This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
File:                     7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json)
Hash identifier:          9fktVHS9QLmREIucJvqv/I8cuJiS/fRJg6xBTNIbR2w=
Subject key identifier:   63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
Certificate issuer:       /CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Certificate serial:       2246
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
Manifest number:          2246
Signing time:             Sun 21 Dec 2025 11:43:03 +0000
Manifest this update:     Sun 21 Dec 2025 11:43:03 +0000
Manifest next update:     Sun 21 Dec 2025 17:43:03 +0000
Files and hashes:         1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: vAUgItMSUAs0j7cNuRzeF0qKc5P52an0hhR47Ddj+i8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8774 (0x2246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962
        Validity
            Not Before: Dec 21 11:43:03 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38:
                    42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e:
                    0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7:
                    da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e:
                    f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7:
                    39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5:
                    64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba:
                    75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de:
                    0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be:
                    34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f:
                    b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f:
                    52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b:
                    4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24:
                    81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a:
                    04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5:
                    80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43:
                    2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
            X509v3 Authority Key Identifier:
                keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:65:81:8d:6a:de:9b:4c:42:da:5f:86:d1:7a:f5:ad:f8:88:
         08:b3:c8:2d:0e:7b:08:ca:e4:ca:2c:61:e3:a4:94:4d:00:3d:
         a7:eb:c2:de:36:ab:34:ff:b5:c9:fc:e8:9e:5c:1b:38:ac:04:
         51:c5:3f:08:b0:53:e4:64:02:08:96:a6:12:ca:b5:2d:67:b9:
         85:07:cb:9e:4c:27:51:db:34:ed:21:2d:97:ec:73:7a:fe:f8:
         57:b4:92:b8:b2:83:9f:92:38:af:1a:62:33:81:ea:fa:1a:b3:
         fa:56:ba:67:88:83:1a:f1:f7:bc:ca:e5:87:da:42:78:be:fb:
         de:26:10:44:bb:40:d6:e5:a5:c0:4a:df:70:7e:f7:88:a7:9d:
         22:42:0f:1e:cc:78:ce:0e:0b:5e:76:68:81:19:bc:38:35:4a:
         f3:44:e4:7c:83:4f:b5:34:e6:a8:28:27:c6:82:d0:44:f6:5d:
         89:8f:95:eb:5a:eb:61:24:59:29:19:e5:42:77:e7:7f:6f:19:
         6a:ca:b3:3f:62:38:ad:c7:70:ed:39:d7:7f:8f:95:dd:a3:af:
         a0:04:f2:e1:84:b8:4a:8f:b0:85:2b:a9:ca:c7:f3:2b:4d:7b:
         77:05:a9:2d:12:6d:62:11:3d:4b:90:7e:04:03:d1:c2:8f:9f:
         07:ec:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:19:27 2025 by rpki-client