This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
File:                     jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json)
Hash identifier:          cgdyWRfbGjrCSIIFZ/DVeW5FirbRtMRbalw2AOoSghU=
Subject key identifier:   CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67
Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D
Certificate issuer:       /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D
Certificate serial:       1106
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
Manifest number:          1106
Signing time:             Sun 25 Jan 2026 07:28:06 +0000
Manifest this update:     Sun 25 Jan 2026 07:28:06 +0000
Manifest next update:     Sun 25 Jan 2026 13:28:06 +0000
Files and hashes:         1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: j10gQDmmly8NFc3ogaTaoJpWtRyr8iM/5a4y5Q+u01s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4358 (0x1106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D
        Validity
            Not Before: Jan 25 07:28:06 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99:
                    ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec:
                    3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe:
                    ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85:
                    d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95:
                    2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc:
                    ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd:
                    f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f:
                    d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92:
                    00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03:
                    87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1:
                    7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56:
                    e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77:
                    32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb:
                    1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b:
                    28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72:
                    4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67
            X509v3 Authority Key Identifier:
                keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:35:71:55:77:cd:3a:79:a1:c3:e5:c4:31:cc:ae:f7:e0:87:
         19:fd:1b:98:61:22:fa:e9:aa:12:14:b5:9f:45:37:f0:1e:02:
         ce:62:4a:71:e8:c8:1d:3b:c7:c3:70:6b:c7:70:31:bf:40:73:
         42:e7:9c:2f:71:13:34:f7:a5:3d:b3:8c:d5:8d:98:4b:67:ab:
         90:2e:a6:d5:00:62:58:7a:fd:6d:8e:f6:7b:4e:64:0c:0c:29:
         3f:28:35:97:8c:7d:dd:bb:ff:1c:a7:97:8e:3b:10:4e:11:e3:
         02:6c:b3:b3:57:92:fa:a5:ed:fc:62:43:b5:e9:f4:b7:13:ce:
         62:66:8b:89:1a:09:70:a9:70:da:44:cf:f8:0d:01:34:f2:d2:
         d8:51:bb:b4:f6:9f:1b:88:ca:c8:45:8b:dc:99:0c:02:93:f6:
         73:21:2c:b5:5f:3e:65:0e:7f:35:e2:88:93:44:6f:75:64:c3:
         d6:60:36:36:9c:a6:37:97:ec:bb:22:d9:39:67:10:ba:b1:d9:
         9f:af:ac:96:f9:3e:ea:75:18:50:fe:ae:7b:d5:4f:da:f0:ff:
         47:cb:1d:e3:6b:79:33:72:f8:7f:7e:f5:81:56:59:3c:e7:13:
         a3:59:88:59:b2:a0:39:2a:92:19:c4:4f:94:63:2f:20:b4:18:
         d9:53:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:52 2026 by rpki-client