This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
File:                     RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft (raw, json)
Hash identifier:          mFyWLRJAB/x864QlqlCf2MRr2lJRG7DC1Lxk95NtBZw=
Subject key identifier:   FF:38:D7:50:CF:9E:B7:6C:98:0B:08:BE:20:2D:1D:D2:B9:73:B9:DA
Authority key identifier: 46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23
Certificate issuer:       /CN=46E7400FC97FC7A2093E054CF0DF42CB77564023
Certificate serial:       09BE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
Manifest number:          09B6
Signing time:             Tue 10 Feb 2026 02:57:44 +0000
Manifest this update:     Tue 10 Feb 2026 02:57:44 +0000
Manifest next update:     Tue 10 Feb 2026 08:57:44 +0000
Files and hashes:         1: PiAO1v8jnMnY9e87HdvS9NXotqg.roa (hash: 90WlczYrnFxGi5QzQBqF1fxcMsXvHLSLiqJGOJQf0NU=)
                          2: RpoLiulNqmsqUEsS8d5G_TL8cnk.roa (hash: dNqlAyj4PE+XHsuOy3X9ipugCAca/u8pXRLKJ5EvoGs=)
                          3: RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl (hash: Yk8m3b9O0u3/obS5CYWmHTH34VmCNXbj/SUBpfCDdDo=)
                          4: X27CblLlO5llCYV-iXGWcdXClXo.roa (hash: NZV/zk0niMVA3a1jU0+Y4vu5e0xemkCeUutynUuKvHE=)
                          5: acSW8a3uvfnL7KT87HvPLaPEZHE.roa (hash: RCAaHdVJAEyX9kN6DfXtSWhLwcaZ2x08M+q6q82JWt8=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 06:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E7400FC97FC7A2093E054CF0DF42CB77564023
        Validity
            Not Before: Feb 10 02:57:44 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=FF38D750CF9EB76C980B08BE202D1DD2B973B9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:f6:80:09:fd:8e:25:14:8a:6a:1f:ea:4b:
                    17:5d:da:08:ec:38:de:57:5c:17:d2:1c:61:c7:a4:
                    0b:48:2e:1a:b7:ab:5b:d0:f0:29:a8:7a:08:18:38:
                    3c:26:65:f7:1b:f5:c8:ca:c6:0f:ec:c4:5b:bc:b6:
                    dc:d7:ce:c9:85:9a:77:ac:db:17:54:02:12:2b:b1:
                    d2:95:df:eb:ed:f8:4e:41:ac:f0:09:88:ca:48:cd:
                    3f:32:3b:34:43:92:11:f4:84:bc:e2:6b:ce:9a:f2:
                    ba:bf:c7:8d:3f:24:80:70:be:e4:39:40:10:d5:e3:
                    33:e0:95:c9:2a:ad:d6:8a:7d:36:82:d7:d1:22:8d:
                    78:f5:ab:b7:18:30:2e:1f:d4:4a:f5:2b:da:2e:99:
                    fb:e4:82:c4:28:c4:04:e1:98:68:c5:e9:7f:3a:b0:
                    26:7d:b5:c3:c6:6b:d3:54:80:1c:fc:f5:f0:b5:67:
                    fb:fb:71:cb:04:24:c8:4f:93:4c:f6:70:66:b1:27:
                    4a:df:3e:fe:0e:60:67:aa:a1:9f:50:ec:48:d5:fe:
                    a0:c6:9c:0b:53:a9:dc:e7:29:16:81:db:0e:3c:50:
                    6e:37:1c:93:95:0e:5b:e2:59:f1:2c:f6:80:a5:11:
                    d1:ce:d7:c3:81:c0:db:da:26:05:c3:2e:4d:22:41:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:D7:50:CF:9E:B7:6C:98:0B:08:BE:20:2D:1D:D2:B9:73:B9:DA
            X509v3 Authority Key Identifier:
                keyid:46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:40:ee:89:f1:9e:92:b5:a1:e8:b2:30:ef:98:e3:bd:f8:c3:
         ab:bc:a5:c8:da:d5:55:7f:dd:95:69:91:6d:dc:b5:ff:fd:8e:
         4b:ab:74:6d:64:0c:10:ce:33:e0:ff:73:a3:d3:f0:8d:77:8f:
         c7:fe:4a:5b:9c:7a:98:33:19:f6:b6:39:2e:58:2b:38:dc:a2:
         d9:ab:ce:21:11:0e:0a:74:f9:3e:72:f8:31:ff:0a:15:c6:18:
         ac:3c:a8:74:c4:78:c3:83:48:4d:da:a9:4f:7b:6e:5b:54:a7:
         87:ff:f8:a1:f3:ab:37:35:90:5e:7c:1e:59:84:8a:02:bf:06:
         09:b3:f8:89:ae:4d:82:e0:57:e5:30:0f:9b:37:7b:68:99:b6:
         8a:16:3d:2d:8a:dd:37:fa:aa:bb:35:f4:1f:60:aa:b3:3f:44:
         fc:b5:de:47:06:41:4d:e7:c1:4f:a2:57:0e:38:bb:67:d3:22:
         25:5a:bd:b9:32:a6:dc:f0:00:92:0f:7c:ba:6a:ed:9d:fa:a4:
         3a:c0:ae:3e:26:88:d3:79:11:d5:af:38:8b:c6:64:d4:35:c8:
         e3:86:89:d4:ab:4c:6b:e8:4a:94:66:c2:da:d6:3a:73:39:3b:
         7b:ad:20:82:34:04:a0:1f:18:0a:bc:64:f4:c1:bf:f8:98:1f:
         cf:df:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:52:01 2026 by rpki-client