This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
File:                     qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json)
Hash identifier:          7jYRWoirVdjZjU7G9YMbK5/Sbf89divPHOrZrDtY5q4=
Subject key identifier:   BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Certificate issuer:       /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial:       22C4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
Manifest number:          229D
Signing time:             Mon 12 Jan 2026 03:58:51 +0000
Manifest this update:     Mon 12 Jan 2026 03:58:51 +0000
Manifest next update:     Mon 12 Jan 2026 09:58:51 +0000
Files and hashes:         1: 0hz4vNpH3cYN4VjuM-aZulOR3xo.roa (hash: UzrqhvqM/vUaLsqN+HYGAXOMhCi3XMeKr1jILgQBeko=)
                          2: BNeD18WLt0dsPE1QADKFQjyRzLs.roa (hash: v34ccRxQdDkbHQaTbKeorVmUTQFMLUXK9smoMy634LM=)
                          3: Ga7f36EbcZFDn5BnJcKbsVFAxr8.roa (hash: sKcV/wEFZpASBMvxX6N49WW3WHRyegqNqDOxs98YFbw=)
                          4: KzBVO-cxJaPe6YQwzQpckjejMNg.roa (hash: TtdpJpMy4A8vwhocX/lnTsYt5BPi0LearVN8h7aM3to=)
                          5: Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa (hash: pJe5kK9bBr3GgNUP3olkRHuMNbfpo6YsuKoUg923rTQ=)
                          6: XXKUC_jUdfsh3-6DY8kDdpvzUuk.roa (hash: VYF+iRwgE2+53/k7HEAnfhbiGDtC8oHgOZL9gcS5l0g=)
                          7: hJz5LdhiOsqt12WWT5e0c3aYEcA.roa (hash: KIr5USklAiNmbRLosFNV8sMI1ZGJ2Otj8qjcNpY8H7o=)
                          8: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: m3QqR2vE3X8hvhXN1nmHFtKCcVeRTiWA3tBzDCnui4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8900 (0x22c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
        Validity
            Not Before: Jan 12 03:58:51 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e:
                    31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed:
                    f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d:
                    82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6:
                    b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87:
                    86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89:
                    a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b:
                    d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a:
                    c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4:
                    fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca:
                    56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9:
                    34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c:
                    eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2:
                    2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd:
                    ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f:
                    ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a:
                    cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
            X509v3 Authority Key Identifier:
                keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:e6:59:6e:88:75:7a:d2:1d:fa:3a:1e:d8:43:cd:31:20:
         ae:91:7f:52:d4:de:de:2a:7a:a0:f4:1e:8f:b5:eb:fa:3e:f1:
         98:be:ca:71:6d:e2:50:1b:78:86:c3:6f:44:0d:ac:65:b7:37:
         2a:1c:5f:3d:14:e8:6e:fe:6c:3b:a3:80:ae:f6:75:ce:96:1b:
         67:8c:0a:65:3b:14:5b:03:0e:38:64:51:e5:e3:9b:06:99:e9:
         f1:3b:e2:b1:cc:e4:62:15:32:b1:fa:f4:01:19:e5:30:ec:ce:
         4e:38:b4:ac:a8:23:a2:16:85:4a:44:11:75:b9:9d:5a:1c:e2:
         cf:6d:c2:cf:f0:40:38:5a:bd:16:22:aa:1f:d8:6c:e8:11:f9:
         50:51:57:a3:fd:97:68:d1:e0:4d:8e:46:67:6f:0d:d2:8d:da:
         39:a1:7a:69:cc:a5:a5:57:bb:6a:d6:ab:1e:b8:d4:0a:eb:4e:
         cc:36:c4:95:1d:5e:27:26:0b:ad:2d:c5:6e:d6:c7:56:1e:96:
         c2:c6:5c:a1:a4:3b:f3:23:c0:50:27:df:b8:e3:04:7b:47:6a:
         5d:65:e7:e1:9b:11:e1:db:6d:b2:f5:50:4b:99:3b:f3:7c:62:
         9e:bf:11:c8:99:07:e6:e9:c7:8d:6c:27:77:b7:ff:39:35:6d:
         73:9d:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----