:12:36:63:cd:09:e9:b8:b4:
                    4d:cc:4b:d0:a9:a2:d2:e9:66:a0:cd:7a:e6:1c:b2:
                    09:c2:0c:7a:5e:5c:13:94:b5:64:28:13:c3:a6:c1:
                    02:5f:67:c7:b0:62:2a:2e:00:c8:15:04:d7:4f:59:
                    e8:8c:7f:84:b6:f2:3d:50:37:04:31:c8:8a:88:b6:
                    4a:77:c9:be:89:01:e8:ca:76:2c:05:d7:91:52:25:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
            X509v3 Authority Key Identifier:
                keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:d2:cd:e0:09:20:9d:35:ba:3e:0f:f7:aa:72:1b:b2:89:
         67:68:b8:ac:6b:2f:67:ac:df:c3:a2:cf:68:59:9e:b6:95:17:
         7f:e1:a9:23:18:af:d2:74:f3:e6:45:9b:36:20:36:0a:15:01:
         b7:cc:36:10:f4:4f:c1:c8:11:94:ab:a9:fc:34:b0:e5:bf:46:
         32:4c:35:bc:c9:06:27:22:9f:ed:db:8c:6a:b4:e2:2d:c7:f4:
         58:82:07:7e:aa:79:91:14:f7:da:4f:b7:96:8b:b7:56:c1:32:
         64:86:f0:37:61:07:56:b3:a9:d7:32:23:a1:75:7e:a0:6f:67:
         73:6f:95:4e:ed:e4:cc:f8:06:c3:f6:af:d8:ba:d7:22:b7:7e:
         a2:e6:f9:b7:35:d5:59:ce:62:3d:40:5a:d8:73:2c:dc:75:ea:
         ce:46:66:37:3d:e4:97:a2:04:66:78:96:9a:4f:0e:ff:37:14:
         0f:d4:99:53:4b:ad:34:9e:bb:f9:82:a3:7c:44:d6:66:2c:ba:
         59:1a:7d:56:1c:59:92:0e:fe:35:30:2c:f5:36:00:06:c7:cc:
         eb:30:4c:4c:31:56:cd:39:58:d5:b5:4a:15:8f:02:53:df:ef:
         ed:e9:7f:7b:51:5c:58:2c:0f:05:35:bc:7b:7d:33:37:90:a6:
         4e:c1:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----