This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
File:                     K6tMFwMvC3Tx01c-eeloid-ypu4.mft (raw, json)
Hash identifier:          2NIiM7RGZCiGJXsXlH45eGqnCTeT68Jad0NcudARcPs=
Subject key identifier:   BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0
Authority key identifier: 2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE
Certificate issuer:       /CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE
Certificate serial:       06FF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
Manifest number:          06FF
Signing time:             Wed 10 Dec 2025 01:48:35 +0000
Manifest this update:     Wed 10 Dec 2025 01:48:35 +0000
Manifest next update:     Wed 10 Dec 2025 07:48:35 +0000
Files and hashes:         1: K6tMFwMvC3Tx01c-eeloid-ypu4.crl (hash: sfiU6ZktS9EwjstTqYouR74gAZxfb4G6sp/bG26SEmU=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 07:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE
        Validity
            Not Before: Dec 10 01:48:35 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=BE671BA73B86480189EF54ED7FEF88040D02D1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:18:79:57:d3:51:87:19:64:d4:2b:23:54:
                    8a:ac:f2:88:6d:a0:42:74:e0:65:b1:3b:ac:60:e5:
                    27:5b:40:9c:f9:f1:72:9b:0f:d0:ae:dd:56:b9:d3:
                    e0:f1:02:16:eb:b1:33:50:44:94:2c:d7:09:11:c5:
                    d0:bb:39:c1:09:55:17:68:ec:d0:69:25:42:b0:a8:
                    65:ec:e8:80:0c:0e:e5:2f:5c:d6:b3:5d:ae:24:9e:
                    45:97:66:32:17:b2:82:3f:6f:7b:94:54:d2:58:7e:
                    a7:50:23:74:2d:52:24:6e:73:51:95:71:d0:bc:fd:
                    f3:c3:41:d2:84:41:a9:65:82:fb:1d:df:bd:08:a9:
                    83:29:47:d0:76:fc:a7:f3:04:2f:e2:4f:f7:3e:92:
                    8d:84:db:0d:eb:71:7e:d6:d8:7e:de:2c:44:d0:53:
                    3c:36:d6:1f:63:5d:01:bb:53:89:e9:da:d8:e2:0c:
                    7b:3c:ed:a6:8d:91:9c:55:e7:33:7e:ad:7e:46:9c:
                    54:c4:c3:b8:f0:8e:68:f9:4e:9d:f6:aa:fc:b9:d0:
                    9f:a8:be:a4:22:4f:72:15:98:47:c7:fc:38:f4:d3:
                    3b:56:d5:02:ea:ca:7b:80:63:a5:5a:f7:0d:97:0d:
                    30:fd:e2:4e:ba:23:23:81:db:dd:28:9c:ee:76:fe:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0
            X509v3 Authority Key Identifier:
                keyid:2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:28:12:82:2e:d3:ca:5b:55:25:79:f3:9e:56:3a:e3:75:
         09:25:d2:80:e1:ac:86:50:6e:40:13:7c:5a:92:28:88:9f:8f:
         d3:c3:e6:46:a8:de:c8:06:72:43:5f:b7:76:3a:35:be:16:6d:
         b4:04:eb:51:32:15:81:64:64:a2:2a:a4:dd:f9:c2:d7:90:a9:
         23:92:b8:da:1f:3e:9b:2a:6c:b8:95:de:24:23:45:19:0e:f3:
         91:0e:f2:7b:77:1f:a2:a9:ec:56:f2:68:78:ea:97:f5:1d:80:
         38:fe:52:0d:61:a1:03:76:5a:de:12:b5:c0:9f:ff:cf:2b:6b:
         0c:50:d7:48:53:00:1f:fb:06:e3:08:4f:40:51:29:d6:ce:50:
         16:2e:63:2e:f8:80:60:1b:c7:1d:48:c0:07:83:e2:e7:9e:dc:
         27:86:c8:ec:e1:98:0e:fd:3f:5f:28:e0:fa:dd:aa:59:a8:1a:
         1f:22:1f:70:14:a0:95:f9:d1:16:9b:32:63:6c:ef:21:97:2f:
         43:c1:64:7f:37:5a:70:73:74:c4:a2:3d:85:68:62:a8:29:d0:
         2e:b7:fb:a7:5e:90:0e:59:8b:c2:22:a1:54:d5:3b:8f:0b:a9:
         17:69:e0:b1:cf:c8:c8:5c:52:2a:04:8c:82:df:5a:b9:27:32:
         e0:65:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 07:14:01 2025 by rpki-client