This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
File:                     jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft (raw, json)
Hash identifier:          pcCwFsfglBZMp4/VDtUo5qSgBhB1mmVCJsqeY+uTUxs=
Subject key identifier:   7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E
Authority key identifier: 8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22
Certificate issuer:       /CN=8D2A27434316636A24FC67EBB6DCF89304ADF022
Certificate serial:       C5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
Manifest number:          C5
Signing time:             Sun 25 Jan 2026 06:27:28 +0000
Manifest this update:     Sun 25 Jan 2026 06:27:28 +0000
Manifest next update:     Sun 25 Jan 2026 12:27:28 +0000
Files and hashes:         1: jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl (hash: ZkkxjYipAgsjJJsTc92LhyF1ekQrUowjtbSdU85YGW8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2A27434316636A24FC67EBB6DCF89304ADF022
        Validity
            Not Before: Jan 25 06:27:28 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=7FC7075AECEF63638586FC5A1C648C5286973E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:8c:92:70:42:0e:87:57:fd:0e:2b:d8:df:
                    dc:d6:ca:4e:de:7b:61:dc:d4:8a:a4:35:e0:c8:bc:
                    ed:3b:41:2e:01:13:d9:ab:94:41:55:98:eb:60:cd:
                    d8:fa:0f:ee:68:34:09:59:2f:cf:9d:a2:57:5e:f4:
                    b1:6b:a8:c2:6b:2f:f0:9d:d1:cf:7f:7b:ce:35:38:
                    b5:5b:27:c4:7b:ce:a5:4b:af:1e:21:e0:bd:f1:9d:
                    de:a3:72:67:b6:30:b3:b4:b5:af:45:62:8b:e1:f8:
                    cb:9d:be:5a:9f:4b:b2:ea:3d:2f:56:1e:3c:1e:37:
                    32:f7:84:25:e6:13:5c:71:ef:2d:fb:af:fc:bd:22:
                    cc:6f:d1:eb:6b:b1:de:14:4f:de:4e:d6:4a:06:83:
                    ce:7a:e5:dd:4e:8f:93:16:fc:89:8e:25:1d:c8:b4:
                    bf:68:e2:82:a0:79:27:62:41:51:9b:62:cc:5b:4c:
                    c1:38:34:f7:3b:a3:d9:a4:d4:11:3c:69:92:79:95:
                    ed:d3:bb:7e:7b:b0:b8:93:5a:fa:33:e9:23:6b:f6:
                    49:6f:f4:4a:30:e2:df:b0:65:b3:1b:a4:23:d0:05:
                    70:5b:ba:c8:1a:38:5a:15:d8:8c:e6:8f:7d:ef:a0:
                    f0:2b:3f:ef:19:e9:bc:3b:11:4a:ab:86:8f:5c:a6:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C7:07:5A:EC:EF:63:63:85:86:FC:5A:1C:64:8C:52:86:97:3E:1E
            X509v3 Authority Key Identifier:
                keyid:8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:23:93:51:da:d2:d4:6e:a0:00:ac:f4:01:2e:b6:55:6a:
         19:d1:c9:e0:9e:d6:57:58:57:ae:34:31:61:76:8d:10:00:a7:
         3a:24:00:53:37:9e:9b:40:3d:44:e2:45:1f:69:4e:5d:b4:73:
         a6:6e:16:c2:fe:cb:46:df:6c:63:20:8e:8d:f9:bf:38:20:ee:
         72:1a:2c:69:53:bd:7c:3a:ec:26:36:1c:67:5e:0b:f5:e0:85:
         56:7e:d7:8a:05:7b:4a:88:c8:74:ee:d4:84:5a:e8:65:a5:71:
         9a:f7:8d:f2:dc:ef:33:64:21:65:55:cb:94:6c:af:e9:41:df:
         4b:d9:47:05:b1:d5:38:b3:7f:27:02:80:b4:76:76:61:01:21:
         cc:c7:94:5d:7c:c2:65:70:45:9e:f3:c1:5d:c1:79:67:1f:55:
         a0:5c:ca:c7:22:e2:de:da:9c:83:79:ff:db:2e:1a:cb:46:af:
         e6:ca:62:60:48:82:08:68:57:42:a2:68:4b:c5:4b:5a:8c:4b:
         cc:5c:21:6a:2b:e6:f8:17:39:78:5b:f0:20:44:6a:2c:70:ab:
         1e:d6:30:a5:34:d3:2a:b1:1c:e5:e1:84:2f:92:63:9c:4c:da:
         d1:e8:06:ec:f2:00:37:85:19:0c:c1:8f:eb:53:b3:42:7b:c5:
         67:26:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:02:07 2026 by rpki-client