This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
File:                     rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json)
Hash identifier:          VQ0q8BRob5lUH5QpZH2MzlsTrkmQP77/I2BmJIsT9Jc=
Subject key identifier:   47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Certificate issuer:       /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial:       1F7E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
Manifest number:          1F77
Signing time:             Sun 25 Jan 2026 11:59:49 +0000
Manifest this update:     Sun 25 Jan 2026 11:59:49 +0000
Manifest next update:     Sun 25 Jan 2026 17:59:49 +0000
Files and hashes:         1: OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa (hash: dO/cGCG0zEmArlGTSxK+o262zAi7lNagKc+xr1sGtpc=)
                          2: aDJMSli9BvYR-TM2eJeLBMHxuRg.roa (hash: 7l9/6ahCOvmnNA/ml3z5Ycx20i9RV3+76YATC6eBUR0=)
                          3: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: CDNTU2AGQ/g+/IGJ+dGQBWmS+frpYj4DQr+LA2yi0aA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8062 (0x1f7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
        Validity
            Not Before: Jan 25 11:59:49 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15:
                    e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b:
                    5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4:
                    db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa:
                    36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb:
                    5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1:
                    05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65:
                    01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49:
                    86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b:
                    02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75:
                    bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86:
                    3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7:
                    34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c:
                    72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff:
                    8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77:
                    12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06:
                    ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
            X509v3 Authority Key Identifier:
                keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:3d:fc:2d:35:c9:c6:c8:87:7c:0d:04:5c:5c:38:72:a5:
         11:ed:94:a2:df:8e:18:c8:43:92:0d:61:f9:e7:1c:ec:56:44:
         3c:6a:39:3a:c4:a1:54:03:86:46:26:42:98:15:d6:f3:46:32:
         d2:b6:76:80:fb:2d:d3:f5:28:83:ad:f4:b5:8c:a6:b5:66:22:
         26:d7:01:3b:0b:18:d2:35:81:c5:e6:15:1b:a6:73:74:bb:61:
         85:3e:0f:7a:1f:f4:ed:95:4b:59:4e:1a:4a:43:ef:bf:6b:ff:
         f6:ab:09:1c:d2:d4:f7:0e:4b:bf:d7:ec:9a:28:42:44:f2:e0:
         f3:84:bf:e9:ae:6b:c6:71:f9:66:d5:c6:3b:c4:d4:9c:44:01:
         c5:be:f4:a3:47:fb:39:ac:74:bf:37:59:1c:2d:cb:8c:7f:92:
         41:fc:15:c9:96:6e:f8:f1:1f:d3:8a:01:b8:35:ec:02:e0:d4:
         f9:fe:ef:50:6d:85:03:c2:b0:99:22:19:89:4c:52:80:c7:b2:
         d7:29:64:82:80:72:7a:af:44:c4:61:87:d6:58:bf:5d:3d:ee:
         fa:92:b7:e7:11:ca:ef:4d:15:49:3a:2c:1d:e9:3f:ce:87:eb:
         75:ec:a8:3b:7e:52:09:c4:35:89:17:e7:0d:9b:4f:84:ad:bf:
         8e:10:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:24 2026 by rpki-client