This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
File:                     fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json)
Hash identifier:          xd6kxi6U3J5kjW+31qJ5Yj7vyCZL9iX5ZWjdIU6/YUg=
Subject key identifier:   50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
Certificate issuer:       /CN=7E089D463B607740931A4077CEB34CD35D0396B3
Certificate serial:       106C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
Manifest number:          106C
Signing time:             Mon 19 Jan 2026 11:58:08 +0000
Manifest this update:     Mon 19 Jan 2026 11:58:08 +0000
Manifest next update:     Mon 19 Jan 2026 17:58:08 +0000
Files and hashes:         1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: xYACAG+B/IZwBj4qOB/kcLJk2EHGwXFWUE1hcvlggQc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3
        Validity
            Not Before: Jan 19 11:58:08 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b:
                    75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a:
                    39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76:
                    9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3:
                    c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a:
                    c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c:
                    5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0:
                    97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00:
                    b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18:
                    d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e:
                    6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37:
                    7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30:
                    f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b:
                    0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8:
                    76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90:
                    db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21:
                    83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
            X509v3 Authority Key Identifier:
                keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:62:ca:22:14:49:45:a2:cc:ba:ca:57:09:63:de:c2:57:
         11:52:88:04:4c:72:85:d0:02:ef:5e:57:96:d1:d7:29:78:b3:
         fe:e2:33:81:e7:65:e8:b3:f3:56:69:b4:91:46:d0:ae:9c:f7:
         56:dd:64:3b:bf:c4:3b:a0:2f:29:9f:15:d6:fe:cd:97:e6:d8:
         3a:06:fe:dd:4a:be:65:57:57:bf:a7:90:56:af:f2:0f:f9:89:
         bd:73:24:d1:cb:ea:89:f1:3f:f9:7a:77:7d:7e:27:c9:d5:08:
         c1:1a:61:32:d3:56:2c:0d:78:16:fa:ca:ee:0a:43:f4:69:be:
         a7:50:c7:32:79:33:ec:d1:9c:db:6d:d4:3e:17:c0:18:a7:d7:
         0e:04:7c:bf:5f:ee:2f:d7:30:d5:b5:f8:20:1b:30:19:c2:3b:
         09:b0:86:3e:5e:28:18:6e:3d:b6:ef:f5:ca:a9:64:22:4d:94:
         b8:b6:7c:7c:94:ef:2e:d5:9e:15:92:1c:1f:51:0e:c1:2b:3c:
         d4:9d:06:7e:0e:99:ff:87:77:f3:01:29:0c:27:7b:ac:8d:24:
         87:00:bd:31:e3:3e:c7:35:6c:94:55:0e:39:65:32:53:cd:44:
         93:ae:cd:ea:48:6e:69:91:c2:29:df:e0:9a:32:22:ba:b2:b6:
         de:83:de:69
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Uw
ODlENDYzQjYwNzc0MDkzMUE0MDc3Q0VCMzRDRDM1RDAzOTZCMzAeFw0yNjAxMTkx
MTU4MDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDUwRjFEQTE0QTY2NUZF
MUMzQ0M4QkFBQ0QwMjE0MDkxRjEwM0FEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRosgQuOzd5DZwBdtXO3V+3EUFzYVf8eDY5QKISjmoQVAfDkr3
3ErCKhN3dp+EN7xFvr2QHVTcalqgs8CRp53lCyUZmBn7TnnxOsSYyDcHzgQCXmPv
/l9kLFvxICZWZXrmmQ65mI1V0JcYvBQuC1MtS5Y5PmMUALV7TLWOQRfTYvvNFr08
GNgUPjY2piO/Cc+2lDBBfmqtkTGzLz0pel3OasKEN3+kQDxtrVKhDsrsEdGeMPEJ
MMfCMXW3sbye4QYSCwvgmfyOtgT9Jhew2NoVqHb3Jj1dUILGTKBK5Uk5kNszdpwd
7AZ31vQ+E01YIYN0L2xYzOFZqK/KNLnwtPvTAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUUPHaFKZl/hw8yLqs0CFAkfEDrS8wHwYDVR0jBBgwFoAUfgidRjtgd0CTGkB3
zrNM010DlrMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZnaWRSanRnZDBDVEdrQjN6ck5NMDEwRGxyTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDIvZmdpZFJqdGdkMENU
R2tCM3pyTk0wMTBEbHJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGrkYsoiFElFosy6ylcJY97CVxFSiARMcoXQAu9eV5bR1yl4s/7iM4HnZeiz
81ZptJFG0K6c91bdZDu/xDugLymfFdb+zZfm2DoG/t1KvmVXV7+nkFav8g/5ib1z
JNHL6onxP/l6d31+J8nVCMEaYTLTViwNeBb6yu4KQ/RpvqdQxzJ5M+zRnNtt1D4X
wBin1w4EfL9f7i/XMNW1+CAbMBnCOwmwhj5eKBhuPbbv9cqpZCJNlLi2fHyU7y7V
nhWSHB9RDsErPNSdBn4Omf+Hd/MBKQwne6yNJIcAvTHjPsc1bJRVDjllMlPNRJOu
zepIbmmRwinf4JoyIrqytt6D3mk=
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:06:03 2026 by rpki-client