This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
File:                     5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft (raw, json)
Hash identifier:          Ekjq+1vTeAagtliGUjhMHCR/dIjG4mltjzC0J8n9X0A=
Subject key identifier:   C8:78:A0:D0:50:B9:93:35:16:51:7E:A5:08:7E:BA:12:24:41:2D:63
Authority key identifier: E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
Certificate issuer:       /CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
Certificate serial:       2267
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
Manifest number:          2267
Signing time:             Sun 25 Jan 2026 01:57:13 +0000
Manifest this update:     Sun 25 Jan 2026 01:57:13 +0000
Manifest next update:     Sun 25 Jan 2026 07:57:13 +0000
Files and hashes:         1: 5e3FZP6LAvLPhwCTu_3cMn1tk5U.crl (hash: 4aKtVMlNQAziAL973o8M2hThZfGI6u0QUUn4IhITOrc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8807 (0x2267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
        Validity
            Not Before: Jan 25 01:57:13 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C878A0D050B9933516517EA5087EBA1224412D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:3f:58:00:f8:4d:85:6d:6f:ef:7d:5b:80:
                    b1:14:d9:33:7e:2a:3c:4a:40:6e:b4:29:f8:90:f2:
                    8b:d4:49:d1:9a:0b:ed:d7:e0:8c:bb:a3:7e:30:ec:
                    1e:a5:d9:89:32:0c:63:44:c5:a8:e8:d3:b2:e5:9f:
                    5e:f4:23:d9:7c:e7:09:8b:38:36:aa:9a:07:e0:00:
                    42:15:39:f5:36:a3:2e:3a:3c:aa:5c:07:6b:79:a7:
                    b5:02:02:1e:a8:ab:1d:ea:5d:f9:db:8c:7c:0f:1b:
                    3f:3c:75:b1:37:2a:86:58:68:50:c2:95:1f:02:05:
                    79:3c:06:55:8f:42:c2:d8:f4:fc:d2:79:20:3c:c9:
                    1b:d5:2f:41:96:af:7e:2b:b5:e9:2a:12:35:79:e5:
                    44:c8:05:0f:4d:c8:65:32:fd:30:0d:49:b0:e9:84:
                    8d:5c:e1:22:84:7d:29:62:c0:fb:d4:88:65:d5:65:
                    1c:66:1c:6f:4c:07:1a:2c:0e:44:f8:63:9d:c7:08:
                    8b:83:d7:af:b2:c0:b3:47:79:fe:0f:f5:da:cc:8b:
                    7f:a5:59:6f:ef:65:2f:f5:30:63:ee:b6:73:46:5a:
                    df:4b:07:20:4f:55:2a:c7:8d:d1:49:c0:58:42:e6:
                    15:86:b6:04:aa:b0:9f:54:69:3f:1b:61:86:83:18:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:78:A0:D0:50:B9:93:35:16:51:7E:A5:08:7E:BA:12:24:41:2D:63
            X509v3 Authority Key Identifier:
                keyid:E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:f0:86:7b:73:0d:9e:2b:5c:95:fd:a6:b9:32:b7:e8:b2:
         45:8e:0d:d7:99:8d:84:d9:b4:90:b5:f1:ca:e3:a5:de:b5:42:
         d8:a5:4b:21:21:6f:e6:a7:6d:77:98:35:05:e2:9b:de:11:b2:
         6e:28:f7:5f:1c:2c:ee:00:53:58:60:a8:e6:a9:fa:9c:d5:d9:
         0c:fa:cb:70:07:df:25:72:c3:76:d9:cc:90:81:15:d2:5a:9d:
         df:53:b1:a6:ae:07:bc:a0:17:25:4b:bf:f0:85:54:a8:1e:3f:
         73:cb:0e:fc:70:17:95:9d:57:a0:01:fa:1f:b5:c9:ce:ea:9c:
         0c:11:31:cf:c3:99:f4:52:f6:4f:41:64:f0:93:4a:ef:79:7d:
         70:c7:54:ab:05:76:ad:f5:d1:04:e5:b4:3a:1d:8b:fe:d6:c5:
         fb:08:82:6e:b6:ea:f8:3c:73:a2:35:b6:33:e5:77:6a:65:6d:
         ee:7a:9b:10:40:84:0f:4b:a3:4c:03:dd:6a:81:c6:7d:c7:d7:
         31:ab:a8:f5:f0:34:b6:a8:fe:de:a2:db:12:59:75:c9:f0:fe:
         11:21:d0:a7:bd:3a:b4:ee:58:44:c8:51:a8:fb:32:f7:4b:c3:
         73:f3:ac:43:b3:8a:cb:15:28:cc:33:77:ff:a5:ee:c7:23:2f:
         9a:cd:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:08:29 2026 by rpki-client