This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
File:                     rZijfVO8zGpfKR_5GhAPrnNsSr0.mft (raw, json)
Hash identifier:          T9E1h2wTakpEiJhOdI9nTs6KUSKR1+JVxNKaskWvaqM=
Subject key identifier:   FB:8D:5F:F2:B1:96:7C:48:BC:E8:51:19:0D:25:B5:AE:FB:9B:8A:20
Authority key identifier: AD:98:A3:7D:53:BC:CC:6A:5F:29:1F:F9:1A:10:0F:AE:73:6C:4A:BD
Certificate issuer:       /CN=AD98A37D53BCCC6A5F291FF91A100FAE736C4ABD
Certificate serial:       6D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
Manifest number:          6D
Signing time:             Mon 19 Jan 2026 09:56:15 +0000
Manifest this update:     Mon 19 Jan 2026 09:56:15 +0000
Manifest next update:     Mon 19 Jan 2026 15:56:15 +0000
Files and hashes:         1: rZijfVO8zGpfKR_5GhAPrnNsSr0.crl (hash: /azToKl8HMA+J5T8bg63lUSD1aygzDVIqiCk8X+zCFg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 15:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD98A37D53BCCC6A5F291FF91A100FAE736C4ABD
        Validity
            Not Before: Jan 19 09:56:15 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=FB8D5FF2B1967C48BCE851190D25B5AEFB9B8A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:42:08:25:73:66:7b:72:67:7d:3d:04:81:
                    43:99:ef:17:70:0a:be:7f:ca:74:6f:3a:2b:9f:b1:
                    01:56:dc:92:8d:a8:52:08:19:38:b9:5b:72:c8:99:
                    be:86:fe:74:51:fd:c3:2b:9f:d6:37:ae:81:8f:71:
                    31:50:b4:47:4a:af:9a:2f:31:bf:8d:af:a6:09:ee:
                    8a:ad:d3:23:d1:c3:01:4a:fd:33:5b:00:b7:29:00:
                    80:ce:3e:3f:05:8d:e1:35:c9:c6:f1:05:00:03:1e:
                    f2:29:b4:62:76:91:2c:87:7b:75:5e:ea:9d:82:a8:
                    66:03:db:fe:3a:4a:0e:17:33:a2:be:f8:b8:c5:c4:
                    66:3e:99:f6:aa:4b:0c:e5:82:35:61:f8:77:bb:8e:
                    95:fb:09:1b:3d:ce:73:64:71:fb:61:b3:06:e6:06:
                    f3:b4:64:8c:85:6e:ec:f0:07:fb:86:73:67:b6:28:
                    95:ad:bd:13:86:5a:20:ce:1a:bd:06:45:87:51:df:
                    55:af:0f:95:69:6b:b7:58:3b:7a:ae:8e:bb:8c:a0:
                    fe:ae:b2:9e:75:2a:bd:95:e8:e3:fc:8c:36:92:27:
                    94:76:f9:a2:bc:21:8b:fe:56:c9:22:be:e6:9e:97:
                    79:ee:39:3f:42:5e:6c:eb:9d:17:f5:e1:60:22:de:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:5F:F2:B1:96:7C:48:BC:E8:51:19:0D:25:B5:AE:FB:9B:8A:20
            X509v3 Authority Key Identifier:
                keyid:AD:98:A3:7D:53:BC:CC:6A:5F:29:1F:F9:1A:10:0F:AE:73:6C:4A:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZijfVO8zGpfKR_5GhAPrnNsSr0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/rZijfVO8zGpfKR_5GhAPrnNsSr0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:70:1e:4d:07:35:c8:1b:41:60:5c:97:b1:ff:e0:23:b1:
         8b:73:8c:d5:c6:9c:31:6e:25:32:51:ab:53:62:51:32:71:e0:
         36:46:81:4b:d5:61:86:b6:c1:d0:c0:29:50:e0:da:81:35:8a:
         c6:76:28:bd:f8:35:a1:53:1a:e6:7b:04:b9:90:e4:cd:56:8a:
         29:8a:de:f9:b7:cc:5b:27:3a:4b:df:dc:b7:59:00:9a:75:ad:
         01:85:63:a7:3d:6f:80:1a:46:ca:c1:ed:c9:8b:d0:cb:4a:21:
         c8:fe:1c:09:19:bb:c9:4f:ce:12:08:df:db:45:73:9a:42:7c:
         87:53:34:35:e8:ed:50:04:f3:54:b4:13:28:32:be:06:10:82:
         b8:b1:29:c2:7f:a3:d7:9f:ae:80:dc:e8:d8:09:51:18:c5:55:
         34:d4:17:51:69:ee:2c:7b:c8:da:50:e0:5f:7f:0e:91:18:02:
         81:63:91:a9:80:ce:a2:1e:31:01:50:d8:31:66:ae:00:4b:b3:
         72:e0:87:d2:45:a3:1d:a0:39:9c:a1:24:f9:ba:79:a9:07:c5:
         12:0f:b3:94:64:a4:f8:52:fd:37:39:4d:ad:7a:5a:32:ac:5e:
         92:f3:7a:2b:33:31:ff:72:a4:8b:c1:0a:c5:cb:d3:db:72:35:
         2b:98:c3:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDk4
QTM3RDUzQkNDQzZBNUYyOTFGRjkxQTEwMEZBRTczNkM0QUJEMB4XDTI2MDExOTA5
NTYxNVoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoRkI4RDVGRjJCMTk2N0M0
OEJDRTg1MTE5MEQyNUI1QUVGQjlCOEEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMqQgglc2Z7cmd9PQSBQ5nvF3AKvn/KdG86K5+xAVbcko2oUggZ
OLlbcsiZvob+dFH9wyuf1jeugY9xMVC0R0qvmi8xv42vpgnuiq3TI9HDAUr9M1sA
tykAgM4+PwWN4TXJxvEFAAMe8im0YnaRLId7dV7qnYKoZgPb/jpKDhczor74uMXE
Zj6Z9qpLDOWCNWH4d7uOlfsJGz3Oc2Rx+2GzBuYG87RkjIVu7PAH+4ZzZ7Yola29
E4ZaIM4avQZFh1HfVa8PlWlrt1g7eq6Ou4yg/q6ynnUqvZXo4/yMNpInlHb5orwh
i/5WySK+5p6Xee45P0JebOudF/XhYCLehacCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBT7jV/ysZZ8SLzoURkNJbWu+5uKIDAfBgNVHSMEGDAWgBStmKN9U7zMal8pH/ka
EA+uc2xKvTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTYz
L3JaaWpmVk84ekdwZktSXzVHaEFQcm5Oc1NyMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvclppamZWTzh6R3BmS1JfNUdoQVBybk5zU3IwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2My9yWmlqZlZPOHpHcGZL
Ul81R2hBUHJuTnNTcjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjoVwHk0HNcgbQWBcl7H/4COxi3OM1cacMW4lMlGrU2JRMnHgNkaBS9VhhrbB
0MApUODagTWKxnYovfg1oVMa5nsEuZDkzVaKKYre+bfMWyc6S9/ct1kAmnWtAYVj
pz1vgBpGysHtyYvQy0ohyP4cCRm7yU/OEgjf20VzmkJ8h1M0NejtUATzVLQTKDK+
BhCCuLEpwn+j15+ugNzo2AlRGMVVNNQXUWnuLHvI2lDgX38OkRgCgWORqYDOoh4x
AVDYMWauAEuzcuCH0kWjHaA5nKEk+bp5qQfFEg+zlGSk+FL9NzlNrXpaMqxekvN6
KzMx/3Kki8EKxcvT23I1K5jDNQ==
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:52:54 2026 by rpki-client