This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
File:                     mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft (raw, json)
Hash identifier:          hI4p12Vgdfk4vJHhet5px04FKZaWrKOrN84T2KF6i5U=
Subject key identifier:   07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Certificate issuer:       /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial:       178E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
Manifest number:          175D
Signing time:             Mon 26 Jan 2026 16:26:52 +0000
Manifest this update:     Mon 26 Jan 2026 16:26:52 +0000
Manifest next update:     Mon 26 Jan 2026 22:26:52 +0000
Files and hashes:         1: 3ANA68llOiqAK9kzJqoDW4NPtfI.roa (hash: uiS2HxQNB0LmVZpVD+63G59hOl/pd6GststSwA1a7yI=)
                          2: 3rrh6Q4Ab0f0IwN6eJXSZrXq87g.roa (hash: m1GrQUY3NH1MYDu7gyDtrRIZVZ5lrV6InlgxmD1ECRw=)
                          3: 3wiQC8D_Qxsjy-7kUe231CskcBU.roa (hash: sEC8NpuyZa9WHooeC3g1ZQyvILwZEqc51tXytBiTlXU=)
                          4: 7zaVtSAUO0-0nTNSKbwFCgdI978.roa (hash: 2+wG4BsoM5thkYYWjT7/NXLSupxce5gIFA3lp0o2XF0=)
                          5: A-yZKf3DagIiymTABWypNHVp_qc.roa (hash: SuafTlTQHm3UsBNdfwGQ1Ol5VoHqTlXpQnVwnHmM2Go=)
                          6: AKwIGj-WCKsM4C_vfOjqHB9R3_o.roa (hash: UejCLSDZmOM6zB3Iz1FBAURHIahn+7vHoUofr8d/as4=)
                          7: EdVWfIr_HvlX10jImKCTXamvA6I.roa (hash: 5F6TMazIa1u5aWY870nmiX9IAeeNjXT4nRfxIqZbqk0=)
                          8: FdrWyT1YrzA6KtI60aLydyXlpW4.roa (hash: AfdUtKvB7ygfZlLYVJPryTZpg0dREpJlAwQes5Y9L8w=)
                          9: Hid9TSxvy611Z8cDtqNMLtc4760.roa (hash: 5G/Adrd2lTvVPhN1xnfJeUTCdkxClmLK6htDh4mHOlI=)
                          10: I4Jpb6n2fhu9A355rAh5qQn-RhM.roa (hash: 1HtFdezvFD9uZl8hj/+ls+6zUxzYfJEQdyNg7QygxYA=)
                          11: JBvWkQgNop_h1MJlmgSubhKIUt0.roa (hash: 7um2gCV5af1CmDBmugDbGTVaZHFiS+ckoH93eQ2b08Q=)
                          12: KpdbN93XExQEg9p1zcs-ynrnwv0.roa (hash: OxO3p7V0jMFOxBCFFDRvwJVmU0lxXAyeh63xZj+bT/w=)
                          13: NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa (hash: Y+tSg/LbrZHtVLaNMJYRvOXDF9n+5BI9LZsRPd5h1io=)
                          14: P4rrPSUpBszXlm5a4ExpKwVWwRA.roa (hash: ZmlZSlxLhhUBsDGQVPtr6Pb52LCMNPCzFq61HL7eshc=)
                          15: QczQcldBEd_FfhrI9G92xmSHmfQ.roa (hash: xS0T1tZgSvnsgieZCXSfQcX9eggSY5l8Yu1Wx/KjtLk=)
                          16: QqRjjyLfhK8o_aXQdJi2gdbUELs.roa (hash: VuOv1x3dsx86TTbFi/ntCGrfvk6qR5u7MVzeT30APMk=)
                          17: UPxeLp83esL6XFwzWB7AGfxYl-o.roa (hash: fS8fV6qCGL62t+Pg2mrdH3cOLpC1KHGgnynYm2XXBxc=)
                          18: V6m9lwlyX7Q2haLW22sz66hOSlo.roa (hash: rX4HQh6432XOBYXPI+2Z9jBqq/NwOHnD6Az4TAM1d+c=)
                          19: VqXKrGginDBcjdXDMOtgyCJy4gY.roa (hash: T0k45MfR+PFvkB8jOKVhh5Q7pQJJlS2DDwmCPvX4m24=)
                          20: Xc7QP2RviMoECTDh0EBBivXMbhI.roa (hash: RiZKfkBNHVLM5vcEsAGLMbnM8MIvLJ3Aius+VA/YZyE=)
                          21: Yd08QO7W-AxZurlCKIepKzXGzvM.roa (hash: 4nTlGE6xoILJr1VUFcY+6+u1iJj1s/aTdUG4JMjUHWw=)
                          22: YsL8BF1549T5kZXzgMw1VPRGKK4.roa (hash: mzVI4FNd8+eX9KIqFwa8jtLVfq/7l+Xw5p+ygy5IEwo=)
                          23: _q0jKny6k09xunXEwO2Tsd1dMCY.roa (hash: +RjE4kwqaLBdcY93Kj6OprQHmCwvgIYCXZr6qCaeFvA=)
                          24: cgbmXCZUa4dSV_mg4YAHr39wdNM.roa (hash: uBYo5m2Hy/OEGX8lBK/l7FS6xRFtbU3FDrQdGX7oPUc=)
                          25: hoPr-9IA4xK24pWrJXMiqEmgL-8.roa (hash: djCXcQA76LoasQf3lEFZRM2zMYCrw8/G6HVc9HLaw70=)
                          26: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl (hash: ZtmzEfnK4QDUYc66lN3S8xE6Zysx0UxuNWyKj3QwEv4=)
                          27: mMEiB8DXxB3fyMMI-cNxYMYi-_s.roa (hash: FjBgAhovtU6yuv9zu3tezDhv2ahyObBTahsIg81AnJ8=)
                          28: oWjD7I0z1dZ3UJU7S-6I--8tTgY.roa (hash: vGobKdGlGJ9GjAuct8VAxyNndXF7YPersgT4QWfeyDs=)
                          29: qD_gyieETJh4X2XCnGFlOkTehCQ.roa (hash: YkuRdliFqLgefg7iLfhHuhyydgAGzp587s7Kczp02/o=)
                          30: sAuy9X3hLvOKgN2tci0AuNUTFEU.roa (hash: etHz1Py0o7VNvXDJ6kPr2PILpq1U+FGqiX8pYAh0dbc=)
                          31: sFyK8mSLyzPsWIyt_Q01K7ugkMs.roa (hash: NdbJ2AcT138Pf9Bckn1KXUx34Lrf6gkt0q1ywbTZyLE=)
                          32: ubUHjrANA8atca3rla1FxXFyva0.roa (hash: ZzhP4Q7BgubbyLuMo5j8AIzil4h3ZiAMGHBJmSJSjtI=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6030 (0x178e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
        Validity
            Not Before: Jan 26 16:26:52 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=07E61D6C5758A96D685164DDA7175C941FDFCCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f6:09:a7:61:3c:ed:69:9d:df:a6:dd:97:48:
                    0e:e6:cd:45:7a:e8:76:03:a2:14:0f:ba:3e:5e:fa:
                    e9:2f:a1:90:de:5b:79:ee:c5:1b:1b:fa:45:4b:5f:
                    6c:ba:98:35:17:89:f7:04:2f:b5:0c:8e:ec:cc:d0:
                    38:bd:de:2c:25:ff:1b:88:e8:70:d8:ba:7d:82:1d:
                    e9:64:cd:f1:c7:5a:bf:29:a4:8d:a7:ae:07:65:a8:
                    c3:39:16:09:f9:d5:ed:be:ad:7a:2c:c8:8a:2a:05:
                    b4:0c:ab:ca:64:42:73:72:29:45:b0:25:c7:4f:28:
                    a6:03:d5:c2:a5:ee:8b:80:19:87:dd:74:00:ee:17:
                    e1:55:74:51:3b:1d:3c:e8:55:1e:a8:da:ff:51:98:
                    be:0c:04:9f:50:81:91:65:97:cc:76:f2:e3:08:09:
                    4d:de:67:5d:ed:7b:86:ad:e7:68:29:41:88:58:01:
                    35:af:6e:2d:7e:8b:c5:33:ce:0d:2f:53:fe:61:66:
                    89:ce:eb:17:8f:54:67:0c:ad:9d:5d:f8:91:04:a8:
                    04:a4:2b:09:85:d6:21:ef:16:16:fe:4c:af:94:d0:
                    1e:98:8a:fe:bf:14:be:e2:0d:b8:f3:32:bb:3f:6e:
                    03:a2:c8:7a:32:e5:9e:85:fc:4e:8a:b9:41:6b:aa:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC
            X509v3 Authority Key Identifier:
                keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:4b:2d:f4:1d:4a:94:79:4b:38:0c:90:6d:91:bd:a7:47:9e:
         04:34:7e:5b:76:16:b2:50:43:8b:a4:8a:26:09:2d:a9:bd:51:
         df:7a:07:77:fb:ba:d3:17:d5:5b:12:67:51:0a:bc:53:f0:88:
         96:28:41:83:54:cb:e0:46:4e:04:be:58:73:58:5c:4a:b2:7a:
         91:0b:c6:a4:8c:5f:11:8f:63:fd:e1:17:79:67:84:69:89:29:
         69:0a:41:72:8d:18:c6:09:6a:a9:70:5f:48:0c:78:43:18:c0:
         ca:86:fe:52:75:99:f8:99:e6:87:42:93:e3:42:0e:d1:f6:fd:
         1c:5a:40:21:74:42:7a:95:b6:d2:98:3c:29:1d:4e:d9:48:e4:
         4a:18:27:79:e0:68:7e:47:00:df:6c:ff:21:30:10:d0:13:5a:
         06:9a:dc:3f:45:12:43:be:94:7e:d1:c2:65:bf:e3:6e:68:33:
         80:af:37:64:0b:55:5d:c4:39:03:e6:2d:cf:83:70:11:14:9b:
         48:a0:b4:4b:28:f0:f9:3a:b2:05:ee:6d:9d:40:dd:27:f6:e1:
         2d:64:bf:c1:67:c2:41:66:a2:75:e6:b3:9e:21:3e:3e:5a:b8:
         0a:44:5e:8d:70:45:10:66:ae:63:1f:55:cf:90:93:a1:3d:c2:
         a2:d6:47:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:01 2026 by rpki-client