This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3414/6JidwRLzyLohZdtMK1ngQztUAgA.mft
File:                     6JidwRLzyLohZdtMK1ngQztUAgA.mft (raw, json)
Hash identifier:          DQhoemQ5uCfU7ynE81WW1GGWlv1X4SsYj7avmnbTyfo=
Subject key identifier:   4A:D0:0E:72:A5:4F:5D:43:85:24:28:C9:38:C0:18:57:14:A5:FC:C0
Authority key identifier: E8:98:9D:C1:12:F3:C8:BA:21:65:DB:4C:2B:59:E0:43:3B:54:02:00
Certificate issuer:       /CN=E8989DC112F3C8BA2165DB4C2B59E0433B540200
Certificate serial:       0115
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6JidwRLzyLohZdtMK1ngQztUAgA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/6JidwRLzyLohZdtMK1ngQztUAgA.mft
Manifest number:          0115
Signing time:             Sun 25 Jan 2026 05:56:32 +0000
Manifest this update:     Sun 25 Jan 2026 05:56:32 +0000
Manifest next update:     Sun 25 Jan 2026 11:56:32 +0000
Files and hashes:         1: 6JidwRLzyLohZdtMK1ngQztUAgA.crl (hash: lfDO2NPvBJPFcDNf+sBpoxXRKuBQBAlJEJEv5LlCCMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8989DC112F3C8BA2165DB4C2B59E0433B540200
        Validity
            Not Before: Jan 25 05:56:32 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=4AD00E72A54F5D43852428C938C0185714A5FCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:1d:75:b8:27:67:1c:64:40:c5:8f:6e:39:
                    8f:49:0a:6a:a2:01:fb:ee:0d:fd:ea:ff:30:bc:b5:
                    b6:a3:fa:cd:2d:cb:c6:43:e5:d4:f3:4b:44:bd:e9:
                    b5:27:64:a9:d3:c7:2b:78:2a:9f:9e:ce:3f:a9:86:
                    b4:ec:f2:7d:39:88:aa:6a:02:0a:fb:60:34:b4:d8:
                    6a:21:29:4f:5c:ac:55:c3:a6:b6:c1:57:d6:46:bc:
                    bc:0c:c0:7e:f3:bb:54:9b:ce:54:f6:17:f6:9c:ef:
                    20:6d:c4:18:0b:4e:8e:a5:e8:3f:19:8f:df:8e:b1:
                    8e:33:b2:4f:ed:f4:b9:57:d1:a1:17:c4:b0:3c:db:
                    d7:1b:17:57:4e:0e:9c:a1:7b:b7:38:ee:a9:bb:fe:
                    bf:1a:ef:60:cd:95:33:6a:f6:38:03:16:e4:2c:c3:
                    28:d0:fe:41:1d:89:d8:2a:bb:00:9a:c8:13:da:cc:
                    6a:8c:b7:b4:c9:3f:ff:4f:dd:28:a1:1e:ee:4b:06:
                    b7:3e:99:03:79:41:aa:db:66:79:af:dc:c3:a5:2c:
                    5d:17:ea:f1:44:d2:e5:5b:1c:53:43:aa:e4:48:c0:
                    f5:65:2c:9d:00:9e:38:61:71:0b:5a:5c:22:4d:f3:
                    9d:d8:fa:5f:69:00:8a:2c:be:e1:f6:d9:0d:db:9e:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D0:0E:72:A5:4F:5D:43:85:24:28:C9:38:C0:18:57:14:A5:FC:C0
            X509v3 Authority Key Identifier:
                keyid:E8:98:9D:C1:12:F3:C8:BA:21:65:DB:4C:2B:59:E0:43:3B:54:02:00

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/6JidwRLzyLohZdtMK1ngQztUAgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6JidwRLzyLohZdtMK1ngQztUAgA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3414/6JidwRLzyLohZdtMK1ngQztUAgA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:80:d2:0b:9a:1a:b5:99:54:f9:4f:6a:08:02:43:db:b4:13:
         8f:67:7e:bf:42:df:fe:f0:4b:c8:ec:3c:3a:be:0e:58:73:36:
         ae:88:6f:c8:91:30:1a:33:78:1c:1a:d1:a5:50:71:b0:99:c0:
         8c:24:ba:1f:97:09:c8:3e:02:83:12:a7:a9:53:2a:dd:5e:6e:
         6c:3d:60:9e:8d:fd:dc:47:1c:32:91:89:eb:c6:43:da:53:b5:
         02:8b:74:75:37:be:74:2b:0d:ea:30:ed:86:82:e5:93:38:df:
         0d:84:09:ef:c7:20:0a:4b:80:cf:0d:6a:66:ac:65:49:8b:0c:
         64:8c:3d:b1:be:4f:ee:51:8f:1e:48:2c:27:cc:a4:6a:3f:ef:
         07:55:ca:95:81:fb:da:97:51:0f:27:a2:64:2f:40:99:63:c3:
         bd:9a:06:cd:0f:75:ed:e8:fc:49:dc:65:d1:0d:7c:b7:ec:eb:
         d5:a8:86:a8:ea:28:63:a8:57:26:95:1f:9f:1d:f5:ca:e3:9f:
         7d:01:38:79:e6:e1:0b:fa:56:9b:38:2e:da:40:a6:59:ca:6f:
         6a:25:90:57:7a:67:92:01:e1:8b:3c:e4:4b:d5:34:db:9f:64:
         87:34:e2:aa:4d:ea:4a:af:dd:f3:c2:2f:0f:78:63:14:f6:f0:
         66:bc:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:11 2026 by rpki-client