This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft
File:                     VZPMkzM9chHxN7wfzRxXcSWoWyo.mft (raw, json)
Hash identifier:          ck6zGmMN3c6gQ96I843+3e2jEGfrpX3kt31bTwFL0Zo=
Subject key identifier:   4F:6C:2F:9A:ED:87:CF:69:8D:7A:74:22:C8:39:68:FD:E5:1B:DE:81
Authority key identifier: 55:93:CC:93:33:3D:72:11:F1:37:BC:1F:CD:1C:57:71:25:A8:5B:2A
Certificate issuer:       /CN=5593CC93333D7211F137BC1FCD1C577125A85B2A
Certificate serial:       1579
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VZPMkzM9chHxN7wfzRxXcSWoWyo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft
Manifest number:          1579
Signing time:             Sun 25 Jan 2026 02:28:38 +0000
Manifest this update:     Sun 25 Jan 2026 02:28:38 +0000
Manifest next update:     Sun 25 Jan 2026 08:28:38 +0000
Files and hashes:         1: VZPMkzM9chHxN7wfzRxXcSWoWyo.crl (hash: MmV2fUeLYVQ11mZJLbMnHl7ipIIqKcELNQQUl5XqRI0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5497 (0x1579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5593CC93333D7211F137BC1FCD1C577125A85B2A
        Validity
            Not Before: Jan 25 02:28:38 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=4F6C2F9AED87CF698D7A7422C83968FDE51BDE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:a9:20:26:87:f8:1e:64:24:e6:e4:f4:bb:
                    8f:3b:3c:24:c4:0a:1c:06:10:9f:1b:dd:f0:99:99:
                    cc:28:d2:3c:94:ad:05:f2:2f:16:47:12:9b:10:c5:
                    70:3a:7f:f0:f5:d6:c9:df:89:cd:23:fe:1a:67:4d:
                    d1:77:8f:52:2e:86:02:39:b7:9f:73:c1:59:a4:6b:
                    da:ab:f8:9a:5c:aa:fa:51:97:79:ae:01:83:82:95:
                    f7:c9:99:8e:1d:f3:15:4d:9b:c5:64:95:76:93:86:
                    0a:e1:60:a3:04:6d:38:be:68:c8:e8:23:a8:38:dd:
                    9a:ba:dd:c3:45:c3:ea:c4:4f:6f:b6:b3:af:20:fe:
                    b5:ac:ac:a9:b4:ed:fe:ad:c3:b2:8c:fc:79:64:70:
                    78:e6:43:71:2e:b8:31:55:a4:d6:3b:e9:70:fd:64:
                    3d:ea:e3:5d:b8:4f:8b:bb:b7:6f:bf:90:70:56:53:
                    e4:6a:38:85:db:03:9b:24:6e:ce:9a:d9:61:cc:f5:
                    5b:53:27:50:75:ed:76:97:38:36:26:d1:3d:03:12:
                    93:35:9c:f9:ee:df:17:3a:ee:92:cc:10:90:91:48:
                    d8:d4:95:0a:a4:22:2b:06:1e:4a:70:80:d6:33:7a:
                    fc:4a:0e:b1:0b:41:a4:e5:17:85:31:d6:bd:2d:75:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:2F:9A:ED:87:CF:69:8D:7A:74:22:C8:39:68:FD:E5:1B:DE:81
            X509v3 Authority Key Identifier:
                keyid:55:93:CC:93:33:3D:72:11:F1:37:BC:1F:CD:1C:57:71:25:A8:5B:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VZPMkzM9chHxN7wfzRxXcSWoWyo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:03:6b:ee:ae:12:fe:28:55:f4:9d:b0:a6:a5:64:98:c5:bd:
         e6:c6:d9:9a:b4:68:a6:67:8e:f3:55:d8:1d:a3:d0:69:95:79:
         fa:bc:18:7c:09:6a:b6:25:d5:30:87:40:ac:c0:93:12:01:7d:
         2e:70:95:a0:6a:bd:60:43:19:91:2e:44:a5:da:fa:c1:57:f9:
         bc:5b:80:86:6a:69:07:af:26:82:19:fc:43:f8:b4:cd:6b:a8:
         4b:a8:73:8d:49:46:25:e0:6b:7e:06:20:24:93:a3:c8:f6:14:
         c3:fc:6a:64:10:c2:41:94:eb:56:70:c3:85:99:46:40:7b:21:
         17:20:89:05:57:bc:da:db:e6:70:c0:7b:5b:9e:c3:24:21:e5:
         4b:86:e6:9d:78:78:33:12:2b:da:2f:21:af:e6:e3:1d:f3:b5:
         e2:de:8f:a4:8d:30:f2:ea:b1:b4:cc:52:42:86:da:74:14:23:
         12:9f:30:2e:ae:7a:7e:04:da:56:b7:b8:c5:c7:8b:15:b3:a3:
         87:28:f4:45:00:32:81:75:f1:25:a0:75:2d:dd:da:c0:19:80:
         d1:96:0c:9b:2a:a3:55:36:67:10:aa:24:4c:21:2b:15:a3:ab:
         05:ad:4f:f2:a9:f9:9a:b1:45:0a:3f:13:b4:dc:c4:0d:30:68:
         e2:78:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:07 2026 by rpki-client