This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
File:                     EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft (raw, json)
Hash identifier:          ouJXojlfWd/MG3YJIOpTXrqXZTLmfEfh0YpMzjwBSQc=
Subject key identifier:   A9:62:01:44:36:53:95:A8:F6:D8:95:CC:DE:68:21:91:4F:2D:B6:39
Authority key identifier: 10:E3:28:2E:8B:C1:54:05:DD:CB:49:A7:3D:4A:D0:E0:87:C9:27:B4
Certificate issuer:       /CN=10E3282E8BC15405DDCB49A73D4AD0E087C927B4
Certificate serial:       078D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
Manifest number:          078D
Signing time:             Mon 19 Jan 2026 10:28:59 +0000
Manifest this update:     Mon 19 Jan 2026 10:28:59 +0000
Manifest next update:     Mon 19 Jan 2026 16:28:59 +0000
Files and hashes:         1: EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl (hash: XL4ZUxaCwv3+8hCs7j0LTrV980z9eahWrTjcxds5lj0=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10E3282E8BC15405DDCB49A73D4AD0E087C927B4
        Validity
            Not Before: Jan 19 10:28:59 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=A9620144365395A8F6D895CCDE6821914F2DB639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:85:d9:83:6a:04:c7:2a:c0:b8:36:ec:5c:
                    95:b2:d3:67:cf:3a:c0:58:9f:4e:e0:3c:04:48:f2:
                    aa:70:44:64:8b:72:37:f7:d3:46:4b:d0:17:ab:26:
                    51:37:7f:48:a1:d7:cc:f3:41:ef:2d:26:a0:35:30:
                    20:cc:02:f5:26:d8:5d:3d:59:08:c8:e8:a3:b0:8b:
                    84:18:0f:2a:99:d9:2f:fc:31:06:51:52:b5:43:b5:
                    f7:09:c9:df:a0:da:e5:bf:7b:2d:59:f4:ec:55:1b:
                    b8:e3:c0:4f:16:40:7f:d9:c5:89:94:c1:42:32:f2:
                    9a:fb:9e:4c:f5:66:56:43:0b:67:0c:0e:0e:52:75:
                    91:df:75:77:6d:30:97:8f:ac:14:7f:86:7c:db:a7:
                    70:2e:03:26:65:f6:11:04:8c:77:53:2c:0a:41:70:
                    7b:c2:05:cc:4c:a7:53:55:85:41:8d:22:5d:36:0b:
                    d1:a1:5b:6a:a9:1a:c8:1e:4e:19:d4:51:74:93:c1:
                    c1:9a:61:54:58:ad:c8:a4:62:8c:c9:00:c0:d7:9f:
                    bd:9e:25:e9:1d:90:b8:24:90:64:b6:24:70:c5:81:
                    3e:9b:1c:55:cb:0d:8b:d0:7e:86:46:ac:60:00:27:
                    21:cb:ea:23:af:53:a5:84:25:12:9d:f8:20:0a:70:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:01:44:36:53:95:A8:F6:D8:95:CC:DE:68:21:91:4F:2D:B6:39
            X509v3 Authority Key Identifier:
                keyid:10:E3:28:2E:8B:C1:54:05:DD:CB:49:A7:3D:4A:D0:E0:87:C9:27:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:3e:0a:1e:9b:a7:14:79:cc:67:86:37:b7:9f:48:02:ba:
         db:e2:93:16:69:a6:99:9f:4e:42:4f:db:80:9d:4e:6d:c6:f8:
         90:b9:ec:0a:b6:62:0e:10:63:42:ed:f9:68:57:f2:8a:fc:b1:
         ed:d6:0f:dc:53:cc:4b:cd:af:74:b0:87:0d:1d:3f:ad:8a:e2:
         69:05:38:f4:a5:b7:9a:4a:ff:4b:b3:de:7c:55:72:9f:e9:b2:
         90:1e:6f:48:9c:25:3f:14:e8:63:e9:a8:48:a4:a8:e3:7a:51:
         fb:74:5c:e2:94:db:9a:4a:27:91:c2:e1:d5:70:9c:aa:95:2a:
         78:64:40:7c:d5:31:a7:4e:89:4f:37:2e:32:99:09:48:f5:3b:
         f8:bd:d8:bd:06:b8:07:ee:ce:f0:34:c2:07:f7:e5:81:26:05:
         34:76:39:00:e8:11:44:61:8b:77:c8:39:bd:c5:13:e6:dc:87:
         fe:ca:e6:b4:f6:d8:1a:5c:81:d6:2e:ba:1a:8e:f9:ba:43:fe:
         cf:9e:9b:83:d6:74:c0:ca:fe:90:d0:a6:86:6e:de:5d:d0:1f:
         7d:7a:7a:45:ae:08:5e:f4:a6:76:eb:95:01:23:f8:ff:78:f7:
         aa:41:a1:96:c7:c9:b7:7a:0c:0e:a3:36:6b:24:1b:cb:18:e9:
         5e:96:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:58:46 2026 by rpki-client