This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File:                     7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier:          xrZ3FN7GIHVYeLJEvPhpwddjR7OsWKKP7hp9OLEhOLg=
Subject key identifier:   9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer:       /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial:       074D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number:          0743
Signing time:             Sun 25 Jan 2026 17:00:05 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:05 +0000
Manifest next update:     Sun 25 Jan 2026 23:00:05 +0000
Files and hashes:         1: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: 6Ac6da6FQLWnkpYQ238zimvgAwHxlaD2o9XvLPis9GM=)
                          2: SC6m8P0q6p7ntOCpRRKCLD07IV4.roa (hash: F3LkbRuTsF/ZxSWkX81y3jRWbGla7q1/rRTJ2pXLLBQ=)
                          3: Udu4Y2VVSfSvAsDnVgr4ywyw784.roa (hash: b+votEcUwTvuXUiyb8agRXfAYHbNT531+XZyEUMsCjo=)
                          4: esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa (hash: uyPmbNzEpeAABBZYgbGkveGl7ynOz33DLToGYNoP7hg=)
                          5: fotDNxN_sQREMyU_nWg8lpAAvIY.roa (hash: jD3/6TF1DTlEAMRgojNykbybNyv7ZOor/AQZnLJhVXY=)
                          6: nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa (hash: 8DlphKnOC+OQmVIxd6QvTWzWu9l+65jBnGINNbqNneA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
        Validity
            Not Before: Jan 25 17:00:05 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
                    85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
                    14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
                    9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
                    ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
                    d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
                    d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
                    66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
                    26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
                    d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
                    5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
                    0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
                    c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
                    99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
                    e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
                    13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
                    06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
            X509v3 Authority Key Identifier:
                keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:d8:6c:a6:7a:0b:7d:c3:8f:92:a1:81:85:4a:2b:48:a0:
         db:3d:a3:59:9c:00:c5:a9:78:2f:93:dd:d8:86:50:39:32:bc:
         92:3e:89:ea:23:6e:de:87:80:96:8d:cc:8a:21:73:c8:5e:85:
         6e:4e:5c:a7:5f:b5:96:96:93:eb:9a:da:66:5a:0f:d3:39:84:
         d3:b2:60:7a:c6:5e:f4:34:21:7d:d2:43:3d:06:fd:1e:7f:2f:
         b3:83:c4:c3:02:ec:bf:5b:87:66:a8:32:6b:ee:82:b3:f4:2b:
         37:ec:df:19:3b:19:3a:57:ec:da:17:60:7a:52:01:6d:22:9d:
         ae:29:2a:e1:98:89:93:d3:6b:d4:36:7a:68:e4:a4:b6:5b:f8:
         7f:9c:03:7c:15:49:ae:d7:5f:72:c1:26:e0:1b:6b:92:b9:e7:
         99:47:5e:fc:44:a8:32:c5:21:cf:1f:3f:65:ea:64:ca:1a:fd:
         63:31:95:91:6e:94:b4:08:68:8a:85:56:5f:cb:5a:bc:c3:2e:
         94:d2:05:c1:9a:80:c3:ce:60:3a:41:05:82:45:6f:89:fc:19:
         e2:cb:92:99:53:48:c5:d0:1a:3c:09:e9:a6:59:0e:82:92:11:
         6e:f2:59:7d:a7:ae:db:02:15:a6:34:32:73:45:87:fc:7d:53:
         0b:f7:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----