This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File:                     vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier:          nNh2Oy4rMQYRHyzwwWNiYmAIwSZWFXZtL6MxRVBN8TQ=
Subject key identifier:   E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       81F2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number:          5520
Signing time:             Thu 04 Dec 2025 20:50:49 +0000
Manifest this update:     Thu 04 Dec 2025 20:50:48 +0000
Manifest next update:     Fri 05 Dec 2025 02:50:48 +0000
Files and hashes:         1: 0WPOtftbuv6XlKwcQGdJTy2bHA0.roa (hash: 9tX1zuaC2IO1pFc6Vgg+czbS5gB1j28C2GhJnMBvnxc=)
                          2: 1E0n4ROZj5qS1mv3Psb2nYulmJ4.roa (hash: qhmNRZc3ESeMJG2OfLqEuQh9vQeNOyj9lfUcEXerXMg=)
                          3: 2ykehmXXhoverS1razLaK2Cw9oM.roa (hash: BSCO+LsBWKbxlEIZbqfXb6ME3jR325sZ52zJEe8kEzU=)
                          4: 3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa (hash: w9bDHp7UsgmhtfqUjhGkTJDkTqNN3EnOHWc7Ki+SSKg=)
                          5: 3JXnXy6rNiFmIZZQPMZ6BwgQVnk.roa (hash: PDtlpCGRSUE3QdQ/9iYK+EM9l9dOKEXrGFKB1zphtPY=)
                          6: 4DU-LJELvAAVgage-9De6WBxyfo.roa (hash: Cn37iZuJd5YlTecj+msAdD2+d++n3EN1QkDnelO3l5w=)
                          7: 6SxtQP3DrofnLHda_35CH9nSdtE.roa (hash: EltO10fLVmTZNw1eX5XH7pnxpe70KdZMzCibcxk66xc=)
                          8: 6oJCwq3huRhuptRwkUvV4orD08M.roa (hash: 29C14QBs1Lskn1hNbX+Sv5gQlo/YIeXBaAz7YsJVGj0=)
                          9: 6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa (hash: 6bueCw5EAsSKsvnDFv0t/AIuvd95Q3wQuAvbWELMnQ4=)
                          10: 89256y-OFuaNZAVPS-Eol6VomIQ.roa (hash: bDvlmrdnFJhvCbcQbgqwKymZOt28MdyoXQRfTofiEoI=)
                          11: 8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa (hash: a9fsM/bA5t/CqWUJprqpz3b1cg5JnQMeBptwjbcfIWc=)
                          12: 9TjiVGAygYB_IsTra7l53EO3Fyc.roa (hash: Wsy50zullNoYup/ZGDTq9u3Gqpmd4TW9gi+aGfYH9gU=)
                          13: B679Oh4-vdKsws-ydVTtHssgfzg.roa (hash: TFY4T4RqczNfz6PykeC1FmVSt0OH0ge/vOR3eWezFIg=)
                          14: DCzDScpGmfQbeVQCu7XBIwf5uEM.roa (hash: D6GVPWMEg+Je4T/sFiTPcW47ZzT8olDgepJm4uT3Ldg=)
                          15: E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa (hash: 9cwtJW5exCVRvI29LdcswfWX+79bTzBtMVJ0k2OU9AM=)
                          16: EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa (hash: Cb0TWy+OJEN2x9k4JhcH8/M/N8ErAy6tjvZc/qnkgpk=)
                          17: F40yyzr-rK6Hpf7hTocwOAXCGBI.roa (hash: eLshj3lyqfRCYc5jfVqKe/soyYADrOvnc3G/RrfmhPQ=)
                          18: HENqmW8P5dcEQIfswIqgbjfICaE.roa (hash: 2uQSitIo9B3RR+cJnZzNJCmzNIkok2Z3w96MqLM6zRk=)
                          19: Hxoh_L710oEY2VOZAXmyZQvV0iw.roa (hash: TD/RqD8yyMI0So/HO9LjHV0xvt3Q5yA+8bIrub4KPuI=)
                          20: JmkbA9C4Ve43qq7vdxNTnHY2lSc.roa (hash: Eja4/Uz9ntt5ezaTERprjyG28TScDFjCB1FF4thwWH8=)
                          21: P6v82Fruxw-1SeCErOe5-P9Jp7Q.roa (hash: jColINLDU073VLMONpbTtK+frDdA9jiFVgjQwo0m394=)
                          22: Qw65VpafvAKV0-0DyJqQaA2TsdQ.roa (hash: 5myDnZrTfpBjIUV3HQvZ67XIaNP5FEgYF1UUAXGUYsE=)
                          23: RxEYtKW6qcUTYdvI3Y4qGmnDjDM.roa (hash: TgBe+m/zxo6tZkyJDyW/qdXzf7gm/P/eGDEVP6kWE9Y=)
                          24: S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa (hash: U0eDChCQOiousTE3KapYoV736YuqG8Eqol2uOWGx9XQ=)
                          25: TEeTO1E3vBmhX1zAcKT7lm-3mWA.roa (hash: sMNyC/W8hJu8s6CyNVERsiOZIY/Zg8Rw4bKY1DVf/cA=)
                          26: VqiBBV-b3i7iECrnzuRfjpYxvio.roa (hash: FRFdxO6TuIzqcetERdcscnhSb+5o8PvLuaDd4kMnN+M=)
                          27: YthLqDjiD_roL8ZjQakwVYhdZm0.roa (hash: HP5cmcqgYRONvP3Vl8/il14eyKAI9IW9j+0yzYttN0s=)
                          28: dCgMf9XJsxgj5oMyIijm2CObJ-c.roa (hash: ArcxUILWhZ2km3Tezbi+tFxMRHHL9SOyKO00i3Dz3uk=)
                          29: dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa (hash: KyC8NCezfjeRtd9aDyBaeuIag6fWROOAIKe36HPDndA=)
                          30: fXvxjkxv2gWy_3cun_FTjfx5SQA.roa (hash: 0Pu3ybTislFO6gg9e4amXypT9qUdLSSk1iKedwaARe4=)
                          31: fn06Y1Bm-KeePI6AAJySEwvAaY0.roa (hash: zzYSr88nFNz+P5uXb8vBbXcZU/idj3/rIigYlBhSi2M=)
                          32: frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa (hash: QaaLY/xsJTYXx5yIvrGiyO28iEd1LXpGcFH+Sn8p/Us=)
                          33: hx0tyEUQsVMeThffkgpe2O2ceLU.roa (hash: IwIDtdr6+OYt3HasXBCZsocJppL1Kz9oaZymlBuju/0=)
                          34: iJXesGmzm64-koYvSYz2T1LIMAU.roa (hash: BbjYrEHzNP4BiAwUlEwGX70hp79k8GaPLLdWUC+wWYo=)
                          35: iZu8_KB3gM46XY3h2RL7rkNyfaY.roa (hash: UrX8KljlZ9ePQUhFlv6h0wf1lJULnQx2q87SMT/gBPs=)
                          36: q7CXJRH13TusfD8L3DVSCTfz70o.roa (hash: zCYFqQJBqwdMQBxIBX5zjVeFKyTawBzRbf6jYYpHu4I=)
                          37: sV_AAIAwAhYk14W3TQoWU0zjoRc.roa (hash: mNQa0Qkk+V2b2ChQfyzPFSWOCOpric0Xhzo7Dd1gO+E=)
                          38: smtX13zKoaBh5jvgSXUfMywsBtY.roa (hash: p3yEJdTvX2XbkA5KCvfLbfqTk4tncsnb6xiZc4/3eqI=)
                          39: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: Yb4Ucz331fBF2/t98IxNUdC+IUPjquaTARQ+XCvCoVs=)
                          40: x6lluZzLr_zG1Sq5du8HtQL3ioc.roa (hash: dVgzYhXlp+UzsNjIsjeBSuuyI+LTDovWntfnwui4bdQ=)
                          41: zpuaFHKL3UcXE0R08JLlXZyxl1M.roa (hash: zrteVbxUv9b4I/nDY1o/omsx6LH+udfXZkUYre6/YDc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33266 (0x81f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Dec  4 20:50:48 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
                    a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
                    6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
                    e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
                    74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
                    aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
                    f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
                    74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
                    4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
                    21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
                    3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
                    d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
                    45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
                    42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
                    95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
                    e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
                    4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:de:24:d7:ac:88:02:74:b1:7f:78:89:ae:d2:88:9a:1d:33:
         ff:14:6f:8d:be:23:63:53:18:f5:67:da:fc:55:bf:66:81:75:
         ea:09:da:bc:1a:9b:0e:88:f3:48:a8:34:45:8c:24:76:fe:0c:
         f6:89:14:b3:43:59:d2:97:30:b0:fe:7c:a8:e4:43:18:23:e5:
         9e:03:da:97:40:ed:74:5e:e9:2a:d3:58:75:7a:28:ff:a5:af:
         b3:27:c4:c8:5e:59:52:e8:f0:0c:e1:c3:22:1a:07:e6:61:f8:
         81:3e:86:16:55:20:da:fd:15:88:2f:7c:a2:59:52:64:53:88:
         42:83:a6:8a:b4:2f:a0:07:6f:11:11:58:59:87:de:d6:25:ec:
         db:87:70:49:df:92:16:04:be:f2:93:3e:fd:76:05:8f:d1:73:
         8c:6b:d5:a3:89:ae:fb:7b:ea:ad:1d:64:d7:00:f2:a9:af:73:
         98:ca:7c:53:eb:62:10:26:58:80:30:8c:fc:6d:5b:15:52:a1:
         10:96:2e:7b:30:de:30:16:9d:47:31:61:3e:f5:39:aa:b5:c0:
         5c:55:9e:aa:64:c1:69:c3:01:74:73:65:a8:81:74:18:a6:60:
         95:8c:68:62:81:17:6f:71:80:7e:a8:a7:10:95:63:e5:62:53:
         8c:22:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----