This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
File:                     iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft (raw, json)
Hash identifier:          vRkhTUcsz+H+JHLdzd6gGRASEsbwqeP/Tb0wPh/R9Ho=
Subject key identifier:   0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC
Authority key identifier: 88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
Certificate issuer:       /CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
Certificate serial:       01E9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
Manifest number:          01E5
Signing time:             Mon 26 Jan 2026 06:28:44 +0000
Manifest this update:     Mon 26 Jan 2026 06:28:44 +0000
Manifest next update:     Mon 26 Jan 2026 12:28:44 +0000
Files and hashes:         1: 0tXJhjrShCOZ_hSYp5KXxrxILYg.roa (hash: P4zzpwHv35P8/ZqKhNk96zu1Bs0VO0U5hO26cVsDcxA=)
                          2: 99HRwhw6tal7rDmw-PFDo59JioM.roa (hash: T7qj9RdduCmFelHSSIKeK8dbeOUk57gZ9sZGu20s13s=)
                          3: SZVv0d8wmaj2M9td0BSd4841GMs.roa (hash: WIihbieqLoWkrNlubEmmUEkPBvTK3qRwJxS+f+cCACY=)
                          4: UXY-RYaZHgTYhXJhGXXf96toWwE.roa (hash: m8GqULFjpNYHqvAai/zNQGo0eznqvOaJ5lpdYuPHNIE=)
                          5: iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl (hash: sdbAcZQacfIqEm0qJYTKQjCd4Sctxq7enjW7kbIEG6k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
        Validity
            Not Before: Jan 26 06:28:44 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=0CCE83A62E1F1DA81CE249FC3FC4BF44372AFFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:c5:ba:fd:1a:8b:17:a4:7c:81:9d:e5:b8:
                    ab:85:f0:6e:ee:31:c7:86:ee:67:17:09:de:b7:93:
                    58:90:43:ce:02:73:6b:99:05:ea:0a:69:10:50:8d:
                    9f:ae:6e:2d:7c:ab:a4:84:7c:e3:0b:59:99:61:e0:
                    63:6f:fc:54:5d:04:e8:b2:cc:9e:03:05:1c:8a:e2:
                    70:da:13:33:da:9d:f9:e3:0d:52:3d:75:76:6c:8a:
                    50:eb:2c:ca:c9:e2:31:18:eb:ab:40:9f:60:32:02:
                    84:31:a2:e0:62:c0:79:ba:a6:77:7a:de:9d:b1:0d:
                    a8:8b:3a:36:78:32:51:6b:c0:3e:1d:4d:3a:61:2c:
                    9b:ed:3a:49:ed:06:99:5c:4a:5b:63:01:a3:ad:1f:
                    1e:56:21:8c:b2:4f:d3:86:6e:b2:1c:42:31:51:42:
                    56:15:b8:be:2b:db:e1:16:f0:89:f5:0a:37:14:08:
                    20:09:d6:17:79:6e:3b:78:bc:ab:e1:ba:5a:af:71:
                    59:f4:d4:39:6c:e1:8c:34:1d:fa:b3:00:cf:c0:71:
                    d0:71:10:b2:fc:47:20:46:70:c3:d8:3b:a3:4a:fe:
                    f1:cf:6a:6a:75:3d:96:d9:03:b0:e0:ee:6c:be:62:
                    54:b7:81:9a:82:f5:f5:b2:a4:d6:0d:a8:20:14:a6:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:83:A6:2E:1F:1D:A8:1C:E2:49:FC:3F:C4:BF:44:37:2A:FF:AC
            X509v3 Authority Key Identifier:
                keyid:88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:c9:4f:86:7f:5a:e7:fd:ba:8a:cf:8c:a7:b3:f8:24:fb:
         b2:ae:69:e6:cc:81:7e:03:a6:76:f9:fd:72:0f:f4:74:d4:f3:
         4b:83:b0:5d:9c:5d:3d:3f:a1:f5:d8:41:49:a5:4f:e2:e0:fd:
         7e:68:19:6e:5a:bf:21:c9:33:2c:d2:da:73:b5:1b:8f:f1:13:
         14:de:13:46:79:57:a0:ed:6d:4c:ee:d0:87:39:11:57:6b:d0:
         6a:18:f0:78:4a:ba:f8:38:dd:af:85:bc:61:73:63:c1:38:ff:
         d0:d0:f2:97:cf:f7:96:a3:25:07:4e:42:12:b0:71:d1:40:c9:
         38:6f:35:e9:ae:8f:6a:13:0a:53:e1:19:18:6e:98:50:bf:01:
         26:00:4e:97:31:dd:77:0b:80:e8:ae:0e:0b:a0:09:96:75:22:
         5b:1a:f3:fe:15:f5:cf:9b:6e:0c:c6:b5:f2:10:18:67:0a:45:
         ad:f8:79:b3:09:69:4b:a0:1e:df:41:10:c3:ce:2b:b4:e5:c9:
         04:d5:e7:24:76:13:43:15:5f:61:6b:ca:b6:f5:54:7b:82:39:
         6c:a9:fa:80:f3:43:b0:c0:48:4e:35:21:17:a3:56:9b:3b:3c:
         a0:0a:98:83:37:76:b1:21:78:1f:c9:50:2e:a9:26:33:6c:39:
         f0:d2:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----