This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
File:                     4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json)
Hash identifier:          YqP66+0Zk1GeAi4DDDsuRvx+lrM0aNV8Bf9/pbj19Lo=
Subject key identifier:   51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0
Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
Certificate issuer:       /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Certificate serial:       19C6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
Manifest number:          19C3
Signing time:             Sun 25 Jan 2026 02:29:07 +0000
Manifest this update:     Sun 25 Jan 2026 02:29:07 +0000
Manifest next update:     Sun 25 Jan 2026 08:29:07 +0000
Files and hashes:         1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: PeLhNmm1efKeIu/nCnNQHhHResu7aSwTR0INn5Q1Sq0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6598 (0x19c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
        Validity
            Not Before: Jan 25 02:29:07 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72:
                    42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8:
                    13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de:
                    f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9:
                    59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75:
                    6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13:
                    26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc:
                    a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66:
                    3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69:
                    48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14:
                    8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e:
                    22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64:
                    0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee:
                    9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83:
                    ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb:
                    c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99:
                    a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05:
                    1b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0
            X509v3 Authority Key Identifier:
                keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:7a:cd:a7:9c:73:47:6d:d5:bc:9f:13:70:31:0f:f1:0f:
         2a:57:0d:bb:6f:5a:61:b3:d4:27:98:39:c7:10:47:1f:62:39:
         46:33:1c:d5:91:e3:a0:b0:9a:ae:18:69:be:30:94:d8:ea:0b:
         ab:15:cd:5b:31:ec:04:a6:89:a1:c2:c7:11:3a:b2:5b:44:00:
         bf:51:4f:2e:ae:71:23:82:8c:8d:ad:dd:a1:e3:9b:0c:f5:3f:
         57:a2:06:9c:d9:90:db:45:14:44:f9:c0:e1:3f:34:4d:f0:ed:
         0d:0e:1a:39:46:bb:d5:27:f6:8a:40:21:fd:4a:54:29:e2:ce:
         29:61:71:fe:1e:e0:a5:d8:6d:e3:d6:37:76:dc:ec:7c:6f:d9:
         74:f2:cd:84:85:66:d5:eb:d5:ed:9a:12:7b:c7:24:7b:54:d1:
         61:3a:9c:8d:18:70:90:cd:19:e5:c4:db:51:84:ce:78:f2:79:
         67:c5:da:a5:1c:c8:6e:5f:08:16:56:27:c8:49:03:2e:9d:1c:
         6a:83:6f:84:d7:2a:c0:b0:61:9f:8b:f6:90:24:17:00:af:36:
         3d:fb:74:36:34:ae:df:a2:1a:95:c2:fb:1e:bd:d4:73:cf:34:
         d2:ab:11:c1:8f:08:b4:28:8e:a5:9e:f7:ea:ed:53:d0:65:50:
         81:1e:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:48 2026 by rpki-client