This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft
File:                     F1mdmaUx-BsV172e8tRomDHw2F0.mft (raw, json)
Hash identifier:          se8uJRf/csMHmfSZ2cAd1strf5w8nDsPcCOeqSPeODA=
Subject key identifier:   EB:7D:B0:F1:34:58:D7:F6:3E:25:07:D2:EF:36:D2:BC:FE:EB:51:81
Authority key identifier: 17:59:9D:99:A5:31:F8:1B:15:D7:BD:9E:F2:D4:68:98:31:F0:D8:5D
Certificate issuer:       /CN=17599D99A531F81B15D7BD9EF2D4689831F0D85D
Certificate serial:       09FC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F1mdmaUx-BsV172e8tRomDHw2F0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft
Manifest number:          09F6
Signing time:             Tue 10 Feb 2026 17:19:43 +0000
Manifest this update:     Tue 10 Feb 2026 17:19:43 +0000
Manifest next update:     Tue 10 Feb 2026 23:19:43 +0000
Files and hashes:         1: F1mdmaUx-BsV172e8tRomDHw2F0.crl (hash: i/YcqfOUTi5x7QU4udBJVGkXF9Nt5eIe26N0xOhzhZg=)
                          2: OGAJJC7LQRlfyX9v1HigBUNeQwE.roa (hash: KxYqGs8tZwm7uAGaSRHDy6q+UjrlGH4jifpiXnm30f8=)
                          3: Ydhaj_TAAbcwkOTWoK0pY9cYh3g.roa (hash: 5KFsPmMUx5QzZ0N7JDhHHwC6nZ0kXxl38h6lp7xZLzY=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F1mdmaUx-BsV172e8tRomDHw2F0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 23:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17599D99A531F81B15D7BD9EF2D4689831F0D85D
        Validity
            Not Before: Feb 10 17:19:43 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=EB7DB0F13458D7F63E2507D2EF36D2BCFEEB5181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:1c:d3:4f:72:2a:ba:ea:d2:cd:9f:a0:a5:
                    81:dc:f3:67:bc:0b:2d:48:d5:32:5f:e6:45:3c:ec:
                    28:e1:de:76:10:28:4d:5d:63:68:67:e5:19:34:8d:
                    d4:90:e8:81:ef:89:3a:dc:29:d0:66:0f:bc:11:47:
                    84:be:04:52:bc:00:74:16:2f:99:f8:d4:8a:e1:79:
                    bf:2e:e6:fa:84:b3:60:9c:90:bc:32:b4:9d:30:68:
                    07:6b:1f:4d:df:63:bf:22:f2:75:2e:bc:b6:53:1a:
                    0a:bf:a4:25:69:15:c3:99:ee:ef:9d:d5:58:a2:26:
                    b9:19:55:0a:3f:78:c4:2b:6a:fa:af:18:f4:9b:bf:
                    15:7f:d1:63:6d:d3:40:8a:70:a8:7b:da:9c:62:c0:
                    03:f7:df:24:da:c4:23:0d:79:7d:18:30:73:7b:b9:
                    b2:70:04:3d:f6:f7:22:54:3a:8c:0f:20:58:a4:81:
                    dc:85:a9:f6:df:2c:9c:ce:5c:33:28:71:46:86:5e:
                    5e:f1:2b:23:5b:c9:41:5c:eb:e9:9b:96:a2:9e:a3:
                    e4:d6:41:87:02:3a:0b:99:01:4f:80:20:c0:38:fa:
                    93:88:a3:26:84:ad:d6:f9:f2:11:b3:a5:ca:8a:43:
                    f8:41:6a:82:ad:0a:a6:88:84:57:ae:77:dd:b0:c6:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7D:B0:F1:34:58:D7:F6:3E:25:07:D2:EF:36:D2:BC:FE:EB:51:81
            X509v3 Authority Key Identifier:
                keyid:17:59:9D:99:A5:31:F8:1B:15:D7:BD:9E:F2:D4:68:98:31:F0:D8:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F1mdmaUx-BsV172e8tRomDHw2F0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:40:53:32:70:60:ae:4a:80:01:87:3c:55:4c:0c:66:ac:be:
         a2:24:26:d9:e4:60:5b:6b:1b:bb:05:d5:6d:82:f6:7e:cb:f3:
         6f:4b:ea:fd:e6:9a:c2:33:7a:1f:db:3c:01:ad:f8:2d:33:fb:
         8e:f5:00:99:c8:d2:71:8b:df:91:51:75:8b:58:56:d2:2a:44:
         b7:12:15:03:f3:0e:73:fe:99:ff:59:73:a3:5e:54:bb:8f:90:
         39:05:1c:00:a7:88:41:91:ed:e6:c6:86:62:66:87:60:f8:60:
         21:9a:98:50:54:ac:30:e7:87:fe:0d:91:de:a9:43:e7:31:be:
         f8:ca:b7:71:fd:d5:fa:68:44:c1:35:f0:f1:70:af:e0:0b:7b:
         d8:61:5c:80:c2:8b:ab:42:e5:90:bf:c0:f0:d7:31:5a:06:2b:
         e2:0f:ad:02:6b:7c:74:05:f6:e6:38:f6:d1:ef:31:ff:bb:90:
         d8:34:73:64:8e:0b:21:7b:a9:0d:e9:0d:0e:58:ef:3b:ee:21:
         36:20:07:c4:fe:91:84:fe:46:d8:24:9d:15:ec:22:aa:11:ea:
         08:3a:35:d5:64:b1:a8:7a:46:99:32:83:80:db:cf:6c:b4:67:
         eb:b0:1b:83:97:0d:20:2e:fc:82:d6:d5:76:3c:a5:7e:b3:bd:
         ab:5a:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:15:40 2026 by rpki-client