This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
File:                     VYfZQrIadek6XDTl3374TyZsNnk.mft (raw, json)
Hash identifier:          WEwiYOQNowI4UXfnEbSDXxg3GKiuNVlSrk4/59KIUR0=
Subject key identifier:   76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
Authority key identifier: 55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
Certificate issuer:       /CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Certificate serial:       102A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
Manifest number:          102A
Signing time:             Sun 25 Jan 2026 07:30:34 +0000
Manifest this update:     Sun 25 Jan 2026 07:30:34 +0000
Manifest next update:     Sun 25 Jan 2026 13:30:34 +0000
Files and hashes:         1: VYfZQrIadek6XDTl3374TyZsNnk.crl (hash: XLj2VkWEBoW+pE17i1Uo/hevxldmfZlIZvAGf3Ncdic=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4138 (0x102a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
        Validity
            Not Before: Jan 25 07:30:34 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=7622F078F3A062532B9B90394CF0FBCD5CC43830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:1b:0d:14:29:ca:ce:90:1f:6c:67:08:9b:
                    89:ae:95:65:70:52:a1:02:c9:dc:85:1f:cd:bb:18:
                    6d:bc:4e:b5:c9:86:cf:b2:b9:10:6b:60:51:50:55:
                    4c:46:21:56:a3:10:0e:43:9e:25:20:55:55:50:31:
                    0f:21:77:a8:53:5c:22:24:31:29:f9:07:3e:f9:6a:
                    57:58:f9:4b:e9:c0:32:e3:5f:71:3c:ce:88:0a:79:
                    73:ec:fa:84:85:d2:16:88:0c:d0:ca:45:c6:a7:e2:
                    f9:8b:38:9a:71:d4:9a:6e:99:94:06:fa:77:80:52:
                    18:84:4b:04:1c:e0:de:95:30:67:d5:fa:86:a0:dc:
                    99:8b:ef:11:af:84:61:ab:bd:4b:81:52:fd:2e:83:
                    f5:46:60:c6:56:9c:cf:18:88:b8:91:10:21:51:05:
                    70:ba:53:4a:e9:f8:3e:10:ae:36:56:4e:97:ed:de:
                    15:84:74:2d:11:ad:b4:2a:86:cd:e0:7b:21:10:04:
                    83:3e:d8:63:6d:8d:02:d2:f9:10:3d:85:bf:a9:ff:
                    df:6b:56:be:3f:f1:3d:05:23:2d:a6:ba:91:0a:83:
                    55:dc:53:3b:01:e9:72:45:fb:e7:8a:4c:7f:20:12:
                    55:af:78:13:ba:f3:dd:5a:5f:38:d5:7f:35:19:8e:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
            X509v3 Authority Key Identifier:
                keyid:55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:30:bc:bb:9f:f9:44:61:1d:60:67:83:d4:3b:07:c8:ae:
         99:30:99:5d:0c:50:5b:20:e6:6e:b1:56:b6:ac:da:f6:cb:f3:
         c4:2d:4c:e4:e7:df:78:be:03:c9:e0:35:bd:32:1e:71:52:ca:
         12:7c:d2:60:2d:be:ac:14:1c:9a:a8:cd:9b:23:35:48:08:e8:
         4d:16:50:ad:44:7b:27:7e:68:2a:e9:76:cc:cd:a5:75:6f:d0:
         25:42:39:5f:bd:e5:24:60:7e:8c:68:8b:47:4f:ab:bb:47:49:
         a6:74:5e:95:ff:6e:20:af:98:6d:f2:5f:65:e2:7b:b3:20:a5:
         2d:e9:d4:a9:e9:25:e4:45:36:c9:81:b2:bb:48:61:2d:fd:60:
         29:62:ec:6c:d5:89:3d:04:1c:e0:32:ce:29:5a:1c:0b:86:1b:
         d6:64:ec:af:40:d5:1d:b1:8c:9f:05:85:e5:e2:42:3f:e4:f7:
         b6:b9:9c:e9:04:13:0f:4f:e9:f5:aa:f5:3e:e4:4d:79:33:b4:
         1a:25:a8:de:fe:06:e0:01:22:66:eb:7e:f5:b5:75:dc:ce:8b:
         4d:ab:fd:4c:7c:45:ca:78:c9:75:84:bc:5e:1e:88:07:62:a1:
         63:2c:f0:6f:ca:ae:29:69:ea:7f:8a:72:33:7e:36:10:32:dc:
         0e:cf:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:04 2026 by rpki-client