This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
File:                     7oh6zHzktfZsz0lG8Cv6y94ot2o.mft (raw, json)
Hash identifier:          6o11qmju6wRpGJaT7zgGPqs1oBmMTv/6wblyxkgoYpo=
Subject key identifier:   71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Certificate issuer:       /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial:       203D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
Manifest number:          2028
Signing time:             Sat 06 Dec 2025 16:17:42 +0000
Manifest this update:     Sat 06 Dec 2025 16:17:42 +0000
Manifest next update:     Sat 06 Dec 2025 22:17:42 +0000
Files and hashes:         1: 6x6hqo0Cnu2DY80d0M2a1T3hILw.roa (hash: suL4eu4ACTdMQ8EhG3IwPC8L4xiiawA4SSbx7c7QEeU=)
                          2: 7oh6zHzktfZsz0lG8Cv6y94ot2o.crl (hash: oA25YI7lHhEW5ad2MsoNog9eZGk25oN2a+bipcyTafs=)
                          3: ErfEwcAx898tX4S9822NVXpbrGo.roa (hash: VAxgA96n0yvdmKEC0RETcM04sas17swBidGI/3NcD+c=)
                          4: X9U6c4cYKAx0rXhgtX8hkxalSFs.roa (hash: GoRC8cSZH4f3OWCxKXSnZPnR9NAmS+/EImBAzeimhQ8=)
                          5: zJ9YmN7_pZvu0tkeY-0KKlh6Js0.roa (hash: i9RgwHolwZTVdXudlPKeD4KuhudGO2gUAIrLw8GTjnE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8253 (0x203d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
        Validity
            Not Before: Dec  6 16:17:42 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=71D1BCAA71CD2BAB928DBD579EF3C179074B57CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:0d:60:c4:3e:68:d6:46:f0:7e:0a:c7:54:
                    8b:25:88:5d:a6:57:09:eb:d8:6b:89:e3:d3:e3:ac:
                    4d:69:db:62:e5:06:8c:e4:91:ba:71:fa:f7:d5:95:
                    58:08:be:d8:1e:a5:1d:d0:96:57:91:8c:61:7b:ec:
                    ff:10:49:62:12:f0:6c:d4:5b:ed:58:6e:c9:9b:86:
                    88:6d:18:26:6b:9e:47:bf:c4:6b:5c:04:f1:ab:9d:
                    c5:6a:cd:a8:ad:19:b4:b1:f1:8e:ce:6c:fa:eb:c6:
                    f4:97:49:72:03:bf:5f:b3:15:71:ff:55:fd:1a:5d:
                    57:d9:e9:3b:c8:79:26:dc:c7:98:96:83:c0:ed:0a:
                    a3:a7:70:18:bf:13:3d:b8:d7:f4:7d:e1:bf:34:37:
                    53:dc:b8:a6:0d:42:19:7e:42:da:ac:95:e6:1d:69:
                    27:49:14:88:e3:bd:92:36:aa:e2:6c:3a:4c:92:32:
                    4c:72:8e:c0:53:97:b4:26:a2:12:33:89:4e:7a:a1:
                    81:f9:91:0a:42:a3:4c:bd:af:c6:2c:f5:4f:03:51:
                    d3:cb:05:69:0b:29:d7:da:6f:97:7e:33:60:77:74:
                    0f:de:0b:42:d0:28:0e:17:5d:ac:72:6c:2d:4f:0f:
                    ad:79:16:c8:83:fc:d5:df:1c:3b:22:0e:cd:59:3c:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
            X509v3 Authority Key Identifier:
                keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:a7:8d:bf:8f:b9:36:34:70:ee:52:7a:b8:ce:77:65:c2:
         68:c6:f1:37:0d:5f:2f:5b:d5:e7:b1:b0:aa:70:94:52:27:c6:
         e9:36:ac:8b:34:bf:2e:36:c9:18:d8:c1:6e:0b:80:9a:2d:67:
         07:11:0e:e6:56:eb:bf:85:22:1e:2c:e8:8d:fc:49:0f:2c:84:
         5f:30:c2:8d:82:ab:68:5b:fb:a2:01:58:b6:ab:b3:19:ae:3a:
         f2:24:73:11:82:fa:54:da:ee:38:f0:2f:d5:6f:c3:66:4d:ed:
         60:de:a5:32:2d:05:35:40:35:7d:20:21:ae:58:da:9c:78:5d:
         d0:32:18:6f:16:51:0b:94:fc:bf:18:9e:09:5b:86:fe:9e:7f:
         d7:46:92:74:31:1d:c7:06:ad:29:f1:85:fe:23:55:6a:a7:1b:
         5b:1c:9f:8b:16:a1:7a:20:ba:58:4b:01:7a:6e:7a:db:9d:02:
         90:9e:85:86:81:6d:73:50:d3:f2:e1:58:ff:2c:a1:d4:18:c0:
         4b:4a:31:43:f6:52:fd:8a:73:64:97:4b:8f:d0:88:a9:46:2c:
         2b:70:41:c6:73:c8:a4:b8:ef:13:0d:54:7e:60:35:97:60:04:
         c6:1d:95:fc:6c:3d:de:71:cc:fb:00:85:18:d1:a5:ac:85:31:
         e8:54:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----