This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
File:                     XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json)
Hash identifier:          BfoIaiHQiaDCmbkmi12Cyy+rgwMMc0mjmN3taChtSaI=
Subject key identifier:   06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A
Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13
Certificate issuer:       /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213
Certificate serial:       19C6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
Manifest number:          19C6
Signing time:             Sun 25 Jan 2026 02:29:01 +0000
Manifest this update:     Sun 25 Jan 2026 02:29:01 +0000
Manifest next update:     Sun 25 Jan 2026 08:29:01 +0000
Files and hashes:         1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: +bQYRe5upNqUVGGdRN5VvV2HDtneldC4Bx5oowhoO3M=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6598 (0x19c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213
        Validity
            Not Before: Jan 25 02:29:01 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5:
                    fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db:
                    8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea:
                    7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4:
                    f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc:
                    9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab:
                    0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb:
                    38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae:
                    e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea:
                    5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86:
                    04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4:
                    37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c:
                    da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9:
                    00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54:
                    7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca:
                    5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2:
                    89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A
            X509v3 Authority Key Identifier:
                keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:18:38:03:ef:02:af:39:fa:f2:12:4d:47:ae:6b:47:ec:
         8e:4a:9c:8b:d6:2e:a9:6b:59:29:05:5d:1b:a6:42:1f:11:d9:
         f5:f4:b1:69:43:fd:01:3b:80:a9:e1:26:c5:3c:21:f7:a5:3e:
         a2:7f:ad:e6:95:00:6c:50:4b:ef:bd:3c:01:a2:77:c4:e6:78:
         fa:ed:89:b8:b0:a0:2a:15:9d:73:15:0a:62:1f:aa:b8:ae:39:
         88:a0:1a:53:76:0a:4f:b7:b0:11:f8:03:4a:35:bf:19:ce:21:
         69:a7:db:44:02:0b:5e:f0:5c:5e:0f:30:d4:cc:9f:1c:f3:aa:
         c5:f0:a9:b9:0c:3b:41:9e:67:98:7c:28:7d:5c:ec:13:c9:9e:
         87:34:04:d8:a4:9a:ae:10:0c:3b:0c:43:80:f8:5a:47:12:2f:
         ff:c4:c5:0d:cd:8e:03:03:5f:03:92:fe:1c:88:5a:6c:13:e3:
         8d:3e:bb:ef:33:22:65:4d:a7:87:42:2c:91:28:f7:50:00:91:
         94:8d:c4:a2:9f:7e:05:a6:23:1c:a2:0d:37:1b:00:63:f6:1d:
         9a:70:3a:eb:f7:a5:d7:a6:4c:d0:3b:80:33:6c:49:b0:b5:44:
         7b:a0:08:f4:1c:ff:91:ee:f5:bc:cc:1d:ba:1b:cd:0e:01:c4:
         54:56:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:56 2026 by rpki-client