This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft
File:                     JPjms6PCZmAzB5fwXYfRbCXjEMg.mft (raw, json)
Hash identifier:          0D5LJmi7LZBDAkF6nqOm0GmNH+3NAP2R/siBpJ1ROis=
Subject key identifier:   F1:6A:13:E1:CE:56:D7:F3:BC:AC:96:AB:F4:BE:60:12:51:42:2C:6E
Authority key identifier: 24:F8:E6:B3:A3:C2:66:60:33:07:97:F0:5D:87:D1:6C:25:E3:10:C8
Certificate issuer:       /CN=24F8E6B3A3C26660330797F05D87D16C25E310C8
Certificate serial:       19C6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft
Manifest number:          19C6
Signing time:             Sun 25 Jan 2026 07:28:42 +0000
Manifest this update:     Sun 25 Jan 2026 07:28:42 +0000
Manifest next update:     Sun 25 Jan 2026 13:28:42 +0000
Files and hashes:         1: JPjms6PCZmAzB5fwXYfRbCXjEMg.crl (hash: Eg6ADxl2ECs2I7SM0MPZllx6Kv9gVzTDeXqxfiA+qx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6598 (0x19c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24F8E6B3A3C26660330797F05D87D16C25E310C8
        Validity
            Not Before: Jan 25 07:28:42 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=F16A13E1CE56D7F3BCAC96ABF4BE601251422C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:47:30:ae:48:e3:fd:af:ec:ba:0c:1e:57:
                    c7:65:e7:1c:b2:c4:6c:df:12:61:20:70:aa:f0:d2:
                    6c:4d:f5:f8:d8:72:c8:3e:a5:66:1f:bd:e7:32:91:
                    55:06:b1:a1:72:be:5b:3a:45:4e:d5:29:c1:d3:79:
                    5f:67:40:de:39:72:89:85:33:ec:3c:f1:af:92:41:
                    0b:71:ca:59:44:9a:ed:38:7d:dc:76:6c:27:47:42:
                    14:b1:a0:87:31:8a:4b:a8:cf:27:08:e9:f0:11:ae:
                    38:61:d5:80:6b:f5:fd:11:71:42:db:1f:64:06:40:
                    7e:d6:bf:59:4a:85:45:92:7e:1e:d1:ad:43:17:d0:
                    70:15:82:24:be:6c:37:ea:6c:00:b4:16:60:6a:ed:
                    f1:08:8f:93:33:f9:f3:bf:69:84:c3:e7:7c:68:49:
                    89:da:47:4a:06:16:f1:3d:76:ac:4c:0a:53:15:95:
                    0c:70:07:2c:12:76:04:46:db:e2:3c:95:9b:06:0b:
                    c7:31:d6:a4:7c:b1:63:a8:9a:c4:9f:7f:0c:37:9e:
                    ae:f7:32:6e:7f:de:45:24:4c:6c:7a:aa:bf:9b:17:
                    a1:90:59:ec:3a:b7:18:90:70:15:6f:06:40:62:9c:
                    aa:96:05:a9:58:88:6b:6e:72:8a:61:c4:99:ba:eb:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:13:E1:CE:56:D7:F3:BC:AC:96:AB:F4:BE:60:12:51:42:2C:6E
            X509v3 Authority Key Identifier:
                keyid:24:F8:E6:B3:A3:C2:66:60:33:07:97:F0:5D:87:D1:6C:25:E3:10:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:e7:15:89:b9:69:85:91:53:c6:8a:e3:1e:44:b5:b5:b7:
         39:7c:85:8d:cf:7f:fa:fb:de:e2:84:33:d8:96:72:e0:c0:b8:
         5b:cc:5f:4a:d6:2e:d9:3b:b5:62:4d:77:47:4e:0b:ec:a0:2d:
         3e:8f:9d:cb:b7:2c:84:b8:79:cb:76:f1:34:c7:ae:f2:62:74:
         45:00:c6:ee:99:8f:39:6b:a3:bc:b1:4b:6f:dd:d7:6d:ce:c4:
         5a:a6:1d:93:ce:4f:cb:d5:5e:8d:20:54:7e:a7:c2:7d:55:73:
         e0:eb:4d:ae:59:ba:ed:1d:7d:1e:b8:c0:c9:dc:cf:0c:00:f8:
         ef:ae:e1:8e:30:1c:8b:9b:f2:29:d3:91:2e:be:95:f2:33:25:
         5e:a0:cf:e1:ab:c5:70:ec:69:f6:16:88:d9:b7:54:1c:97:f1:
         fe:df:16:58:83:09:cc:0c:5f:b1:a4:e1:2e:73:04:43:23:4e:
         73:84:a7:7d:e8:c0:3a:d8:13:2c:1b:88:19:fc:81:d5:1d:2c:
         5e:0a:e6:dd:8a:a8:a6:35:2a:f6:b5:02:ef:b3:2c:83:79:43:
         ec:8c:19:8a:87:80:dd:7f:7a:04:cc:5f:fb:e6:62:b7:f1:b1:
         67:f5:0d:29:fe:08:0f:c1:2b:7d:13:81:0e:33:14:c7:0c:6b:
         8e:25:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:32 2026 by rpki-client