This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
File:                     fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json)
Hash identifier:          k00UCxM7j0tVaTB/HFQ2jEybz1qy+hu31G3aK0+oW74=
Subject key identifier:   A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09
Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6
Certificate issuer:       /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
Certificate serial:       07EB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
Manifest number:          07EB
Signing time:             Sun 11 Jan 2026 23:59:18 +0000
Manifest this update:     Sun 11 Jan 2026 23:59:18 +0000
Manifest next update:     Mon 12 Jan 2026 05:59:18 +0000
Files and hashes:         1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: AjHfrIA0fChSHaWBMJaLRrJxy2aTKtqussaTN1qhgjQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
        Validity
            Not Before: Jan 11 23:59:18 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22:
                    98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77:
                    8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0:
                    a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1:
                    c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b:
                    8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d:
                    28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9:
                    11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50:
                    de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c:
                    d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1:
                    a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c:
                    e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3:
                    d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5:
                    a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32:
                    bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0:
                    47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6:
                    a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09
            X509v3 Authority Key Identifier:
                keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:00:e4:6d:17:c2:d5:7b:8a:44:b0:0b:0e:77:a1:1b:c9:
         59:96:cd:e0:5b:3c:0d:9b:b7:11:b2:34:49:b8:b9:db:d0:d3:
         6b:30:67:3a:24:43:4d:00:a9:b0:73:91:14:ab:3b:bb:60:34:
         da:fe:bf:44:50:07:18:c8:af:a8:6a:87:3d:cf:81:3f:ba:b4:
         37:5d:c1:80:98:ae:a6:c9:8b:74:a5:84:05:e5:0a:63:b4:8a:
         2e:50:05:4e:f7:bb:c0:53:47:09:c4:d0:78:1f:4b:70:15:3c:
         f9:dc:e8:15:46:0e:37:85:a3:a3:eb:aa:85:f9:71:ef:6e:37:
         ef:bc:2e:8a:fc:44:96:46:39:9c:f1:fa:67:ee:7c:1d:db:39:
         46:88:71:ae:a5:8e:58:d0:42:da:46:3d:2e:f5:aa:b6:d1:49:
         21:66:cb:7b:98:e9:72:49:46:94:cf:5a:81:20:17:40:77:8a:
         f4:17:95:6b:0e:85:90:a1:2b:5f:91:89:7b:9d:c1:b9:24:02:
         c4:5f:cd:3c:d0:ad:a8:c3:0f:b4:80:80:88:1a:c3:81:c8:af:
         93:36:1d:bd:79:94:2e:be:96:09:69:50:e5:8d:0a:40:eb:96:
         7f:1f:d1:ba:56:cd:df:b8:45:6e:de:b7:3d:68:96:f5:e7:f8:
         39:27:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:15:04 2026 by rpki-client