This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft
File:                     ni8vda_kKErFzlfH85k9wXJauLw.mft (raw, json)
Hash identifier:          3seYeDauidHJstRCE1wpkNFHROOtsBYsd0IjQzccU44=
Subject key identifier:   9A:B8:2D:5E:8C:E7:EF:8D:D0:B2:B0:05:79:F7:80:12:6C:F7:A1:69
Authority key identifier: 9E:2F:2F:75:AF:E4:28:4A:C5:CE:57:C7:F3:99:3D:C1:72:5A:B8:BC
Certificate issuer:       /CN=9E2F2F75AFE4284AC5CE57C7F3993DC1725AB8BC
Certificate serial:       03F7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ni8vda_kKErFzlfH85k9wXJauLw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft
Manifest number:          03F7
Signing time:             Sun 25 Jan 2026 11:59:56 +0000
Manifest this update:     Sun 25 Jan 2026 11:59:56 +0000
Manifest next update:     Sun 25 Jan 2026 17:59:56 +0000
Files and hashes:         1: ni8vda_kKErFzlfH85k9wXJauLw.crl (hash: tTOBuG34c5IjLe8wkE0Zh2cv7XIXAAF60qWMKeV0b78=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E2F2F75AFE4284AC5CE57C7F3993DC1725AB8BC
        Validity
            Not Before: Jan 25 11:59:56 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9AB82D5E8CE7EF8DD0B2B00579F780126CF7A169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:1f:c6:01:08:83:a6:0d:9b:c5:10:57:ca:
                    bf:bc:7d:cf:3d:93:15:ce:05:fe:57:ef:08:1c:d0:
                    f8:f9:a0:91:77:2e:fa:b1:d4:52:f2:35:2a:67:50:
                    46:5f:e1:dc:1b:e2:02:33:6f:f0:96:86:ff:84:4d:
                    9f:03:3d:ea:28:27:0e:1b:df:8e:71:c9:f1:e2:6b:
                    ea:11:52:e8:0d:f8:97:9d:2b:91:be:40:d2:c3:b3:
                    6b:39:76:27:f4:6b:16:48:94:ab:33:95:17:11:70:
                    2e:d5:cb:f8:90:2e:a3:1b:c1:c8:4c:84:64:be:6e:
                    4a:9c:14:ee:38:8c:6f:f3:0a:82:de:7a:df:1f:77:
                    3a:3e:84:dc:c1:7b:f6:fc:32:aa:2b:7d:fd:4e:50:
                    3a:86:8e:4b:ee:95:70:55:fb:88:99:2f:35:8b:b0:
                    ee:47:94:53:31:d1:f9:6b:bf:d7:17:0a:b4:6d:26:
                    6a:e0:28:3f:da:4a:cc:40:57:31:14:29:d8:b7:59:
                    da:1c:43:96:ef:ac:14:82:0e:15:6d:3c:ba:5f:22:
                    6a:b2:b3:db:37:87:a0:bc:5e:20:75:04:12:5c:70:
                    bb:9c:28:56:f1:4b:c5:e5:49:c1:9e:e5:f6:f6:0b:
                    26:e4:88:ac:42:8a:be:9e:e3:1a:95:f8:f4:40:30:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B8:2D:5E:8C:E7:EF:8D:D0:B2:B0:05:79:F7:80:12:6C:F7:A1:69
            X509v3 Authority Key Identifier:
                keyid:9E:2F:2F:75:AF:E4:28:4A:C5:CE:57:C7:F3:99:3D:C1:72:5A:B8:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ni8vda_kKErFzlfH85k9wXJauLw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:29:ff:cb:39:09:18:76:44:b7:57:9b:5e:40:f9:fe:71:a2:
         de:26:ad:94:8b:cb:be:fa:6b:6f:a4:56:d8:97:7b:d2:a5:23:
         ff:eb:88:54:33:97:da:13:78:fc:8f:47:23:ac:1b:bf:51:dd:
         9b:40:a5:d7:da:f1:b2:5c:0a:80:2d:67:11:ab:fb:b9:cf:15:
         30:31:bd:85:2b:c5:e3:92:60:1d:67:dd:5b:18:f8:67:ff:44:
         8e:08:61:22:02:15:3c:01:9f:8c:44:3d:16:9b:75:29:86:e4:
         0e:4e:23:51:63:44:70:a2:6f:06:58:b1:61:cd:f8:7e:40:10:
         2e:9b:46:a1:a8:32:0c:d3:e5:96:bf:da:ea:4f:5c:b6:e9:c8:
         da:83:72:8c:4c:cb:93:7a:58:b4:70:71:c4:8a:e2:02:d2:5c:
         c5:06:7e:7d:0e:29:13:a1:8c:90:a1:07:e2:61:08:3b:b9:3b:
         9d:9a:48:ef:bd:8c:4c:f4:01:57:7f:4b:bb:1f:8f:1a:9a:ff:
         ea:48:5d:b7:b3:87:b6:d1:96:c9:1d:0f:d9:59:07:9a:4a:24:
         77:f3:b0:31:f4:8b:5f:98:b9:c6:cb:e2:35:3b:67:c3:0b:68:
         cc:da:d7:be:42:05:ba:e2:4a:cb:fe:9d:90:a0:7c:45:12:83:
         d8:0d:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:58 2026 by rpki-client