This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
File:                     Ab4zXmpO-5VNuniThGkpo6X2hno.mft (raw, json)
Hash identifier:          qhPjTjaExpViwi/L9mzLF6ZAL0Wyy7h4211CgLd9AAA=
Subject key identifier:   FA:83:3F:CB:2C:B6:E9:1B:02:46:73:91:50:C5:68:9D:89:84:67:09
Authority key identifier: 01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
Certificate issuer:       /CN=01BE335E6A4EFB954DBA7893846929A3A5F6867A
Certificate serial:       013C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ab4zXmpO-5VNuniThGkpo6X2hno.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
Manifest number:          0134
Signing time:             Sun 21 Dec 2025 06:40:30 +0000
Manifest this update:     Sun 21 Dec 2025 06:40:30 +0000
Manifest next update:     Sun 21 Dec 2025 12:40:30 +0000
Files and hashes:         1: 5LOLlAIfQshnZv-A-yit2bYPTFo.roa (hash: hxfdu9xHt7cnTvpqU3L+8tXpGulefAZyhVcuuyqv+JE=)
                          2: AZp661QogaamAn6kJhyEDq3lnpI.roa (hash: uVgRCC3TYs9CHxk1EXfcS4ShgRRYkecdU6L+XifaETw=)
                          3: Ab4zXmpO-5VNuniThGkpo6X2hno.crl (hash: 5Q8+5QjVEJ2RbLr99kI7ZIRzW8cPymh6VLXkYlCrY/M=)
                          4: TkMmlTcEcQLD7pSSb1TqYpSMWS0.roa (hash: EXUzTGbeJC8KE4XzujOoFpoduu3zvEsV8X0422gj9gE=)
                          5: sbu17e0QoVUI9W7RNg3UI95CtpM.roa (hash: s9gRekXs+s24fDqiGJ+uhEWtDdujVoxBCQiLjYe1MCQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BE335E6A4EFB954DBA7893846929A3A5F6867A
        Validity
            Not Before: Dec 21 06:40:30 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=FA833FCB2CB6E91B0246739150C5689D89846709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:35:f9:4b:da:d1:4a:84:f2:7d:6d:83:80:
                    fc:b2:9e:1a:43:bc:c5:b6:16:62:69:16:d8:f8:32:
                    f4:fb:8a:2a:f4:f3:90:c5:2b:6e:d0:d4:52:93:2d:
                    aa:be:11:a6:c2:a3:ef:ef:f6:e2:00:c3:89:11:50:
                    2e:9b:10:9b:59:45:1a:fa:cb:44:ed:7a:f5:a7:26:
                    46:4e:95:50:df:fb:2f:e6:a2:0b:02:d5:12:4a:aa:
                    16:ad:86:5f:05:1e:4d:33:a1:cf:60:ea:6c:b8:e2:
                    c7:00:ae:12:31:09:6e:a0:4f:33:77:e6:63:1f:23:
                    93:46:00:db:c0:f0:ce:0b:e1:c4:16:a0:55:2b:aa:
                    2d:51:68:47:0b:65:27:96:45:1e:36:cd:d6:d0:1b:
                    ca:1f:7b:b4:6f:6a:ec:aa:e3:2d:5b:b0:d5:3e:90:
                    56:fb:23:b4:96:ec:bb:ea:09:f1:a9:3f:da:88:02:
                    b6:9f:d3:9b:b6:28:cc:65:54:e8:a0:52:9a:49:f8:
                    bd:81:bb:75:35:ec:48:17:bd:95:48:65:0d:31:de:
                    15:1e:de:18:49:f5:95:22:01:ed:a2:92:5f:76:86:
                    92:64:af:36:d9:10:af:6c:2c:6d:a4:3b:96:5f:e8:
                    99:fb:e8:4d:6f:86:81:83:62:c5:de:d1:b9:10:73:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:3F:CB:2C:B6:E9:1B:02:46:73:91:50:C5:68:9D:89:84:67:09
            X509v3 Authority Key Identifier:
                keyid:01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ab4zXmpO-5VNuniThGkpo6X2hno.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fd:2a:14:80:42:35:bf:fd:5d:fe:e8:6b:1d:04:9b:f7:68:
         fa:db:85:6b:8e:aa:de:35:4f:f2:30:63:38:8a:cd:fc:23:79:
         fa:05:00:eb:9b:cd:38:fb:6e:86:4e:16:89:2a:5c:5c:08:74:
         59:62:e8:c2:b8:d9:c7:2c:16:f3:b6:61:cd:63:f2:07:6d:40:
         4e:98:a6:48:4b:0c:74:3e:40:41:1d:8d:a8:60:73:be:0c:4d:
         d6:f6:c7:d8:36:e9:59:6e:d1:19:aa:ee:fb:d3:6c:02:74:cd:
         85:12:1d:b0:80:e8:1c:a6:62:73:eb:c7:db:c9:12:d4:f2:aa:
         2f:f2:b8:08:eb:da:9e:3f:85:b8:93:87:9e:25:e9:4b:de:b7:
         2a:0f:8b:93:9b:0d:c8:cf:5a:4e:7a:c5:94:fd:97:a3:7e:79:
         02:b0:58:d3:27:2a:a7:64:66:f1:35:43:83:fa:14:bb:51:5f:
         80:5d:c8:52:b4:e0:fa:fb:1d:bb:e6:83:af:90:a2:01:f1:94:
         f7:6a:b8:46:3f:fa:51:99:0b:63:55:eb:fb:6b:0c:15:87:ff:
         49:18:86:fd:5e:c9:dc:81:17:c6:3f:df:77:c6:6f:e9:46:e4:
         38:5d:af:ac:c5:09:f4:4c:88:f0:63:14:33:56:36:70:2a:96:
         2f:f5:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----