This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft
File:                     -1zNjvD7jk1PBz11qrCaEgrhgD4.mft (raw, json)
Hash identifier:          Fxnk3BZrKQ0iuz8gM615ydS/WMM7AjtePLeOFo64PR4=
Subject key identifier:   ED:5E:11:B4:3A:36:EA:46:7A:5D:97:3B:EA:A8:A1:71:A4:7B:AF:D1
Authority key identifier: FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E
Certificate issuer:       /CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E
Certificate serial:       0247
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft
Manifest number:          0247
Signing time:             Sun 25 Jan 2026 07:29:53 +0000
Manifest this update:     Sun 25 Jan 2026 07:29:53 +0000
Manifest next update:     Sun 25 Jan 2026 13:29:53 +0000
Files and hashes:         1: -1zNjvD7jk1PBz11qrCaEgrhgD4.crl (hash: Z1F0KbviiVnUQ+/8uQWDqKVgNFtd6cAwVZ2yl29yg1c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E
        Validity
            Not Before: Jan 25 07:29:53 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=ED5E11B43A36EA467A5D973BEAA8A171A47BAFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:a7:36:7d:b2:95:64:0a:65:c5:2c:dd:00:
                    10:1b:f2:0e:01:08:a9:cd:32:5a:fc:85:93:65:2a:
                    2c:4e:d5:1d:a8:12:03:da:16:43:71:59:51:41:9e:
                    b3:06:58:63:cb:54:12:6f:f8:54:06:0d:4d:5c:2c:
                    fa:00:27:07:43:08:12:e3:8c:c4:fd:fa:3f:1f:e7:
                    72:8c:d3:85:47:79:f2:02:be:ad:f3:9f:d6:44:56:
                    a1:60:dd:09:0d:38:f7:81:99:4c:de:d5:8c:de:e2:
                    36:16:cd:3d:58:2e:22:9d:70:d5:c1:0e:f1:51:93:
                    48:02:35:0e:29:e8:68:f8:6d:41:ec:d7:75:5a:2c:
                    ee:b8:e9:9f:f0:81:2c:3f:2b:f0:b3:fd:47:2f:b4:
                    70:89:e0:e6:7c:a8:cd:0e:a3:7f:a7:04:45:52:cc:
                    2e:f6:83:39:99:f8:52:9b:24:fa:8d:39:8e:e7:56:
                    ec:4d:ed:15:93:87:59:80:f4:27:ce:4b:69:59:18:
                    05:6a:c7:1f:be:32:5e:58:be:c2:1e:80:66:86:13:
                    39:06:aa:be:5a:d6:13:db:8c:61:1a:b8:87:7f:01:
                    67:62:6f:19:eb:7a:0e:a8:b9:ed:49:52:a3:96:72:
                    a3:7b:00:db:34:c5:b9:36:b7:ac:a6:df:6b:c5:cf:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:11:B4:3A:36:EA:46:7A:5D:97:3B:EA:A8:A1:71:A4:7B:AF:D1
            X509v3 Authority Key Identifier:
                keyid:FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:a8:5f:51:56:26:38:e3:51:d6:9f:3f:a9:73:a4:0f:6f:
         70:98:09:d7:32:2f:d4:bb:db:8f:5c:71:b1:ce:ea:a3:3d:52:
         2d:47:4a:20:33:25:59:8a:f3:b3:e3:90:e3:f9:a7:1e:e1:ca:
         a4:dd:6e:d1:6f:75:d0:38:d7:a1:04:e4:96:3b:79:da:61:3c:
         70:e7:19:cd:34:d1:93:79:93:03:ad:21:e1:5f:e0:82:b8:ab:
         20:72:21:21:5d:93:df:e6:4a:53:fc:69:0e:70:4f:a6:57:36:
         ab:81:1d:34:e3:fa:0e:bc:b9:f4:ee:64:21:aa:02:9b:25:a1:
         44:c3:33:a6:bf:5d:ce:2f:9f:cf:cd:b6:1d:16:87:db:09:ba:
         21:ae:d0:14:3b:7d:49:b9:77:1b:70:b9:9b:3c:43:86:95:4e:
         01:07:86:22:80:4f:2a:b0:eb:be:cf:b5:44:a6:32:e7:f9:22:
         6b:67:f9:47:0a:79:5d:dd:93:c6:e7:7b:18:b2:01:d2:77:33:
         33:b7:39:91:55:df:33:4e:70:b8:a2:8d:23:cc:1b:70:70:c9:
         6e:25:19:c5:cc:9c:fd:5d:9a:74:88:d5:47:4f:c2:3b:f9:43:
         68:9b:72:d0:c8:84:5a:57:10:91:a7:59:67:1e:70:4e:56:ec:
         5e:f7:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:32:56 2026 by rpki-client