This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
File:                     GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json)
Hash identifier:          VbpPmbgreicw7/J2heG0uROZIrmoQiW8NDOd6H/hx1s=
Subject key identifier:   41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6
Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0
Certificate issuer:       /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
Certificate serial:       0406
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
Manifest number:          0406
Signing time:             Mon 19 Jan 2026 09:56:35 +0000
Manifest this update:     Mon 19 Jan 2026 09:56:35 +0000
Manifest next update:     Mon 19 Jan 2026 15:56:35 +0000
Files and hashes:         1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: CZbs1ryQBQ+VBfxVDopQ6xwGjs9Cb1RJfwUN01jDwpk=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 15:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
        Validity
            Not Before: Jan 19 09:56:35 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=418CE576B99D09444358380CFC60C020975464F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61:
                    59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0:
                    99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86:
                    90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8:
                    9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3:
                    49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e:
                    ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b:
                    eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60:
                    76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc:
                    ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae:
                    82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07:
                    b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb:
                    1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d:
                    44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2:
                    1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24:
                    0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d:
                    a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6
            X509v3 Authority Key Identifier:
                keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:58:9f:a8:f5:b5:db:ee:c6:1e:c3:52:1f:ab:4e:0e:ad:
         c6:09:28:28:b1:68:b5:21:24:b0:6c:66:a6:b7:25:75:9c:5e:
         81:5d:77:f1:1d:ee:15:a2:3f:a3:5d:77:ad:24:57:1b:34:a1:
         eb:7c:f7:68:c5:40:a5:cd:43:7b:50:19:b2:b6:61:74:07:ea:
         49:24:22:df:be:c2:a3:44:87:8a:28:e4:8e:16:a5:c9:e9:65:
         a7:d4:e9:e2:07:bf:e8:59:15:51:ca:6f:d6:63:3a:39:b9:86:
         05:c5:48:54:e5:65:94:f3:ab:e5:f1:e9:a2:6c:ab:90:3b:95:
         2a:43:de:bd:81:a4:a8:62:48:52:bd:94:e2:c8:7d:3e:bc:d1:
         e0:b5:27:66:89:30:f8:6f:ab:97:0e:dc:f6:5f:ab:b7:0e:ef:
         14:04:93:62:62:05:7a:60:b5:ec:e4:cc:b1:55:65:25:3c:52:
         22:10:d2:68:a4:d6:69:5f:c7:9e:88:0a:ec:c7:58:ed:e2:00:
         71:94:d2:f4:54:8e:56:f3:03:dd:82:d3:f5:50:43:be:f7:ff:
         79:5d:73:55:c5:48:50:1d:d4:a0:78:e2:ec:79:9e:b2:57:a5:
         02:5f:93:48:ba:f9:e8:10:bc:16:2c:8b:24:6b:9f:dc:5f:6f:
         f2:c4:2e:7b
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFF
NkVGNUIyQjAyMDVERDVGMkI0MjgxMUFDNjA4MDBENjhGRDRBMDAeFw0yNjAxMTkw
OTU2MzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQxOENFNTc2Qjk5RDA5
NDQ0MzU4MzgwQ0ZDNjBDMDIwOTc1NDY0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC54kCa+BLkr5HeOUh8YVlKJv8cNdkAp0fdRkzB4JlpTuix7euO
OPUJnBkChpDtE4wJdUbHRwnTk8cCqJtYw1IJQA0oIliPJoqus0lhfO0uMdLlDgzC
NCecfurekzBwMCSrJf2GJLNEG+vcvXPvQVrZgl5EyRBSYHZOQ+K+iGhI5YUHO0s3
/O0e1FVIQI3x0ucfdgEqroLU3Ls+aMCnyUZyT3a7B7GkdRmFDKnqzCJTyL40ux/n
HFwdVG2j0mgDy8t2LUTlBIgT5/hVt/sA25RJ4hsjSA1hZwyMiir5c82iJArh8ZS9
QL75ISX6qp+NnaB+ZXkC0SUtiK9bzzfPyv9VAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUQYzldrmdCURDWDgM/GDAIJdUZPYwHwYDVR0jBBgwFoAUGubvWysCBd1fK0KB
GsYIANaP1KAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3
OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0d1YnZXeXNDQmQxZkswS0JHc1lJQU5hUDFLQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvR3Vidld5c0NCZDFm
SzBLQkdzWUlBTmFQMUtBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJhbWJ+o9bXb7sYew1Ifq04OrcYJKCixaLUhJLBsZqa3JXWcXoFdd/Ed7hWi
P6Ndd60kVxs0oet892jFQKXNQ3tQGbK2YXQH6kkkIt++wqNEh4oo5I4WpcnpZafU
6eIHv+hZFVHKb9ZjOjm5hgXFSFTlZZTzq+Xx6aJsq5A7lSpD3r2BpKhiSFK9lOLI
fT680eC1J2aJMPhvq5cO3PZfq7cO7xQEk2JiBXpgtezkzLFVZSU8UiIQ0mik1mlf
x56ICuzHWO3iAHGU0vRUjlbzA92C0/VQQ773/3ldc1XFSFAd1KB44ux5nrJXpQJf
k0i6+egQvBYsiyRrn9xfb/LELns=
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:56:34 2026 by rpki-client