This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft
File:                     4V--Vq97W6GgJhMV4RkmxcQFwk4.mft (raw, json)
Hash identifier:          LoA7IqskNYpLunUZTw2TKWle9a30zUwjUHqrU0GSMKE=
Subject key identifier:   98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5
Authority key identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E
Certificate issuer:       /CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E
Certificate serial:       01B7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft
Manifest number:          01B7
Signing time:             Mon 19 Jan 2026 09:56:26 +0000
Manifest this update:     Mon 19 Jan 2026 09:56:26 +0000
Manifest next update:     Mon 19 Jan 2026 15:56:26 +0000
Files and hashes:         1: 4V--Vq97W6GgJhMV4RkmxcQFwk4.crl (hash: dm3+9l8QxB1pmLQz80XadS18O9LyZ8HhXv9m5n3V7zA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 15:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E
        Validity
            Not Before: Jan 19 09:56:26 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=986C4F66966F21E8B36698B1E972EAEBE3D3B3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:20:27:eb:df:ac:87:1c:47:fd:66:80:e1:35:
                    39:ff:4e:93:85:59:0c:9d:87:7b:dc:69:f8:58:69:
                    fc:ff:21:56:0f:c7:8b:5b:97:b4:30:0f:36:be:ac:
                    df:79:b2:f5:60:83:b3:28:fd:0c:e1:20:d5:7a:5e:
                    35:f2:24:41:03:4c:ca:5e:c0:e4:0f:3f:bd:db:c4:
                    51:22:09:be:26:f6:d2:72:69:a4:cc:92:92:15:bd:
                    17:db:56:76:80:f0:ed:30:1e:c1:9e:60:a4:98:48:
                    2e:e8:00:25:d0:03:96:6d:98:10:9b:fe:c1:4d:e5:
                    d3:3f:b0:ba:f0:f2:5a:a2:df:d8:10:69:6d:ea:6f:
                    2c:7b:7f:1c:4c:10:7c:ac:ca:48:3d:6b:06:0f:cb:
                    b6:8a:33:3d:45:5a:4c:9a:00:0b:d3:48:e0:23:6a:
                    db:e5:40:b5:c2:30:4a:d8:56:c0:59:73:c4:ec:dc:
                    f3:75:ee:8e:a4:eb:65:f4:a7:85:ec:48:43:49:44:
                    66:1d:ad:9c:e1:c7:65:f4:67:a5:9d:b2:50:60:01:
                    7c:91:f4:8e:f8:c7:01:16:14:b6:ee:cf:da:36:e6:
                    2c:e5:fd:6b:be:c2:10:86:4d:12:79:fa:a7:e6:86:
                    bd:0a:92:12:47:30:c6:0a:a2:28:dd:f8:01:89:c7:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:4F:66:96:6F:21:E8:B3:66:98:B1:E9:72:EA:EB:E3:D3:B3:B5
            X509v3 Authority Key Identifier:
                keyid:E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:81:ed:20:e5:52:93:62:fc:35:80:a1:e1:75:7d:13:1b:
         50:5c:12:80:8b:ac:25:f4:6d:b5:3d:c3:35:80:32:32:9b:90:
         d1:b0:09:1a:03:f3:10:2e:48:b8:1d:11:cf:29:b5:a8:15:7c:
         4c:3e:7e:0a:e4:9d:2a:ce:63:2d:49:a4:40:72:c3:c8:7d:6e:
         c2:4c:00:a3:7d:22:fd:b3:94:9f:4e:ee:ac:39:5d:aa:09:f6:
         86:04:3c:a4:a2:f0:bb:0b:ee:4d:69:0c:70:f5:20:f4:21:8d:
         93:73:d6:be:f9:91:40:4c:66:d4:ea:26:da:f7:5a:82:78:92:
         51:15:9a:7d:0c:0e:4b:60:24:da:c4:35:66:1d:80:3e:24:51:
         6e:f8:a9:aa:3e:25:4e:10:9d:7f:d5:9e:ec:a8:7c:ce:1c:e9:
         38:f1:ad:05:58:84:19:08:07:d4:11:ef:7f:91:a9:25:f7:07:
         3a:fa:53:1c:0f:37:2e:12:f4:60:d0:87:17:3b:4e:1c:fd:fb:
         f6:03:33:a5:0c:46:b3:a6:ec:f7:9a:a2:b5:ed:cb:85:b5:ae:
         9d:21:9c:35:31:ed:be:0e:ea:93:e7:f8:ef:b2:ba:b5:22:e4:
         af:06:93:7e:e5:db:cf:95:ea:f2:5d:b3:7f:2e:5e:38:ce:33:
         d2:3b:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:58:48 2026 by rpki-client