This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
File:                     g2eaAxes-IsHQxilTVxsUgNpgus.mft (raw, json)
Hash identifier:          N8jdd6XeQicltI3Y6beC6idt6MF80eOqtWexntmH6HQ=
Subject key identifier:   9A:8B:3A:34:1B:CD:FC:F8:C0:5C:78:AA:96:B5:29:FA:04:AA:66:99
Authority key identifier: 83:67:9A:03:17:AC:F8:8B:07:43:18:A5:4D:5C:6C:52:03:69:82:EB
Certificate issuer:       /CN=83679A0317ACF88B074318A54D5C6C52036982EB
Certificate serial:       21FF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
Manifest number:          21FF
Signing time:             Mon 19 Jan 2026 11:59:15 +0000
Manifest this update:     Mon 19 Jan 2026 11:59:15 +0000
Manifest next update:     Mon 19 Jan 2026 17:59:15 +0000
Files and hashes:         1: g2eaAxes-IsHQxilTVxsUgNpgus.crl (hash: ER5spS/li2uug6eXW2gVmZ9jX9bnBnLmeEzFyvydxJw=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8703 (0x21ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83679A0317ACF88B074318A54D5C6C52036982EB
        Validity
            Not Before: Jan 19 11:59:15 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9A8B3A341BCDFCF8C05C78AA96B529FA04AA6699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:12:79:e3:f6:44:c5:72:aa:8c:bd:ac:5c:
                    7a:57:ce:c2:f2:cf:ad:3f:97:24:2b:ea:80:c6:fb:
                    2a:7d:c2:79:63:ce:86:94:c0:a0:50:4b:26:d6:62:
                    a8:2b:31:e0:5f:ec:a4:20:ba:fa:ba:4b:ab:8e:3c:
                    89:7a:fb:1d:c0:d2:18:6e:4e:13:04:91:e7:f7:68:
                    bb:ae:ef:01:be:dc:96:b2:f6:39:fa:58:6e:ce:d4:
                    e2:2c:21:ec:9e:20:25:4f:20:41:72:40:5b:5c:29:
                    bf:32:13:ee:13:5a:26:a7:a8:5f:d0:47:5d:a9:0d:
                    cc:62:69:8d:39:25:19:fa:fe:6b:e9:a8:c4:32:45:
                    8c:0d:68:55:92:90:20:b8:26:68:05:0f:84:5d:9c:
                    78:5b:9b:5f:74:ab:85:c5:ed:75:bb:93:b9:38:21:
                    52:fd:70:e9:ca:ab:73:11:9c:2f:b7:55:3a:a7:df:
                    2d:49:6f:2a:87:65:fe:e6:81:5d:0e:cf:e5:ae:14:
                    fa:8d:35:fd:fc:8b:f3:15:18:0f:f9:dc:79:04:e4:
                    03:80:aa:47:56:1f:f7:e4:85:92:a3:53:cb:cb:c4:
                    fe:4c:d8:75:09:74:f7:67:b1:6a:e9:62:49:eb:3c:
                    f5:88:30:bd:5d:bb:8a:2b:dc:cd:8a:37:aa:d3:46:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:3A:34:1B:CD:FC:F8:C0:5C:78:AA:96:B5:29:FA:04:AA:66:99
            X509v3 Authority Key Identifier:
                keyid:83:67:9A:03:17:AC:F8:8B:07:43:18:A5:4D:5C:6C:52:03:69:82:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:85:57:b1:d0:32:48:05:a2:05:23:25:db:36:48:06:1b:
         ba:85:13:2b:a2:eb:e3:30:67:2f:d1:43:60:11:99:7f:27:2e:
         08:c6:3f:8d:a7:8d:04:82:72:a5:10:a6:b2:a9:ce:6a:9c:b5:
         f9:84:98:53:da:cf:8e:e2:c3:3a:9d:7a:42:db:32:63:5d:1f:
         fc:ef:a1:4e:30:4f:79:a3:3d:5f:33:56:92:b6:ec:9c:64:e4:
         97:dc:53:16:66:0d:fa:7a:56:84:c7:f0:8e:91:81:ea:b4:85:
         c6:27:e0:4e:33:ba:ec:77:c4:94:ab:88:8b:86:72:72:69:47:
         a7:9b:45:04:8f:fa:af:7e:48:54:e7:86:fa:71:79:67:d2:9a:
         6e:81:2a:41:66:fb:28:17:a6:af:a8:8f:41:cf:05:86:69:e0:
         51:81:b8:e4:99:87:28:71:20:a2:2a:c8:c3:04:a2:55:8e:a9:
         e6:a2:30:16:48:63:86:11:1c:89:c4:b2:a2:ad:59:10:10:5e:
         d3:ba:9b:5a:fb:ec:8c:e8:e1:65:a5:a0:21:0a:cb:43:7e:98:
         52:8b:dd:4e:d7:1b:84:a6:13:d6:0e:79:af:65:60:1d:b7:12:
         f6:71:e7:e3:17:7d:52:dd:b9:7d:e0:f9:3f:54:d9:39:47:18:
         b2:0d:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:58:42 2026 by rpki-client