This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
File:                     miDBZtl2yaZsainUqrTfjHbUgiU.mft (raw, json)
Hash identifier:          pe3783eekTcyD+yt6V7m2qpIN3qLB6jCw1Rhk5+CJM0=
Subject key identifier:   6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C
Authority key identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25
Certificate issuer:       /CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225
Certificate serial:       16EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
Manifest number:          16EE
Signing time:             Mon 19 Jan 2026 10:27:29 +0000
Manifest this update:     Mon 19 Jan 2026 10:27:29 +0000
Manifest next update:     Mon 19 Jan 2026 16:27:29 +0000
Files and hashes:         1: miDBZtl2yaZsainUqrTfjHbUgiU.crl (hash: 5zS4F2nNkYG4eK/Ny5Ea4eywQ38ztlPsqypbrqKC8Ps=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5870 (0x16ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225
        Validity
            Not Before: Jan 19 10:27:29 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=6C1423F4933B6FCC73829060CA9AB943D055651C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:60:4a:ac:c6:a4:4c:e4:05:11:bc:dd:a3:
                    d2:8a:6c:97:5f:dd:78:2a:11:11:98:dc:cb:39:3d:
                    dd:b1:a6:b1:6c:05:17:ce:2f:c9:69:2f:85:18:1b:
                    f9:46:2c:95:76:4e:34:07:27:67:81:5b:a8:1d:01:
                    cc:53:e8:8e:19:58:c2:01:3d:da:cc:fd:2f:94:07:
                    51:5b:38:76:7c:ab:2a:34:39:06:be:0c:ba:b3:82:
                    c3:3d:1a:58:17:c6:36:b7:b2:9e:f3:d2:4d:d5:6e:
                    24:22:72:c4:79:76:a7:dd:8f:48:2b:26:d2:91:f8:
                    df:39:ae:ff:aa:fc:2b:51:73:b9:5e:57:55:84:26:
                    b1:df:2c:fa:08:2d:13:f6:64:01:7a:d9:5c:4a:36:
                    06:05:e2:d1:92:1b:0e:dd:91:63:38:ed:19:2b:d5:
                    4b:65:43:35:4f:3a:f3:7f:a2:e4:cd:09:c5:9d:16:
                    e5:90:94:ab:91:f0:de:12:78:8f:b9:8f:bf:db:f3:
                    76:03:4f:36:6f:8d:e6:33:76:40:43:a9:49:11:73:
                    8b:77:f7:9e:a1:a8:25:91:db:e4:71:16:86:07:d5:
                    84:5b:90:cf:7e:45:a8:99:54:85:92:2b:8a:46:aa:
                    5a:92:a6:80:44:f6:24:e1:19:31:0e:1b:70:78:e8:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C
            X509v3 Authority Key Identifier:
                keyid:9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:d4:f7:77:ea:22:74:23:4d:cb:72:b2:92:f3:9a:50:17:
         0e:54:9b:c0:e5:bf:9d:9a:30:5d:f3:57:7e:50:4f:37:a4:08:
         d5:e5:d5:0a:5e:e9:be:f2:c5:5a:de:30:3e:a0:82:62:d3:be:
         c9:42:5c:8d:5a:49:8f:8a:07:7b:f2:70:e5:99:59:7f:cb:54:
         f0:54:ca:59:dd:17:e1:1c:4e:d0:df:8c:b3:30:40:b3:c1:12:
         02:0b:aa:e2:95:47:d5:b8:2e:ea:52:3b:51:60:3f:f2:50:a9:
         8a:13:1c:6f:ec:98:66:9d:c5:d3:55:a8:ed:18:00:9c:d5:0c:
         fd:3f:17:d3:46:60:f9:fb:90:e6:59:c2:39:b5:77:47:4b:68:
         44:5e:b6:9e:94:07:0d:04:d8:db:74:12:b9:f7:23:7e:53:c6:
         0e:ca:3f:35:d3:e1:f5:64:0a:60:25:6f:7d:53:bc:c4:92:5b:
         52:6a:61:ae:16:06:d4:e0:a4:19:ce:f2:51:61:d9:0e:b1:95:
         32:84:9a:0e:83:a6:41:d6:77:10:6b:62:c4:11:b4:78:b5:67:
         c4:03:07:21:54:4f:54:e8:83:b7:e6:9d:7f:6d:dd:3a:aa:e0:
         b5:54:b3:d7:26:56:e2:6d:c0:55:dc:6e:80:8c:8d:8a:43:1c:
         a4:28:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:44 2026 by rpki-client