This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File:                     SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier:          fd/Cyyb2PkNDwmvtI9og8Jib6xiNL7pD9Klga4j4XXU=
Subject key identifier:   CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer:       /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial:       21B8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number:          21B8
Signing time:             Mon 19 Jan 2026 10:28:53 +0000
Manifest this update:     Mon 19 Jan 2026 10:28:53 +0000
Manifest next update:     Mon 19 Jan 2026 16:28:53 +0000
Files and hashes:         1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: n1gf09GPKvVbAWq6HMjmkpb2KHLgywpR4fzh4aZFvHg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8632 (0x21b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
        Validity
            Not Before: Jan 19 10:28:53 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
                    0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
                    0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
                    38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
                    b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
                    4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
                    16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
                    c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
                    65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
                    a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
                    cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
                    aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
                    8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
                    4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
                    34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
                    13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
                    96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
            X509v3 Authority Key Identifier:
                keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9b:e3:77:74:9a:6b:cc:82:42:70:d8:b1:71:54:db:43:0e:
         68:66:f5:8a:54:c2:90:4e:63:f9:52:ce:91:c1:01:08:50:a5:
         7e:ef:40:a0:9c:54:cf:8c:28:b3:d2:42:10:5a:56:17:35:65:
         64:28:35:0a:35:57:2e:7e:f6:60:29:b5:eb:47:eb:c3:3e:bb:
         80:49:ce:0e:4b:6d:0b:71:fd:94:65:f1:c7:e5:ec:b4:78:55:
         98:b2:3d:5c:09:16:ce:36:16:54:46:d7:69:9f:d7:99:66:f0:
         af:97:6b:33:ae:ff:d8:16:a0:76:cc:e1:3c:9d:7f:31:a9:f6:
         32:d5:73:71:0f:11:2b:46:7f:8f:fe:3c:7c:44:f8:bd:9e:7a:
         cd:c0:d2:1a:28:ce:f4:cd:e8:a9:1f:d0:67:79:ce:90:07:94:
         60:92:d3:47:f4:46:59:61:0b:23:23:9f:11:8f:5d:5d:af:df:
         26:c0:87:37:78:76:8c:fa:d9:4b:3b:9f:53:24:3e:e1:40:3a:
         53:4b:03:63:a5:d5:0b:e2:d8:c3:f5:04:b9:d2:2d:58:e3:c2:
         67:fb:86:65:c3:50:43:da:42:e8:b2:26:84:36:9c:9c:80:a5:
         d7:a3:44:c6:23:fe:cc:4f:78:60:c0:df:78:6f:6d:67:5d:66:
         69:0e:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:43 2026 by rpki-client