This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
File:                     guAWKrqAu-i04flju0W2Ryk0T6E.mft (raw, json)
Hash identifier:          2t7sDyLSYXFOJK4/i8tOO4uIK41oirLAeBtoMXEzzeY=
Subject key identifier:   F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5
Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1
Certificate issuer:       /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1
Certificate serial:       221E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
Manifest number:          2208
Signing time:             Mon 12 Jan 2026 03:59:45 +0000
Manifest this update:     Mon 12 Jan 2026 03:59:45 +0000
Manifest next update:     Mon 12 Jan 2026 09:59:45 +0000
Files and hashes:         1: 4YOzomKcJUXAFw9fKmEbyIc_I_E.roa (hash: xlrCviDFUJgMiG0Z3VPRhgttohoFYmMqntpCxYLbY14=)
                          2: 8gJqZBoyYoIMpldq4sHoZ2y88Yc.roa (hash: A5PUZFXjsFs9QK+LXr9/JRSvJmJ+reF3ba8SXabA1/c=)
                          3: FgobWs3sQ2dJk2kmY2s8-c6R0a0.roa (hash: YC5aSzCQUNfMwbsUmC5AYZ5XOu8a6wKsgO4v1O0H3hY=)
                          4: PYtXJ6tl5r9WY5sf-s4OqvR_2lY.roa (hash: 2AH+e21KqDdm7qi+016NzWiUE20tGV/t5rYXqMvAfS0=)
                          5: TP5iwzOIGJrkaLK_VbSQwX5LiiY.roa (hash: 9fF8xSayAIQ4wzITCsmJKy/K8Fv7nR8Q0uKRSdJ+p68=)
                          6: Ta_itm9cCwLMDRPIADeBG6S47y8.roa (hash: e2n1k/hDBPrm8VUTWum5XntniMTtDYm7llBQxjUHYg8=)
                          7: TgaC8usR8mFNmSTO2xTS0Y95_kk.roa (hash: Jlkjs7rBGmWQWYqxRd92AzlzxKWZvw5TnHgmNoVDdfU=)
                          8: UUOAf8Ue_9lm8TIb1fwsmIEpzrM.roa (hash: +qBaZ6oebJXmsn757Re2+hRwFZXz3lAEeQQy268hqfM=)
                          9: Ycvv9rk043oNS7icGyXynYMt4XY.roa (hash: tqOA/1bpNDXUT7rPK/Q3H7XOiMARr6Gc760M+0Md/hw=)
                          10: brZW4869o68wYk_harYYp5jHKIA.roa (hash: Ido/784t5WAytSiF2PqHCSPqeJWwgT1fwZXXJeXeLm4=)
                          11: guAWKrqAu-i04flju0W2Ryk0T6E.crl (hash: /KWkngSrpbDqvpwDeusFe5QEJ2UTvoomXcEKYvnf0Y0=)
                          12: i4_OXkOkejjlSFmtJl6eHLGLSFo.roa (hash: r0Pw8MBvh/UZUww72GxgSsMnkypDK2kvh+ZH4Ln2+pc=)
                          13: kaoz9S7xzUO_M_x6qQFszkk2co0.roa (hash: HI7lpzJt9+7KuHpTeQx0TmU/8Ex/R5zlewmJi5duL00=)
                          14: lBKbeBi7CLkW7Db0v0ETeSgWwUc.roa (hash: 9nLXlJXBaQI0FXe5W2VSj//wUkUeHmPkZvcgHoxZIes=)
                          15: nI15WrKjxQOirS2-kGeR1FWVoas.roa (hash: aKy6VwHGVk8v13lxjLrefPWr49fFi907wvJu1XZMw3Q=)
                          16: p5e6uyCFfVpDwOZYwmIjPJj2ZqY.roa (hash: UqfIQtOs/5RQwBgOxogb+2FTcwxu4gPzGvTCdaAdTQY=)
                          17: pCrL_f8azLFflthoyXFvQZFYyME.roa (hash: iZB/Evq3/fIUnwGXoqQ/0e4PUWqj+5FmRlw8Jeazu4A=)
                          18: r5YhRoikBQTJwFc97V4GwG_qFcc.roa (hash: IWum0e/0/jFnmYpyRozfuzrMmwJ19yhF29Qj972mx9g=)
                          19: ssO_IzqK4ZwYf3SksKdeQJndwuU.roa (hash: nK+h2me1yan+kuNYeA2m6/gr4o4V3gAyWDlu2HZlYJs=)
                          20: tEhPp_yyq9ayqv3EpRZ4RjKHJ5o.roa (hash: 356MZ4hSc9QARM+D4usymioMmw2yqd58VuqXE0/DBNU=)
                          21: ueu3-o23v8rpf8v8o41oSCQ1Dvk.roa (hash: igZInox99bT8n28UcWqfLjSneOYm8hFSht3GzKzu3wk=)
                          22: uvPcsxNmtt46kdqqxXAqUGOYvCU.roa (hash: tKVZzcxlx8BOSCwt24MCHMHZ4iqxC42SfX0Yuwqd9qc=)
                          23: z34wYZAF0BTg_35NeD26SG-T2yQ.roa (hash: 0R5rkpRRDQDX/L982Bs85RVs5FC+cQF5mV7csFDUWE0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8734 (0x221e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1
        Validity
            Not Before: Jan 12 03:59:45 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=F6E4B1FDF66446B6C4851BFC43A9163261C196E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:2f:13:11:4e:c1:4d:64:10:b1:61:cf:b6:
                    de:9a:85:44:6f:6b:18:6e:4b:2d:4a:e2:5a:23:0b:
                    dc:c6:c2:d6:e1:da:d5:ea:71:0e:e2:8f:4b:37:13:
                    0a:c1:40:c5:ca:81:65:42:2c:30:70:71:a5:35:4c:
                    ec:10:e1:57:18:fa:46:1c:ae:d1:6f:e8:74:2d:ba:
                    01:9f:25:0e:92:40:e7:0c:fb:6c:5e:f6:3a:a5:20:
                    87:86:b0:25:26:00:e4:49:80:2c:81:2c:ff:1a:e1:
                    2a:37:8d:2e:f7:78:f9:fe:2c:db:0f:4a:ad:53:71:
                    c9:ad:5e:73:ea:67:e0:c7:24:9f:a6:e6:7e:89:f4:
                    52:83:7a:25:f2:03:c5:bc:4e:34:2b:46:eb:d8:cc:
                    bf:57:c7:29:43:29:c0:ba:ae:52:24:ac:16:cf:85:
                    aa:87:41:51:7f:98:9f:df:db:58:3f:4f:a2:3c:2c:
                    92:f6:a3:23:9b:c4:4b:a6:e1:da:db:9d:79:82:f2:
                    d0:fd:3a:92:3c:a4:37:81:63:c5:c0:b5:d2:3a:f1:
                    a4:6b:6c:ed:80:f9:66:e5:f7:a1:d1:72:18:6f:20:
                    62:a8:1d:f2:a0:f7:0f:77:71:ad:91:ba:ca:88:f0:
                    55:79:86:b8:74:33:dc:9a:c1:58:6b:ec:e6:27:0a:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5
            X509v3 Authority Key Identifier:
                keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:f2:32:b0:ac:95:b6:e7:7f:5e:10:50:94:52:1a:f8:41:
         65:82:99:d2:8f:ab:0b:d9:b6:89:d5:a8:7c:20:6f:18:60:d0:
         34:f1:dc:bf:8f:eb:67:e9:84:2f:aa:c0:64:97:fe:8d:82:1a:
         27:33:af:ac:04:3d:83:63:a0:96:02:3a:e6:80:ec:0e:36:25:
         85:56:a7:3d:8c:b9:ca:52:81:6d:3c:dd:42:03:b3:39:a5:68:
         6c:dd:2d:0c:36:20:dd:19:76:4c:f2:1b:b9:39:c9:d0:ed:65:
         67:20:02:93:ce:b2:a0:e7:72:38:c2:24:94:25:3b:5f:db:b1:
         9c:d6:05:4b:07:64:08:17:05:a9:9a:9b:42:b3:35:f7:d1:c2:
         ea:e5:5d:3a:35:57:6a:dd:c0:09:ea:68:25:d9:c8:3d:80:02:
         15:f4:e8:0f:75:f3:94:37:ca:a4:3d:63:80:8e:09:8b:b5:fd:
         f8:2d:0b:4d:23:15:02:7f:d3:a8:15:fe:9a:b3:80:32:a4:bc:
         99:63:0f:a2:dd:d4:d4:3d:21:4b:cf:8b:4c:5b:ad:c5:8c:36:
         6d:c7:a6:5d:00:eb:eb:91:4a:31:5c:f2:19:13:cc:08:93:2a:
         76:cb:54:96:cc:49:59:0f:7a:b1:5e:c3:8b:b4:3d:67:d8:5a:
         49:10:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:35:19 2026 by rpki-client