This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
File:                     SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json)
Hash identifier:          GcMmKqFSfTcdgq8Af70le9zSPc+hIu03KJkPR8/bqIo=
Subject key identifier:   64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
Certificate issuer:       /CN=49449B46CAECE75D1C558061394DB402B6D009BE
Certificate serial:       2259
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
Manifest number:          2219
Signing time:             Thu 04 Dec 2025 20:46:59 +0000
Manifest this update:     Thu 04 Dec 2025 20:46:59 +0000
Manifest next update:     Fri 05 Dec 2025 02:46:59 +0000
Files and hashes:         1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=)
                          2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=)
                          3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=)
                          4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=)
                          5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=)
                          6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: m9hHPTOA2PjgeMDNnNxUkDcVquSR0GS8v8AWfT06h1I=)
                          7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=)
                          8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=)
                          9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=)
                          10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=)
                          11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=)
                          12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=)
                          13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=)
                          14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=)
                          15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=)
                          16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8793 (0x2259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE
        Validity
            Not Before: Dec  4 20:46:59 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27:
                    46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1:
                    70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30:
                    20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12:
                    48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d:
                    84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07:
                    9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c:
                    82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b:
                    68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54:
                    bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb:
                    6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e:
                    23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13:
                    7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e:
                    b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c:
                    0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10:
                    24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23:
                    c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
            X509v3 Authority Key Identifier:
                keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:62:b6:75:f8:cb:76:98:8b:2d:8c:66:1f:af:2b:2f:4a:
         fe:4a:37:46:e7:98:e6:03:34:c7:bc:d9:fc:3c:b8:04:bd:1d:
         87:ed:43:df:4c:c3:d3:03:20:51:d2:58:98:a1:ee:47:96:d4:
         af:f8:72:88:be:b7:a1:7c:cc:b1:17:96:0a:74:89:73:5c:b7:
         b1:8f:f9:9b:3a:dd:95:ba:e1:58:eb:e4:74:2a:b1:b2:03:f1:
         63:01:81:09:7f:b0:34:ae:e2:64:1a:ff:0f:0d:ae:6f:15:61:
         f3:70:2d:7d:b6:52:8f:cf:b9:0a:d1:e6:c3:72:d8:6b:0a:6c:
         df:5b:af:8c:a3:b2:2f:c1:bc:18:c3:a9:d3:14:37:71:c1:6d:
         c0:06:89:e7:b6:6a:15:12:14:8a:41:21:f5:18:f2:35:96:63:
         f0:48:69:60:e7:95:0c:ae:b1:a9:56:6f:b5:87:d0:94:9c:f4:
         dd:8c:f4:6d:51:ad:7f:a0:bb:81:45:d7:a4:41:2b:ad:7e:07:
         92:80:ff:2c:07:b9:79:4f:57:29:37:71:be:1a:76:e4:7f:59:
         07:2c:65:83:b4:11:fa:06:2f:8e:ce:93:59:42:fc:61:d3:a5:
         c9:93:bb:d5:be:db:3b:44:79:3b:b1:7a:72:6e:7b:55:b7:df:
         39:26:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:40:48 2025 by rpki-client