This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
File:                     LsLMuD3fv0MzIma3amIhNiFD42U.mft (raw, json)
Hash identifier:          1Vt40xjZAYuy9Vb/2uvBsDa7oJa3AgHPgSm9Stba+nA=
Subject key identifier:   E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4
Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
Certificate issuer:       /CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Certificate serial:       0849
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
Manifest number:          083D
Signing time:             Sun 25 Jan 2026 02:28:50 +0000
Manifest this update:     Sun 25 Jan 2026 02:28:50 +0000
Manifest next update:     Sun 25 Jan 2026 08:28:50 +0000
Files and hashes:         1: -v7sDlKvmzSFSuvY0PNnwWc1MGo.roa (hash: FvfuZxU9A3uZaHNDtxNXRmBYqh5UXFkkfXfNBkjTmag=)
                          2: 9yVAX-Q4njb8sfExeTz4wqv6e2A.roa (hash: NddH2JQ4KcG/8NxwyE1SyffUbN29gWHicCPTJzMRIUQ=)
                          3: LsLMuD3fv0MzIma3amIhNiFD42U.crl (hash: JnkPR4bUuDlsgNj6Wrfl0SWTfmzIRbHVa2VR34hYN3s=)
                          4: Ys2nhSycv6NRYM6jWyuoIMv_vis.roa (hash: W5cyuGnXu8eMKmG3Umq71Yhc6fLj1DCdrbEAqM/j5Bk=)
                          5: wqWy3sVeEYGZiHuIHPFAQM5mUvk.roa (hash: mCKXxw0Jg9sTosPUUWdJmsvhNR0x38zJJC5GvDobSiw=)
                          6: yNqVshGXli1u3opJ5fDOPZQ225g.roa (hash: oadm03aEFC5zsx2yDKoF5Znsnmhqk50He7/z+0c/ruU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365
        Validity
            Not Before: Jan 25 02:28:50 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=E9A80F3E347B6C8F32A522D96907BE401B9CAFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:02:91:d5:4d:1e:bc:05:75:c8:ac:25:b1:
                    c5:00:9f:86:fe:b1:45:b4:76:27:71:80:99:70:d9:
                    bf:37:ab:a6:ca:c8:04:a0:87:65:c7:a9:c0:b3:d8:
                    2a:3b:ce:0d:0f:9a:af:7f:0c:23:65:13:4f:a3:c7:
                    a7:06:c2:a6:5b:7a:45:d4:23:9f:3a:19:1b:4e:d3:
                    0e:b6:57:59:3b:9e:9b:0c:6d:52:a1:4b:8a:b6:88:
                    4c:05:bb:7d:e8:cc:6b:60:ca:74:a9:84:93:40:27:
                    32:1b:8d:d8:98:51:e6:e4:42:52:17:39:83:2f:22:
                    80:06:d3:66:43:b6:31:82:8d:be:d6:05:7c:e2:b9:
                    86:b8:70:09:fa:d8:e4:8a:dc:20:2a:e4:8e:e8:ef:
                    d5:4d:fe:d0:be:98:1a:98:ac:90:92:e9:ba:8c:f5:
                    c0:23:78:e4:10:d4:c7:37:41:b0:1a:25:c5:1f:a7:
                    5e:8a:04:0f:4d:c9:97:58:17:36:a7:8e:53:10:a3:
                    56:4d:3d:23:e4:57:e2:39:2d:6b:48:bf:8c:49:69:
                    65:ea:e5:6b:03:47:4a:2b:5b:28:83:7a:2f:a8:76:
                    ff:98:ea:6e:fe:cb:33:ac:2c:31:65:10:a3:1f:07:
                    f6:47:0f:17:2e:45:10:62:55:0b:54:a7:63:0c:70:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4
            X509v3 Authority Key Identifier:
                keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:a1:f8:f4:b6:96:da:3b:fe:42:95:39:c1:88:98:51:4c:
         66:23:f9:b3:03:57:59:50:d5:e9:ad:a9:cd:54:02:91:01:c1:
         99:a4:a8:fb:b3:a9:ea:2a:8e:fb:df:d2:5b:05:dc:8f:c1:da:
         5f:73:ff:c2:f2:5a:cb:98:08:a9:ff:73:e8:2f:b0:54:a1:a8:
         44:50:11:f9:7c:96:f1:be:a5:35:ee:d7:65:48:b7:3d:8f:80:
         36:87:0d:72:5e:63:c7:3d:a8:9c:46:03:48:d3:07:37:f8:0b:
         b2:34:0f:26:e4:9b:aa:a5:1b:04:30:b4:d9:3c:a3:c7:02:c6:
         ac:10:d1:2e:a4:52:19:95:61:f0:27:58:96:32:02:c8:1f:e4:
         90:1b:d2:f7:f3:5b:16:7c:01:95:fb:8c:b8:97:5b:dd:9b:a5:
         3a:9c:d3:4d:f5:86:8a:07:8f:2b:f2:3f:ce:b9:9e:31:d8:43:
         1d:4a:9d:dc:7a:b8:95:8b:3a:8f:1d:c1:59:c8:ea:71:e2:a0:
         8c:5c:97:3b:e0:1b:4c:87:12:ed:b0:90:ab:63:f8:e9:8b:47:
         af:45:fd:52:4f:ec:81:7f:5c:2c:11:47:36:89:16:f4:56:84:
         2c:10:39:71:5b:fc:ef:59:ec:2e:c9:37:2d:5b:69:ee:56:05:
         20:4e:2a:bb
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkVD
MkNDQjgzRERGQkY0MzMzMjI2NkI3NkE2MjIxMzYyMTQzRTM2NTAeFw0yNjAxMjUw
MjI4NTBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEU5QTgwRjNFMzQ3QjZD
OEYzMkE1MjJEOTY5MDdCRTQwMUI5Q0FGQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqNQKR1U0evAV1yKwlscUAn4b+sUW0didxgJlw2b83q6bKyASg
h2XHqcCz2Co7zg0Pmq9/DCNlE0+jx6cGwqZbekXUI586GRtO0w62V1k7npsMbVKh
S4q2iEwFu33ozGtgynSphJNAJzIbjdiYUebkQlIXOYMvIoAG02ZDtjGCjb7WBXzi
uYa4cAn62OSK3CAq5I7o79VN/tC+mBqYrJCS6bqM9cAjeOQQ1Mc3QbAaJcUfp16K
BA9NyZdYFzanjlMQo1ZNPSPkV+I5LWtIv4xJaWXq5WsDR0orWyiDei+odv+Y6m7+
yzOsLDFlEKMfB/ZHDxcuRRBiVQtUp2MMcIX/AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU6agPPjR7bI8ypSLZaQe+QBucr8QwHwYDVR0jBBgwFoAULsLMuD3fv0MzIma3
amIhNiFD42UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
MS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xzTE11RDNmdjBNekltYTNhbUloTmlGRDQyVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvTHNMTXVEM2Z2ME16
SW1hM2FtSWhOaUZENDJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGvCofj0tpbaO/5ClTnBiJhRTGYj+bMDV1lQ1emtqc1UApEBwZmkqPuzqeoq
jvvf0lsF3I/B2l9z/8LyWsuYCKn/c+gvsFShqERQEfl8lvG+pTXu12VItz2PgDaH
DXJeY8c9qJxGA0jTBzf4C7I0Dybkm6qlGwQwtNk8o8cCxqwQ0S6kUhmVYfAnWJYy
Asgf5JAb0vfzWxZ8AZX7jLiXW92bpTqc0031hooHjyvyP865njHYQx1Kndx6uJWL
Oo8dwVnI6nHioIxclzvgG0yHEu2wkKtj+OmLR69F/VJP7IF/XCwRRzaJFvRWhCwQ
OXFb/O9Z7C7JNy1bae5WBSBOKrs=
-----END CERTIFICATE-----