This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
File:                     J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft (raw, json)
Hash identifier:          qmogVgd1Q/76FlMrumakUHECNqcaUGB8ZvilC4MfSJo=
Subject key identifier:   7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
Authority key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
Certificate issuer:       /CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
Certificate serial:       1CE8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
Manifest number:          1CE8
Signing time:             Sun 25 Jan 2026 01:57:20 +0000
Manifest this update:     Sun 25 Jan 2026 01:57:20 +0000
Manifest next update:     Sun 25 Jan 2026 07:57:20 +0000
Files and hashes:         1: J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl (hash: 5Cm/O3IXdZZKAXhFPAL8YtIkKibhK7lHGFhFIw5qShI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7400 (0x1ce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
        Validity
            Not Before: Jan 25 01:57:20 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=7C4EC60D45C634A44F28CF2593604B9F0D738034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:da:f3:3d:08:08:c8:93:a8:23:8f:30:1f:
                    9c:9a:c2:d7:4c:9f:66:f5:91:39:61:51:b0:a4:ac:
                    d5:d9:d9:93:de:c6:01:c6:64:60:c8:6f:c3:b3:2f:
                    10:98:36:9e:b4:24:8e:8f:f9:a2:bb:e8:dd:d3:32:
                    ad:a9:a2:f5:58:b8:be:6a:42:34:a4:9c:d6:8d:95:
                    28:4a:04:d3:ff:29:98:37:d0:2a:80:18:f6:74:26:
                    77:59:66:32:57:b5:ea:c6:44:c0:6e:c4:8b:4a:b9:
                    fc:9c:d3:46:96:d3:aa:69:03:aa:4a:e5:69:2b:a3:
                    d6:63:6c:f8:4f:10:a7:96:9d:e9:0f:7a:dd:a2:d0:
                    ce:00:39:a5:ae:26:0d:a3:0a:12:1b:bc:15:1a:82:
                    7e:66:57:41:3d:64:3a:6a:33:89:59:2f:87:e5:50:
                    17:08:85:a3:db:dd:11:05:42:bb:e9:55:60:cd:de:
                    d9:d0:ba:76:bb:5d:38:6e:1a:33:c4:c3:6b:d5:cb:
                    14:e3:83:4f:ce:be:e9:5a:2b:29:7c:34:56:85:89:
                    43:a5:d6:9c:6b:74:ba:b2:0f:32:0b:5c:de:66:27:
                    fa:5c:58:50:64:a2:2b:f2:6c:9f:6f:78:dc:a2:ad:
                    51:84:d0:94:42:47:1f:54:38:ac:31:2d:28:c0:13:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
            X509v3 Authority Key Identifier:
                keyid:27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ec:24:3c:8f:0d:4b:55:a5:1b:00:a5:77:d6:d2:57:7d:08:
         b3:a9:0d:b0:ff:2b:ba:38:86:7a:08:32:d5:98:2a:c0:9a:da:
         5e:4a:0a:6a:fe:30:e0:08:ed:3f:bd:56:20:e4:db:e5:2f:83:
         bb:1a:3b:2f:52:01:2a:f0:97:11:c4:70:3d:2c:c0:8b:c2:c2:
         ef:8b:5b:81:22:8d:d1:49:54:51:59:87:04:cf:37:29:a5:22:
         81:70:0c:93:0f:aa:78:89:70:07:c3:a6:a8:ae:05:2a:32:2f:
         62:9a:93:04:81:0e:80:76:bc:c1:2b:44:ea:fd:08:c7:32:12:
         04:c9:a2:7c:8d:9e:11:b8:b5:68:aa:ca:53:30:83:34:53:6e:
         74:4a:60:6b:55:a1:e0:08:e6:a6:fd:57:ef:15:a8:72:a5:b9:
         ad:f6:6f:2f:01:c3:29:a5:c7:d9:91:05:ad:3b:0d:0c:26:de:
         49:07:49:80:31:dc:90:a3:27:65:b2:aa:84:a0:ae:14:a0:db:
         32:39:af:5e:5f:b4:d7:67:03:f6:58:bb:91:e4:09:48:bc:32:
         36:de:7f:b5:c7:09:41:2c:30:88:5a:30:38:da:d1:bc:c0:b4:
         17:96:e7:ab:d6:5e:1c:dc:dd:82:e6:dc:e9:38:39:65:26:e7:
         62:46:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:12 2026 by rpki-client