This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
File:                     xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json)
Hash identifier:          csWNE2kHGLHMjDps+XBKzLVFxP5fmda5AD4RPsgggwo=
Subject key identifier:   C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38
Certificate issuer:       /CN=C53AF4043FC4D2B0085882229AB27504B6A82238
Certificate serial:       07AD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
Manifest number:          07AD
Signing time:             Sun 25 Jan 2026 20:59:54 +0000
Manifest this update:     Sun 25 Jan 2026 20:59:54 +0000
Manifest next update:     Mon 26 Jan 2026 02:59:54 +0000
Files and hashes:         1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: QXwwB5CWPTGgDxwYVg+2p6b5+TJBxKRF3s+zN0oTDNI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238
        Validity
            Not Before: Jan 25 20:59:54 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83:
                    20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4:
                    66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71:
                    86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59:
                    a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81:
                    43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0:
                    d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50:
                    78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1:
                    2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45:
                    d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68:
                    4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f:
                    c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07:
                    60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d:
                    cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88:
                    31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3:
                    ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2:
                    fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF
            X509v3 Authority Key Identifier:
                keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:75:39:e6:3e:77:54:1b:67:db:46:90:c0:de:2c:11:b2:c9:
         70:bf:95:fe:13:ea:74:b4:d4:e9:05:93:3a:d8:c2:4b:88:bb:
         f0:a3:e1:bb:16:a2:dd:c5:60:9d:c6:3e:8a:1f:34:d9:70:aa:
         68:5c:b9:b1:e8:1f:7d:d5:05:ea:6d:25:79:17:a8:1a:b1:62:
         15:d8:f6:ed:e6:d8:5c:72:66:a1:aa:ee:c5:26:5e:e3:57:9f:
         f7:99:31:41:14:da:c7:e5:fc:0d:b4:2f:1a:08:84:c2:92:67:
         e5:4c:07:29:97:9d:e5:7f:66:eb:41:76:b5:69:20:e5:13:a2:
         a6:91:1b:26:e0:bd:9a:5a:5b:5f:c2:77:ae:06:9e:c4:d1:6b:
         fb:37:5c:48:1f:50:d8:13:e1:07:aa:55:96:69:75:55:b2:8b:
         ee:43:6c:70:c8:ce:de:bf:4a:3b:38:26:29:a6:6e:94:d4:29:
         b9:78:08:84:01:eb:21:3b:db:82:e7:e9:9c:5b:39:45:ac:84:
         91:61:3d:d7:f1:27:23:34:ff:3f:fc:1a:18:28:fe:ea:fc:a0:
         a4:12:73:78:18:a7:d3:32:ee:e9:26:4f:b7:00:67:45:3d:c6:
         99:22:c2:02:7e:d3:a2:f9:98:46:ad:d8:b5:d3:9b:4c:63:9e:
         d8:82:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:24 2026 by rpki-client