This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
File:                     5QLeLGCGpmKEuAzbe1rAwSzD88I.mft (raw, json)
Hash identifier:          fk/ThSk/KPxya3QDe5f/twydn8nxiGbIDmMghi4Ei3E=
Subject key identifier:   A4:AF:19:62:66:06:60:15:FB:92:30:A5:EC:33:F6:89:49:09:A1:AB
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Certificate issuer:       /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial:       0ABD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
Manifest number:          0AAC
Signing time:             Sun 25 Jan 2026 06:28:19 +0000
Manifest this update:     Sun 25 Jan 2026 06:28:19 +0000
Manifest next update:     Sun 25 Jan 2026 12:28:19 +0000
Files and hashes:         1: 0miT1qb3sPNiM6EZTvVrHTe5sXk.roa (hash: yyQaDYM0U26nrGrY9My6oAjBxf+bycNmeZJpp10aiqE=)
                          2: 5QLeLGCGpmKEuAzbe1rAwSzD88I.crl (hash: 547vNAfwTghb5wc+b3mQCQ00d/MbLISNqitihma0m9U=)
                          3: LO8HMVPffvruOjzIbuw1ImZtHR0.roa (hash: 8un8V406hwQMw02wGz5lRlh72V8cmTt9t+wyq3X9cBc=)
                          4: O3gZx3V23G7fmgkzzdZ3ZPqfJxs.roa (hash: 7qtX9vNeQlnn5LJAJiPLqpLwF+FjgCLvtipGIf+F088=)
                          5: OtIpZlJVrqBZv4DYm3n7oxicAeY.roa (hash: u0jmtvmR60BP6iQLbAOxNAJQM+4qmDDOk9QC2DnMX5U=)
                          6: V6CSeHmY5PoyF2DAnLSvowP5W7g.roa (hash: ixxjdmX9NayZGHWB7qwYCVGnmCyIAj0QVVH+7LNN9uM=)
                          7: hLY4RJ8LzPh0Lkk02qjHRzc5GfQ.roa (hash: Q+KpZ+R+AE/KrTcEOszITKq1nc6PTLOmSwHuQcEJWb8=)
                          8: wyyqcUgR0LW5P_sNpH7jNfIyFZ4.roa (hash: OAz3ozWKHsuECXjioaMko7tiXdvS4VoHusuQi5R3sFI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
        Validity
            Not Before: Jan 25 06:28:19 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=A4AF196266066015FB9230A5EC33F6894909A1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fa:f4:0a:f9:27:63:42:b2:9b:15:2d:b5:23:
                    8d:58:04:ca:e6:08:81:7d:99:da:4b:5f:63:da:7b:
                    f4:8d:d1:69:51:64:1a:ca:86:10:38:b2:1a:f0:b2:
                    76:75:9d:5f:36:3a:9e:6e:c0:fb:97:40:ce:86:c2:
                    6d:a3:06:1e:fa:67:13:a6:de:66:30:f3:d9:d1:27:
                    28:ec:09:d1:ef:b7:ba:0b:d7:6d:f7:3f:fc:2f:96:
                    b9:be:53:84:03:6e:0c:69:32:04:1a:3a:d8:75:89:
                    d2:d2:dd:8f:30:18:3e:98:32:84:fa:8d:35:92:e0:
                    fe:b6:f0:ef:2c:2c:9f:b2:60:96:d7:48:0d:d4:d0:
                    9b:36:6b:bc:4c:51:ec:70:2d:ea:1e:f4:66:74:0d:
                    43:00:2b:70:a8:96:a0:c0:5b:40:92:f1:66:29:13:
                    a2:3a:11:db:3a:93:5c:3e:12:14:db:41:cf:66:68:
                    e2:e0:85:17:84:86:63:42:1b:12:68:a1:2b:8a:f1:
                    d2:9d:42:94:4a:5e:70:82:6d:11:07:b5:87:fd:c5:
                    be:c4:a4:9a:dd:39:39:e3:91:52:9b:d1:36:dd:98:
                    64:8a:32:91:96:cc:00:75:73:e7:db:0c:1f:e1:f7:
                    df:4e:61:45:47:d8:bb:21:05:63:d7:23:d9:a2:50:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:19:62:66:06:60:15:FB:92:30:A5:EC:33:F6:89:49:09:A1:AB
            X509v3 Authority Key Identifier:
                keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:72:a7:6b:1d:f3:2a:e5:ed:f7:d7:a3:e5:6c:7e:c5:65:ee:
         de:f5:58:b3:92:d0:a1:27:a8:00:df:7e:c0:2b:9b:06:c3:bd:
         f2:ff:b5:25:4d:5b:ad:65:64:79:1c:9e:ab:df:96:84:fd:7e:
         92:d1:83:cf:98:cc:33:80:de:6d:fd:2c:6c:ea:73:ce:b2:c9:
         23:21:30:e3:69:f3:e0:bf:86:11:b2:f3:82:2c:6b:6b:2f:a4:
         48:93:43:3b:e1:aa:7e:3f:d3:ae:d5:4c:41:24:51:b2:2b:a2:
         47:9f:2a:19:83:56:f6:04:65:1d:06:d7:04:50:fb:23:f0:74:
         57:6a:74:9d:6d:51:3b:c2:ed:77:3a:f0:9a:7f:27:3e:77:79:
         dc:20:41:ca:1b:4e:63:49:d8:fb:7d:92:85:de:bc:36:a7:cd:
         9b:a2:0c:67:c3:5e:ad:c8:6a:49:3a:0a:9e:c7:00:cb:cd:9d:
         51:c2:12:19:8d:b5:2c:4b:ac:d2:a1:d3:cc:63:18:2e:77:78:
         14:b0:01:10:04:33:4e:d0:aa:31:d3:a4:17:5a:e7:ec:ae:e8:
         0e:b1:c4:84:21:c0:15:fe:cd:8e:37:96:ab:fc:29:16:3f:9d:
         13:ad:86:40:34:a0:f5:a5:0b:e8:1b:a2:90:4e:bb:40:83:a4:
         4b:6e:99:91
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTUw
MkRFMkM2MDg2QTY2Mjg0QjgwQ0RCN0I1QUMwQzEyQ0MzRjNDMjAeFw0yNjAxMjUw
NjI4MTlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEE0QUYxOTYyNjYwNjYw
MTVGQjkyMzBBNUVDMzNGNjg5NDkwOUExQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm+vQK+SdjQrKbFS21I41YBMrmCIF9mdpLX2Pae/SN0WlRZBrK
hhA4shrwsnZ1nV82Op5uwPuXQM6Gwm2jBh76ZxOm3mYw89nRJyjsCdHvt7oL1233
P/wvlrm+U4QDbgxpMgQaOth1idLS3Y8wGD6YMoT6jTWS4P628O8sLJ+yYJbXSA3U
0Js2a7xMUexwLeoe9GZ0DUMAK3ColqDAW0CS8WYpE6I6Eds6k1w+EhTbQc9maOLg
hReEhmNCGxJooSuK8dKdQpRKXnCCbREHtYf9xb7EpJrdOTnjkVKb0TbdmGSKMpGW
zAB1c+fbDB/h999OYUVH2LshBWPXI9miUC/vAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUpK8ZYmYGYBX7kjCl7DP2iUkJoaswHwYDVR0jBBgwFoAU5QLeLGCGpmKEuAzb
e1rAwSzD88IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE1
NC81UUxlTEdDR3BtS0V1QXpiZTFyQXdTekQ4OEkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzVRTGVMR0NHcG1LRXVBemJlMXJBd1N6RDg4SS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNTQvNVFMZUxHQ0dwbUtF
dUF6YmUxckF3U3pEODhJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACVyp2sd8yrl7ffXo+VsfsVl7t71WLOS0KEnqADffsArmwbDvfL/tSVNW61l
ZHkcnqvfloT9fpLRg8+YzDOA3m39LGzqc86yySMhMONp8+C/hhGy84Isa2svpEiT
Qzvhqn4/067VTEEkUbIrokefKhmDVvYEZR0G1wRQ+yPwdFdqdJ1tUTvC7Xc68Jp/
Jz53edwgQcobTmNJ2Pt9koXevDanzZuiDGfDXq3Iakk6Cp7HAMvNnVHCEhmNtSxL
rNKh08xjGC53eBSwARAEM07QqjHTpBda5+yu6A6xxIQhwBX+zY43lqv8KRY/nROt
hkA0oPWlC+gbopBOu0CDpEtumZE=
-----END CERTIFICATE-----