This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
File:                     fG2F62AxocqYwos7xhqYL63H-Eo.mft (raw, json)
Hash identifier:          XXn2dw4Rg3h5NRR2/2A+E0EWbIdiHyq4s30AjJP8cOY=
Subject key identifier:   19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33
Authority key identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A
Certificate issuer:       /CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
Certificate serial:       BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
Manifest number:          BB
Signing time:             Sat 06 Dec 2025 15:16:20 +0000
Manifest this update:     Sat 06 Dec 2025 15:16:20 +0000
Manifest next update:     Sat 06 Dec 2025 21:16:20 +0000
Files and hashes:         1: fG2F62AxocqYwos7xhqYL63H-Eo.crl (hash: QBeSZuH5kYeOlaXril3vZ68n/Sx5LpKSCiO6KuEfEFU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
        Validity
            Not Before: Dec  6 15:16:20 2025 GMT
            Not After : Oct 30 01:21:48 2026 GMT
        Subject: CN=1928F0D1BE79DB8D4C1701ED62EA80C315DEAE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:40:f3:65:2d:5b:b7:39:73:47:f4:69:be:
                    a0:6b:ce:c9:bd:2b:3c:cb:40:99:38:58:71:1b:d7:
                    b9:f7:54:b8:1a:f3:0f:50:b9:a4:9d:4b:95:96:8a:
                    dd:ff:d9:8f:0b:34:ff:73:51:6a:b6:96:d1:09:a6:
                    e8:b8:86:df:dc:ae:0c:1e:2d:98:be:06:07:00:2a:
                    1b:cb:28:a0:b5:4b:49:72:2c:bd:1c:80:fe:38:ac:
                    f7:52:6f:0c:ce:24:33:4e:6d:3b:16:a5:ea:a1:ba:
                    37:4e:6c:bf:ce:c2:9e:25:56:2b:d1:67:49:b2:79:
                    1b:0b:b6:91:f1:36:44:5d:d3:91:56:33:26:cc:ab:
                    f0:d9:03:e5:5b:ab:d5:5b:b2:26:75:9d:46:51:bb:
                    29:7e:51:81:97:d4:b3:66:86:08:0f:1a:43:41:83:
                    65:5e:e4:b3:d9:35:35:62:0f:de:c5:c1:31:35:f7:
                    fb:1e:00:28:9a:4a:28:a0:d8:18:8d:0f:fd:61:d5:
                    fb:8f:c3:95:2b:58:89:36:dd:4c:eb:9b:f1:86:4c:
                    25:19:f5:c3:68:7d:7f:e8:3a:01:aa:4a:de:61:d7:
                    99:ee:4a:23:f3:fa:a0:5b:f6:72:34:aa:49:cb:67:
                    a3:32:1e:51:4c:84:aa:d4:4d:fc:c9:60:9c:da:a3:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:F0:D1:BE:79:DB:8D:4C:17:01:ED:62:EA:80:C3:15:DE:AE:33
            X509v3 Authority Key Identifier:
                keyid:7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:54:81:f4:50:f2:8a:ff:2a:39:fd:9a:b8:75:8a:75:28:9f:
         a9:b5:7a:62:af:ea:a9:80:db:77:de:d5:fc:85:5a:9d:f0:43:
         fa:f6:9a:51:f3:c3:39:55:69:a7:9a:1f:47:ee:be:5a:75:6f:
         b6:0c:a6:e9:b5:52:71:eb:8b:ca:fb:23:6c:6b:3e:28:d2:b1:
         a5:b3:38:0b:c7:8f:1c:17:26:ac:c9:40:9b:86:98:2c:fd:96:
         b7:99:93:a3:61:fe:cd:75:aa:9c:37:df:49:72:4f:0a:1a:56:
         eb:72:a2:72:f6:91:9c:46:f3:84:1b:87:86:fc:aa:85:65:c8:
         fe:24:68:13:09:f8:1b:8a:7b:5a:af:74:02:fc:59:a4:a0:1a:
         e9:f2:a4:26:c3:4e:dc:63:16:80:d8:4f:f8:e0:14:99:b3:bb:
         33:19:81:2c:e0:49:fa:25:a2:4d:a8:39:8b:fb:e5:12:c8:87:
         5e:a5:d6:92:ed:b3:45:0a:a0:44:a4:0b:e8:41:e7:82:5e:3a:
         5a:48:df:0a:13:37:3d:fd:d2:b3:01:af:5c:44:30:0b:1c:a2:
         44:2e:e8:c8:9c:d0:1b:7d:da:3a:85:5c:01:05:4a:00:83:64:
         bd:b0:7a:43:96:2d:7b:41:15:36:c2:f4:6e:f7:57:0e:07:36:
         53:f1:11:19
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICALswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
RDg1RUI2MDMxQTFDQTk4QzI4QjNCQzYxQTk4MkZBREM3Rjg0QTAeFw0yNTEyMDYx
NTE2MjBaFw0yNjEwMzAwMTIxNDhaMDMxMTAvBgNVBAMTKDE5MjhGMEQxQkU3OURC
OEQ0QzE3MDFFRDYyRUE4MEMzMTVERUFFMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMw0DzZS1btzlzR/RpvqBrzsm9KzzLQJk4WHEb17n3VLga8w9Q
uaSdS5WWit3/2Y8LNP9zUWq2ltEJpui4ht/crgweLZi+BgcAKhvLKKC1S0lyLL0c
gP44rPdSbwzOJDNObTsWpeqhujdObL/Owp4lVivRZ0myeRsLtpHxNkRd05FWMybM
q/DZA+Vbq9VbsiZ1nUZRuyl+UYGX1LNmhggPGkNBg2Ve5LPZNTViD97FwTE19/se
ACiaSiig2BiND/1h1fuPw5UrWIk23Uzrm/GGTCUZ9cNofX/oOgGqSt5h15nuSiPz
+qBb9nI0qknLZ6MyHlFMhKrUTfzJYJzaozwjAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUGSjw0b55241MFwHtYuqAwxXerjMwHwYDVR0jBBgwFoAUfG2F62AxocqYwos7
xhqYL63H+EowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw
OC9mRzJGNjJBeG9jcVl3b3M3eGhxWUw2M0gtRW8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZHMkY2MkF4b2NxWXdvczd4aHFZTDYzSC1Fby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MDgvZkcyRjYyQXhvY3FZ
d29zN3hocVlMNjNILUVvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIFUgfRQ8or/Kjn9mrh1inUon6m1emKv6qmA23fe1fyFWp3wQ/r2mlHzwzlV
aaeaH0fuvlp1b7YMpum1UnHri8r7I2xrPijSsaWzOAvHjxwXJqzJQJuGmCz9lreZ
k6Nh/s11qpw330lyTwoaVutyonL2kZxG84Qbh4b8qoVlyP4kaBMJ+BuKe1qvdAL8
WaSgGunypCbDTtxjFoDYT/jgFJmzuzMZgSzgSfolok2oOYv75RLIh16l1pLts0UK
oESkC+hB54JeOlpI3woTNz390rMBr1xEMAscokQu6Mic0Bt92jqFXAEFSgCDZL2w
ekOWLXtBFTbC9G73Vw4HNlPxERk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:01:20 2025 by rpki-client