This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
File:                     J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft (raw, json)
Hash identifier:          dU7C7qf/kbNvFQ1DZCSbok/9n7MjYqzspWFMUCoGY+s=
Subject key identifier:   7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
Authority key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
Certificate issuer:       /CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
Certificate serial:       1CCC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
Manifest number:          1CCC
Signing time:             Mon 19 Jan 2026 09:57:10 +0000
Manifest this update:     Mon 19 Jan 2026 09:57:10 +0000
Manifest next update:     Mon 19 Jan 2026 15:57:10 +0000
Files and hashes:         1: J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl (hash: DkVzavYSCxViDayzCEpZJ0YFUFYY8PhXXF/xTK4ZPZQ=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 15:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7372 (0x1ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
        Validity
            Not Before: Jan 19 09:57:10 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=7C4EC60D45C634A44F28CF2593604B9F0D738034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:da:f3:3d:08:08:c8:93:a8:23:8f:30:1f:
                    9c:9a:c2:d7:4c:9f:66:f5:91:39:61:51:b0:a4:ac:
                    d5:d9:d9:93:de:c6:01:c6:64:60:c8:6f:c3:b3:2f:
                    10:98:36:9e:b4:24:8e:8f:f9:a2:bb:e8:dd:d3:32:
                    ad:a9:a2:f5:58:b8:be:6a:42:34:a4:9c:d6:8d:95:
                    28:4a:04:d3:ff:29:98:37:d0:2a:80:18:f6:74:26:
                    77:59:66:32:57:b5:ea:c6:44:c0:6e:c4:8b:4a:b9:
                    fc:9c:d3:46:96:d3:aa:69:03:aa:4a:e5:69:2b:a3:
                    d6:63:6c:f8:4f:10:a7:96:9d:e9:0f:7a:dd:a2:d0:
                    ce:00:39:a5:ae:26:0d:a3:0a:12:1b:bc:15:1a:82:
                    7e:66:57:41:3d:64:3a:6a:33:89:59:2f:87:e5:50:
                    17:08:85:a3:db:dd:11:05:42:bb:e9:55:60:cd:de:
                    d9:d0:ba:76:bb:5d:38:6e:1a:33:c4:c3:6b:d5:cb:
                    14:e3:83:4f:ce:be:e9:5a:2b:29:7c:34:56:85:89:
                    43:a5:d6:9c:6b:74:ba:b2:0f:32:0b:5c:de:66:27:
                    fa:5c:58:50:64:a2:2b:f2:6c:9f:6f:78:dc:a2:ad:
                    51:84:d0:94:42:47:1f:54:38:ac:31:2d:28:c0:13:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
            X509v3 Authority Key Identifier:
                keyid:27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:0a:d6:cb:11:91:a2:41:99:bf:49:fe:2c:31:8d:f3:a3:
         40:69:7f:c4:7d:4f:15:b3:7b:42:40:86:d7:10:db:3c:c4:62:
         5a:93:fb:0c:d1:e8:9c:9c:66:43:b5:3e:64:da:3d:8f:e8:c1:
         93:43:45:c9:9d:ca:59:ac:c6:17:36:c4:9f:8b:db:27:2f:33:
         71:67:10:16:5c:6a:45:57:ba:d3:e3:02:8b:96:2f:ff:a0:09:
         56:e1:f7:66:0e:5c:6d:9a:88:9f:87:0e:9d:f4:6c:a7:d6:1e:
         e2:a4:bf:aa:87:23:13:55:5a:7a:b8:00:45:11:28:c6:f9:b9:
         77:0f:0b:03:61:6b:4b:3e:e2:c8:f8:2e:28:ee:8b:45:6c:d9:
         b8:82:f5:6c:a4:c3:37:fc:9d:2b:9c:9e:f4:7c:4b:4b:bd:c5:
         05:ba:ee:5d:69:df:38:c8:56:05:68:2d:b0:b0:d9:22:53:a8:
         ec:a3:70:e2:60:d4:39:bf:37:e5:a2:70:3d:50:1f:34:b6:ba:
         19:e6:a0:07:1a:5a:ea:9a:96:1b:e9:93:fb:be:37:48:3a:25:
         ad:bb:4d:c4:e4:45:92:2c:f8:5d:f9:cc:d9:8e:48:45:de:35:
         d9:3d:4c:ff:a1:43:fa:ea:d5:e2:0d:dc:03:59:50:7c:11:0f:
         55:8a:33:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:58:43 2026 by rpki-client