This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.mft
File:                     XrjFfXL3lG3XskIFmSiOyhU8twk.mft (raw, json)
Hash identifier:          po9uoPtvo9No6nWcN+cuRmZFytwcl69Xp255XwRTBm0=
Subject key identifier:   32:D6:DF:0C:06:98:BD:E8:50:B6:1E:3D:63:D4:5F:EA:1E:83:60:70
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Certificate issuer:       /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial:       043E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.mft
Manifest number:          0419
Signing time:             Wed 17 Dec 2025 04:16:39 +0000
Manifest this update:     Wed 17 Dec 2025 04:16:39 +0000
Manifest next update:     Wed 17 Dec 2025 10:16:39 +0000
Files and hashes:         1: 0DOxjMbewFGGPsedq9QiduF0vag.roa (hash: c1WK4SIVALQp5gyYrE7eu5yFwl8iP+GMWjl/+tEWoSo=)
                          2: 1zMpwtyU0_nOTDxAsq2-wM_kW4Q.roa (hash: PYpm/Y/pqp1t3jEcOrkYXYmVt8VIXzP1nkeHpwHPwls=)
                          3: 2gfea-lNU0ZrCqHrMFOJQibNTs0.roa (hash: bQaiodGpv7vV0hH3PtQYMVBmH4m4DFgLFdA3BL8tBR0=)
                          4: GZE1uNLQ2sreIN37tyk2Z_dDcK4.roa (hash: KoVzzG0pW+tROKk0oDBRaIdCkJ6jswTXEWKEVkGKyQs=)
                          5: XrjFfXL3lG3XskIFmSiOyhU8twk.crl (hash: Tei85eDXmGsuETyrWX4GAkv9kcXwH6wqRHS8rCBzmkM=)
                          6: yI-lLqw_CfftuoN-oxjMGUVV_48.roa (hash: i6LuOFOhSPgU5pIDeHHtaP3BVhDVs4bHa+CpmMM+OLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
        Validity
            Not Before: Dec 17 04:16:39 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=32D6DF0C0698BDE850B61E3D63D45FEA1E836070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:4c:89:ed:6d:7b:32:ef:bf:90:2a:17:2e:
                    d7:20:4d:c0:72:d0:75:d8:84:d8:45:99:0e:cb:09:
                    83:2b:65:1f:6c:e8:aa:9e:61:50:70:0b:cc:3d:a5:
                    51:af:6c:f9:47:a8:49:4d:2c:43:49:67:4d:1b:8f:
                    fb:aa:45:00:c6:15:a9:91:6a:70:2d:52:3e:7d:70:
                    94:31:c8:95:9f:8b:8e:cd:84:dc:85:55:bb:b5:47:
                    0a:f5:82:91:20:67:b7:b3:78:da:2b:39:b7:94:35:
                    92:7d:aa:b0:e8:72:b4:46:8e:40:de:69:38:4a:4b:
                    d1:8b:3a:e0:dc:4e:40:19:fa:87:be:45:5b:6d:22:
                    70:4a:7d:de:eb:a6:dc:72:51:25:08:a8:92:40:20:
                    4e:a0:21:69:4d:93:4e:34:8a:96:6a:90:c0:b5:cd:
                    c5:a6:71:50:0d:27:9b:d8:f4:e7:46:e5:61:c6:2e:
                    c6:86:b1:09:90:b3:1d:66:d9:9a:4f:73:2b:8c:c8:
                    f2:18:a3:f3:d2:58:96:50:91:5f:ec:bd:5f:6c:74:
                    e7:01:24:e1:bf:03:d9:47:c7:b2:60:6c:94:d6:7c:
                    51:e4:b2:79:ee:c8:58:7c:8c:d1:51:37:a6:a8:ff:
                    4d:77:e5:41:93:b6:d7:79:03:ff:69:72:81:2d:fa:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D6:DF:0C:06:98:BD:E8:50:B6:1E:3D:63:D4:5F:EA:1E:83:60:70
            X509v3 Authority Key Identifier:
                keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:d7:14:d6:23:c8:8e:c0:88:03:4b:14:86:85:48:1e:8b:
         ae:ac:d6:96:1d:96:75:1c:82:91:7d:a0:ad:13:a8:55:00:80:
         af:78:0e:ed:4a:80:d6:45:5b:77:f8:8d:a7:e0:26:68:df:5c:
         10:55:29:bd:93:9e:44:b7:8b:38:bd:d3:04:f7:0b:18:98:f9:
         d6:1e:53:ff:48:44:67:f8:a9:79:4f:42:7e:a0:6b:9f:6d:0f:
         61:b7:ea:ce:e1:da:71:2a:25:55:76:a7:53:9e:71:70:91:65:
         d4:51:44:8d:53:70:96:99:49:ee:97:fa:26:83:01:83:02:4c:
         28:a4:d2:f1:1c:92:b3:ee:c3:d1:0b:4e:4b:48:8b:a9:fc:01:
         43:09:92:cd:d2:85:49:da:5a:ed:61:e2:02:69:9e:92:28:6d:
         6d:e8:0b:9c:27:b4:50:83:fb:19:b1:7d:40:62:6f:46:81:8c:
         6f:1e:74:c0:b7:21:89:6d:18:4b:ec:56:32:fa:ef:ae:00:92:
         eb:78:2f:66:b7:8f:8f:d7:d9:b3:f9:70:5c:05:d4:c4:ee:fb:
         e8:e5:6c:5d:17:38:13:b3:d1:32:b3:74:6c:b2:af:f7:ca:41:
         38:43:69:a7:ec:23:78:60:21:4c:6f:fa:24:ec:21:39:87:cc:
         e2:50:35:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----