This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
File:                     -2U7JndQQWh9Ni1M73aOWPmewHU.mft (raw, json)
Hash identifier:          Gyf63EVKUYk721CxpflViMDpEs+qHd6duXmJIaqQKj4=
Subject key identifier:   7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48
Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75
Certificate issuer:       /CN=FB653B26775041687D362D4CEF768E58F99EC075
Certificate serial:       0DE5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
Manifest number:          0DD0
Signing time:             Sat 06 Dec 2025 16:20:07 +0000
Manifest this update:     Sat 06 Dec 2025 16:20:07 +0000
Manifest next update:     Sat 06 Dec 2025 22:20:07 +0000
Files and hashes:         1: -2U7JndQQWh9Ni1M73aOWPmewHU.crl (hash: 3Yx+o3mGE6Y4pHuDTpIvLoo8o2Mzna2GIZc3bQezqeU=)
                          2: 3yimESiLtQka2lMiwqoyFKOTxMk.roa (hash: b5MumePz6dpZV/wDo4ougHaQ9UB/PgwFbcHPXE73tqs=)
                          3: Rt0v6zl0kzLCcol4ZR8v0LMCkno.roa (hash: PbkXFoHR+aS5YRRjAvu1t4Iy2C5pWM5kvwPlR8tBHUA=)
                          4: eTsffFdMnL6y0B2GEjwBvfEfUPA.roa (hash: i+0Il2mZdyDRfzeqCr7L73/7ajtVoOIidxaMH4BNYJ4=)
                          5: woneSJoz6N2ectC9A9UZ6rE_gZM.roa (hash: oz1mTBbKvrrt2sX+O6/vPeUDGQAM5qf62EYM+5rbIN0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3557 (0xde5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075
        Validity
            Not Before: Dec  6 16:20:07 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=7A187849D4D3D8FB1F0A302A8D928683257FBD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:90:5e:2e:ac:88:57:c7:1a:14:18:a5:65:
                    61:27:d4:ed:3e:c1:87:f4:b6:02:90:8a:c9:ce:e9:
                    f8:dd:c2:8b:ae:b7:fd:1d:af:fe:d2:53:e9:0a:b7:
                    30:e5:df:e4:db:dd:97:80:5a:6e:68:d9:b6:57:75:
                    d9:d3:04:45:3f:9e:81:31:1b:1b:15:70:a4:f0:01:
                    30:ee:62:02:d4:c6:51:9f:37:dd:22:65:33:43:4a:
                    36:14:7b:c9:4d:2f:04:da:5c:b7:ab:5e:66:e6:c5:
                    05:38:79:a0:3f:0f:ee:a5:86:34:a5:d1:65:57:f5:
                    76:e7:1a:6e:d5:a0:22:bc:5b:30:9d:f8:8a:44:78:
                    69:e5:61:b5:20:10:b0:e5:34:bf:54:12:7f:7c:ef:
                    f8:53:50:96:d3:94:83:7f:28:02:5d:e9:a5:91:55:
                    3a:28:b0:79:7e:6a:2f:d6:c7:38:79:f5:c6:c3:fb:
                    86:17:d1:ad:73:a6:b9:e0:d4:9e:71:a0:12:2b:81:
                    95:0f:8b:14:f1:c4:b6:33:af:b1:a2:bc:b0:4f:d4:
                    eb:0f:46:74:6b:78:7f:c3:22:44:6e:0e:a2:2a:d8:
                    77:6c:77:71:97:ab:22:43:1d:9f:c3:72:f4:95:30:
                    e8:28:00:04:e5:1a:f9:80:97:f5:77:25:e1:9d:ac:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48
            X509v3 Authority Key Identifier:
                keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:42:30:32:9f:37:0e:e1:54:65:8f:e0:48:d0:bd:b1:ca:28:
         9d:bc:e6:54:8d:a5:cf:7b:4c:7d:a4:7e:78:60:74:ae:db:ca:
         44:f3:b1:30:da:91:cb:fb:65:42:1b:df:57:75:98:19:d6:95:
         d3:8e:44:41:3d:04:fc:ef:82:64:4e:32:03:5c:2e:f4:46:d4:
         1f:e2:f1:3a:58:c8:50:a1:af:79:98:c2:ca:2d:cb:21:1d:06:
         be:90:3e:5c:ab:0a:b4:6a:c9:65:66:05:8c:a5:c5:4c:c3:44:
         a1:fd:a2:8b:d5:28:27:c5:81:1e:73:5d:92:a1:b4:a9:0c:c8:
         37:d6:6f:73:0f:19:04:8f:45:be:d0:57:d2:c4:02:51:3f:91:
         a4:90:a7:af:b5:86:f1:29:a9:e0:66:56:1d:53:82:c7:1c:14:
         ca:d4:00:19:a7:40:cd:58:4b:78:34:d2:92:02:36:69:f5:37:
         ff:c7:e9:45:64:fc:e2:e8:20:9c:18:e3:cc:d5:9d:4d:44:bd:
         d5:0b:21:d8:26:76:07:0f:4b:85:53:f9:be:ae:46:f6:eb:02:
         57:64:ad:8c:8b:db:56:f6:13:3b:f5:aa:85:ff:80:c3:3d:86:
         b7:13:2a:4e:72:61:4b:b0:11:15:aa:b1:f7:68:8c:58:d3:85:
         cc:77:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----