This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft
File:                     yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json)
Hash identifier:          ewXtV2SlWtXc/9dO644Yv3wC2c+ccLqnNzd67Ag5iDA=
Subject key identifier:   89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E
Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F
Certificate issuer:       /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F
Certificate serial:       1168
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft
Manifest number:          1168
Signing time:             Sun 25 Jan 2026 01:56:57 +0000
Manifest this update:     Sun 25 Jan 2026 01:56:57 +0000
Manifest next update:     Sun 25 Jan 2026 07:56:57 +0000
Files and hashes:         1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: fqeo87mEGMI0a4AfxPHgwYRfj3GFxkhhmdNe1W7gww0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4456 (0x1168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F
        Validity
            Not Before: Jan 25 01:56:57 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=894F37F63950F05EB10F706A509A4894914F608E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b:
                    aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e:
                    9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c:
                    a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02:
                    fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97:
                    9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf:
                    82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6:
                    c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1:
                    9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a:
                    b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68:
                    fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f:
                    06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e:
                    35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67:
                    70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82:
                    db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29:
                    b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f:
                    95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E
            X509v3 Authority Key Identifier:
                keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:91:5d:08:eb:57:d7:c9:d8:80:26:ba:21:a7:6a:9b:84:
         d1:78:85:4f:40:09:c9:bd:fd:1c:51:a5:7e:42:36:a5:c3:93:
         84:7a:ed:58:7c:96:f3:a0:38:51:e6:8b:47:11:aa:6a:44:31:
         5b:28:0d:67:fa:1a:39:86:09:56:d9:74:25:3f:ae:60:d3:27:
         99:33:84:b9:41:c4:8d:ba:04:8c:e6:78:f8:38:a7:c3:3b:e0:
         5e:c5:0b:84:3b:47:5c:da:ec:f2:61:b5:eb:7d:a8:3b:3b:14:
         29:6d:3b:ab:41:24:9a:5e:f9:53:f6:e0:e0:91:63:fe:6c:8e:
         fa:b5:bb:8f:73:99:7a:5e:24:ed:39:c7:74:2b:ff:46:f1:6c:
         e4:26:81:6f:29:38:45:72:e0:3c:18:1b:57:7f:1e:cb:4f:c6:
         22:b6:ac:6b:e1:ae:dc:12:f7:c6:ae:f8:aa:cd:6d:63:ed:73:
         6a:79:95:d0:37:4f:07:c7:c0:d6:3d:71:49:95:8c:9b:be:a3:
         55:ba:f6:77:9f:71:a5:75:e7:ec:d1:6b:2b:f3:6c:60:ad:ca:
         dd:e8:35:8e:fe:d3:ec:ea:af:29:32:92:35:6c:83:4d:1f:60:
         0b:65:ca:e7:a4:99:29:c0:13:f6:72:9a:cb:34:36:10:c7:6c:
         76:f8:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:29 2026 by rpki-client