This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
File:                     0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft (raw, json)
Hash identifier:          +2TEtV3G8mIfv+gD5YSGCFbgLkXthuVhv/G/YlXYGRs=
Subject key identifier:   17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9
Authority key identifier: D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3
Certificate issuer:       /CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3
Certificate serial:       1983
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
Manifest number:          1983
Signing time:             Mon 19 Jan 2026 10:29:53 +0000
Manifest this update:     Mon 19 Jan 2026 10:29:53 +0000
Manifest next update:     Mon 19 Jan 2026 16:29:53 +0000
Files and hashes:         1: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl (hash: odQLOt5Bo7lCPlalc+7/MlnUvgnoNlCAKCuQR74j6BQ=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6531 (0x1983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3
        Validity
            Not Before: Jan 19 10:29:53 2026 GMT
            Not After : Oct 23 09:21:38 2026 GMT
        Subject: CN=17E36FFCD919996F810199FE06670BF5331577B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:67:71:ab:93:23:a6:7b:10:01:e6:98:29:
                    5b:59:b1:0d:52:17:bb:a6:fe:c4:23:fe:8c:e7:00:
                    ec:3b:f1:89:88:40:8c:ac:a0:07:53:09:d4:68:4c:
                    07:c3:8a:bd:b4:c0:e6:af:6e:14:ea:3d:19:f7:8e:
                    12:fe:e7:04:33:57:a0:d7:fe:32:bd:1b:0e:2f:ac:
                    85:16:20:59:68:1e:a1:54:f4:b6:51:0b:7b:07:6c:
                    5b:6f:82:7b:43:9e:35:18:cd:6e:b0:74:67:27:02:
                    b1:55:4d:c7:e0:88:b6:73:3e:4e:e7:18:aa:82:79:
                    61:31:8c:8c:98:0b:7f:6e:06:e6:9d:40:20:8d:ed:
                    c0:5c:b5:ae:95:45:33:6e:c9:4f:08:f5:34:da:5e:
                    48:1b:26:cb:bf:98:0c:c8:9e:3e:24:7d:0e:90:65:
                    c8:8a:e6:0f:21:fa:7c:9b:b7:a4:55:4d:83:4a:2a:
                    e0:c9:63:53:71:48:af:78:7f:1c:5a:dd:92:0c:92:
                    44:85:b1:f5:04:f1:55:06:5a:b5:e3:f7:50:64:f9:
                    2f:10:8d:bf:e0:db:10:74:37:5b:3c:9f:0e:aa:f8:
                    4f:5c:a8:0d:2d:79:2f:d1:13:50:3f:5a:c9:9f:f6:
                    b9:10:ae:d0:e7:00:62:0e:e0:85:fa:e1:bd:1e:fa:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9
            X509v3 Authority Key Identifier:
                keyid:D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9f:43:66:16:0f:e2:8e:2f:31:72:14:36:7c:12:4a:f4:64:
         50:64:40:30:13:d8:14:7f:e2:66:8a:54:28:bd:22:0e:09:7c:
         52:85:c8:10:ae:22:b2:b6:0c:ed:54:78:09:4f:ef:b0:40:db:
         c7:db:08:0b:51:7e:7c:8d:17:04:e8:a8:23:e1:6f:a4:d9:c1:
         ec:2c:33:a5:0f:04:d2:65:67:e4:58:87:ec:9f:4d:f5:7c:78:
         4b:95:1b:cd:5e:35:10:89:ee:6b:e0:02:33:79:0f:ff:3d:56:
         c3:fe:0b:5e:8b:44:18:ae:e0:0c:47:12:74:cc:5c:2f:36:67:
         ce:a6:c5:f8:b1:39:7f:68:99:6a:86:19:46:91:06:29:16:a4:
         45:97:38:3e:55:e9:12:80:6a:9c:b8:6f:25:25:3e:95:2a:10:
         8e:a6:bf:b1:15:21:f7:a9:18:b6:ff:08:70:7d:53:b8:4e:26:
         b8:dc:5f:aa:72:c1:fb:fe:8a:fc:62:ad:75:d8:a2:f6:f8:02:
         66:99:06:22:e2:98:ac:64:e5:64:b0:17:42:af:b7:bd:fb:25:
         0c:10:8d:1d:fc:9b:b8:c3:90:39:0e:c9:85:de:e5:bb:bd:ba:
         3e:a1:f6:10:45:45:0e:da:dc:67:8a:3c:57:df:2e:73:60:8a:
         5f:9c:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:10:22 2026 by rpki-client