This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
File:                     -2U7JndQQWh9Ni1M73aOWPmewHU.mft (raw, json)
Hash identifier:          qHJ6Ly0XeMbtls9u4+GnzH3EFJUvIcytyr/0KOts2ic=
Subject key identifier:   7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48
Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75
Certificate issuer:       /CN=FB653B26775041687D362D4CEF768E58F99EC075
Certificate serial:       0ED9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
Manifest number:          0EC4
Signing time:             Sun 25 Jan 2026 02:29:40 +0000
Manifest this update:     Sun 25 Jan 2026 02:29:40 +0000
Manifest next update:     Sun 25 Jan 2026 08:29:40 +0000
Files and hashes:         1: -2U7JndQQWh9Ni1M73aOWPmewHU.crl (hash: +LElLonysPmfa3ucUm0vCAKCTuhVe2LpPCQVkt/CY2Q=)
                          2: 3yimESiLtQka2lMiwqoyFKOTxMk.roa (hash: b5MumePz6dpZV/wDo4ougHaQ9UB/PgwFbcHPXE73tqs=)
                          3: Rt0v6zl0kzLCcol4ZR8v0LMCkno.roa (hash: PbkXFoHR+aS5YRRjAvu1t4Iy2C5pWM5kvwPlR8tBHUA=)
                          4: eTsffFdMnL6y0B2GEjwBvfEfUPA.roa (hash: i+0Il2mZdyDRfzeqCr7L73/7ajtVoOIidxaMH4BNYJ4=)
                          5: woneSJoz6N2ectC9A9UZ6rE_gZM.roa (hash: oz1mTBbKvrrt2sX+O6/vPeUDGQAM5qf62EYM+5rbIN0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3801 (0xed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075
        Validity
            Not Before: Jan 25 02:29:40 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=7A187849D4D3D8FB1F0A302A8D928683257FBD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:90:5e:2e:ac:88:57:c7:1a:14:18:a5:65:
                    61:27:d4:ed:3e:c1:87:f4:b6:02:90:8a:c9:ce:e9:
                    f8:dd:c2:8b:ae:b7:fd:1d:af:fe:d2:53:e9:0a:b7:
                    30:e5:df:e4:db:dd:97:80:5a:6e:68:d9:b6:57:75:
                    d9:d3:04:45:3f:9e:81:31:1b:1b:15:70:a4:f0:01:
                    30:ee:62:02:d4:c6:51:9f:37:dd:22:65:33:43:4a:
                    36:14:7b:c9:4d:2f:04:da:5c:b7:ab:5e:66:e6:c5:
                    05:38:79:a0:3f:0f:ee:a5:86:34:a5:d1:65:57:f5:
                    76:e7:1a:6e:d5:a0:22:bc:5b:30:9d:f8:8a:44:78:
                    69:e5:61:b5:20:10:b0:e5:34:bf:54:12:7f:7c:ef:
                    f8:53:50:96:d3:94:83:7f:28:02:5d:e9:a5:91:55:
                    3a:28:b0:79:7e:6a:2f:d6:c7:38:79:f5:c6:c3:fb:
                    86:17:d1:ad:73:a6:b9:e0:d4:9e:71:a0:12:2b:81:
                    95:0f:8b:14:f1:c4:b6:33:af:b1:a2:bc:b0:4f:d4:
                    eb:0f:46:74:6b:78:7f:c3:22:44:6e:0e:a2:2a:d8:
                    77:6c:77:71:97:ab:22:43:1d:9f:c3:72:f4:95:30:
                    e8:28:00:04:e5:1a:f9:80:97:f5:77:25:e1:9d:ac:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48
            X509v3 Authority Key Identifier:
                keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e9:e4:db:7e:78:dc:67:a1:65:1d:5a:38:13:8b:75:4c:d7:
         86:71:41:c3:ff:42:a6:2d:e3:b4:1c:1d:f4:d6:c8:13:41:87:
         38:58:a7:0e:31:e4:f7:a6:f4:fe:98:64:47:31:ee:c3:03:40:
         0d:0e:aa:f3:1c:f5:90:3e:e0:a6:b3:89:98:7f:fa:3a:48:e5:
         60:55:68:95:59:bd:dd:4b:09:1f:a7:bc:71:cf:f6:5d:01:04:
         b4:fb:4e:bf:fc:86:8d:bb:2a:de:c0:c5:1d:a8:b5:6e:86:52:
         11:b2:7d:13:d1:cd:d4:cd:eb:ed:d0:75:ed:6b:e3:c7:15:00:
         ae:fc:7b:77:65:0d:fd:d2:99:87:f5:14:35:3a:f2:e1:29:b0:
         72:0a:38:b0:f8:eb:62:c4:df:aa:37:bc:e8:45:96:d1:36:ef:
         1a:68:ae:d9:98:6d:de:2d:bb:cb:29:cf:7d:3e:64:56:8c:42:
         23:c9:96:78:8e:40:d4:c7:6e:28:2a:d0:f4:54:b8:b7:55:d9:
         7e:53:4d:fa:96:41:d9:16:d8:de:31:99:33:ec:46:6c:36:52:
         2d:b9:a4:4b:20:11:a2:23:b7:1a:a9:48:32:30:3e:3a:de:76:
         0d:99:b2:a8:e8:21:fe:00:83:68:14:34:c7:47:26:b5:5d:50:
         db:3f:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----