This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
File:                     MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft (raw, json)
Hash identifier:          kJKmGIpLN13TDNqf0ptN9vREPqlkNRPM8OeOVo4HEic=
Subject key identifier:   E5:2A:0D:13:FE:FC:2B:DD:04:16:97:AF:04:0A:22:E5:40:1F:69:44
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Certificate issuer:       /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial:       0788
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
Manifest number:          074C
Signing time:             Mon 19 Jan 2026 07:27:56 +0000
Manifest this update:     Mon 19 Jan 2026 07:27:56 +0000
Manifest next update:     Mon 19 Jan 2026 13:27:56 +0000
Files and hashes:         1: 2GjMcAPIwQ9A3nYHTe17im5dKpk.roa (hash: 8clIZ8TDnNT+D8EcevoDYRlpTbp3pyPMOB/ztKGT3EA=)
                          2: 8VQZLO48jwYGw2yXdB6v_TO9qEc.roa (hash: 6aKFCrqnR0zsdTJv8aafMVS4cqIFGywedkT6HonkqWA=)
                          3: AuVbs0H3hpxgHVWFirWbZjktcTo.roa (hash: KOYq4xwAkyE9JCrUaY8UqsAS2Pe10hdMv1FTrXk+vX8=)
                          4: C3_HQ1XRulHViw3ufo3uiX11UHI.roa (hash: 9Cm68STXmk3Soev19L9WJFLKspiZQFmNKd9irZpegIc=)
                          5: CF2xtxE3DFMbEEivkGusBOHXgUs.roa (hash: jDkKfGv9P7C/2xokEwoIm1zflm8uD3sPZE5h5GHKJbY=)
                          6: FNQKDse8e8mqUU6Bk7qOGbE5adw.roa (hash: A7IomSeApdcErJEMUbsMbHlc5vbIWvnAi+TEurCXQjE=)
                          7: GGS1lIebr4FO_hrF5t5z_y8jSp0.roa (hash: LdI3q29g87cEjTcMGDCs5DPJo8e6XDMONb/JF6QSha0=)
                          8: IcaZcYZurwbyH28jcSMzCSUwqbk.roa (hash: K9NtRk+hHHn3omEPZtgAlM4zbBGAYDaQd7r75mL1zQ0=)
                          9: Ipsai1_qBHxnvBwz89wZRTHbbr4.roa (hash: yMWST7Owb8MBd4H/L9eEjMUFBy6N0wQYxSq3wD5JZ/o=)
                          10: KoPRPQqGeqnVLw-SkMST5S28RVI.roa (hash: nWch/6fvS1NxWfH5N9cTc8M/RbhIPPz4CwV2rOmsDok=)
                          11: MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl (hash: IFxORZXX6Xiv2ZEnUEPb9oXuDPuJRrjktt/ykIn6q1o=)
                          12: Mk3BbPPdPGar92Nj5d7Z_GbysJg.roa (hash: AVaXqwIDh6CWmUIq1yIyRvCpio1R0FNjZiifCKmFhIo=)
                          13: NHamWpbVYJHiRlJoyV-4gnuctc4.roa (hash: /VOb/quE81RsmVadCg2EQfEjGxNFod1cRASxSWSKcu4=)
                          14: OPumY0wkkoySKD34I44cw6wL1Lo.roa (hash: 10NRZYxgZIC01xqX2iSTpUqwOvr9lWyx0kypQoxRqHY=)
                          15: Okp8lbrN9ockG9xCvsJH-FfMotk.roa (hash: ClFc9Wzk3eRJVO2XowP7zKYuAcwSUPbNcLHyQRHevEM=)
                          16: RT-W2Ny9gq6Q5FL_XX84ZUtvb7o.roa (hash: QGBAWkYafxYkK/NQcVRa/qLXSMkE7Hg/FbgZS7Iw7+Y=)
                          17: RwjlVL9wCojI3agwjtTb2oqNREk.roa (hash: gdCZCGvA6m2AKPsMu7skbNe22iB/IgH0naSBsF+QvoM=)
                          18: Tl8s6o7kvYmLotBUW2ESEn5qWqE.roa (hash: MTgZfUt91DGmN8aZm1CyYr+RIFKKC3Q5/pkE6y4sLEo=)
                          19: YP7hcwU9WhLbRC8IWSHbLaS4uJM.roa (hash: 3maiPD2D3+WoEOgD7VvyOVUHqmZYoY5OxOLIqHMcnBY=)
                          20: a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa (hash: pnrh09jjMVQxgCPwAjENTCHzECt6FgHZipi1Md1meAw=)
                          21: bLoMS5F7WEVO1TrATAHo69-sLmU.roa (hash: jj9rU/19HityI5gOVZgVafYfRGECZo1chPDBmDx8hY0=)
                          22: cevxg5OQpJyy4kmIvON4zBBgiMY.roa (hash: Uj82zDRHr+jOc1jqMcw2H1r4KTcK1GvgtouvhgqaIK0=)
                          23: dHazAJqAIAQSBqCwcFeaQ37yMfM.roa (hash: bEGVe/82ByrTDM8kZVntlF9UnW9B/BtpGsiatr0O0To=)
                          24: fMMujWZXQ8MVAKOXpfF-2wt74EM.roa (hash: j3Fa218mLRgqQC0EXQHCf4AEtoOx4OM76tVZGK7FUcU=)
                          25: r6yuB_mBhrxgJ9oegEz3A-ic9UE.roa (hash: wrq5iOM9j+2Qo5lK50hanoFLQKH0hesbfXGxmXDwFxQ=)
                          26: tVv5cMahpCShvvtQAhNlPeOQ5Q4.roa (hash: TzovdDux1HhYWV4x32czQdkPBpbIvapUkX/AYNoNp5A=)
                          27: tt0DAygmgURvac7uzJRRCYzeLMc.roa (hash: R9TelUq5Kr5Ti8fNbGIQGm1bDgSgTe1U8bb925M6eCo=)
                          28: tvZ4kRiGdG1UPtn_ye1HuTlyGVo.roa (hash: yWQuQGrPWn6a5LSCa+GTJsOa7VU9maS/0c3i3fALhtk=)
                          29: uHA7bPi3FNmBGwBadlxZrR3fo8E.roa (hash: UeiBTzUEejHwfOggKPyJtaa4ijGLTbKIkudK87iYHBI=)
                          30: ubxXiWF4u24scvd8vE9mugiaCis.roa (hash: H58Og2+XF+ceISStWo6qan8PKFLrYZ7ed+E9bmNzr+0=)
                          31: w5wjaYSmDIKh9bXq7G-aCoCOBXk.roa (hash: 5+jVn2yfM6rgkogNZKIa0YZRh7DoZsF5/IJB9rxbJIQ=)
                          32: wM98mz6k7POB_T0MejRXUHUVaGo.roa (hash: WNcoKWTZ1mOgrWS4oU63OxebnJDM9+7UOuhg2pg9Irc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 13:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
        Validity
            Not Before: Jan 19 07:27:56 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=E52A0D13FEFC2BDD041697AF040A22E5401F6944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:f8:c1:c1:45:a0:13:fa:bd:c7:1f:be:be:
                    11:82:be:ae:65:1a:95:6a:6b:78:dc:2c:32:fe:eb:
                    61:76:81:cf:71:98:07:cb:05:b4:83:86:30:2e:96:
                    e5:86:71:5e:4f:40:23:29:a0:5e:24:c5:8f:31:33:
                    85:7a:85:7f:55:7c:39:53:c7:a7:06:a4:fa:db:1c:
                    96:7b:97:fc:5c:35:17:c5:3e:56:f3:9c:76:33:cc:
                    93:81:ee:a7:e3:2a:86:c8:12:46:2c:0f:ac:0a:5a:
                    e0:e1:46:83:7e:6c:3f:37:92:05:2d:80:c7:09:04:
                    3c:fd:87:c7:b6:65:f4:5e:48:29:22:71:d8:d7:0d:
                    f0:68:a7:70:2c:b6:f2:f6:93:de:24:0f:9f:16:94:
                    7e:fb:43:db:fd:0d:07:ce:56:4c:46:cf:c2:63:52:
                    8a:a0:fe:c9:c0:f6:ec:cb:d6:2e:b6:4f:06:0f:a3:
                    b0:a3:cc:0c:3f:de:17:40:39:a7:58:7e:89:dd:8d:
                    90:93:c8:21:4d:4d:c6:d3:12:5e:6e:12:01:15:25:
                    d1:47:26:3e:d6:6f:c3:5a:63:08:bc:13:25:1c:f0:
                    df:3c:ed:bf:dd:62:95:ec:31:a2:3a:fc:bf:35:1f:
                    cc:d2:46:e5:a7:32:f1:db:c4:d3:ec:62:7e:10:a6:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:0D:13:FE:FC:2B:DD:04:16:97:AF:04:0A:22:E5:40:1F:69:44
            X509v3 Authority Key Identifier:
                keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:74:c9:3f:97:4f:99:b4:c4:73:1d:fe:60:78:70:bb:d7:
         84:fd:4e:30:68:60:e3:d7:af:76:ea:c7:ff:65:eb:b3:7e:6f:
         31:c9:af:36:16:06:05:62:2c:cb:f9:04:04:3d:8f:95:c0:6f:
         d4:2e:e1:55:f1:e0:63:c9:81:d0:b0:6f:b4:24:5c:51:35:ff:
         7c:b4:38:2e:22:39:0c:af:b3:df:7c:7f:8a:7d:e1:47:92:ab:
         41:52:c4:48:ce:7a:e0:5a:29:a8:70:6f:a2:75:8f:01:fc:dd:
         2e:25:ca:36:4a:43:d1:c4:fd:50:6e:b6:75:1c:74:fd:2b:73:
         d7:6c:6d:10:ad:03:14:a8:f7:ed:34:31:31:fc:7a:5b:23:91:
         ed:15:32:44:2e:46:d0:57:0a:d5:fb:b1:d9:39:cf:b7:f0:c4:
         80:72:34:b5:e9:7d:2f:4c:ba:52:5a:be:29:9b:48:44:03:cf:
         82:92:67:bc:67:06:1a:c1:52:34:7c:b1:36:12:8a:25:20:72:
         8d:ea:38:ae:6d:95:41:c7:d6:ad:93:f1:f3:d6:75:0b:47:20:
         77:1b:c5:48:08:7c:5d:61:ae:75:ae:fe:10:3f:e5:46:c5:bc:
         12:3b:bc:c1:42:ea:dd:e8:f4:21:c8:82:8e:53:42:1d:fa:03:
         1f:46:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:05:50 2026 by rpki-client