This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
File:                     bpDPw0IBYTZGvwABiMWUyGrjN48.mft (raw, json)
Hash identifier:          /Q9lUflJpETm9czJqSmb3F1CdVI2UT/gKZGFhySdZis=
Subject key identifier:   1C:25:79:D7:7E:6C:DA:9A:7D:74:1D:D6:4C:1C:CB:8C:39:53:92:DC
Authority key identifier: 6E:90:CF:C3:42:01:61:36:46:BF:00:01:88:C5:94:C8:6A:E3:37:8F
Certificate issuer:       /CN=6E90CFC34201613646BF000188C594C86AE3378F
Certificate serial:       5699
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
Manifest number:          5699
Signing time:             Mon 19 Jan 2026 10:28:57 +0000
Manifest this update:     Mon 19 Jan 2026 10:28:57 +0000
Manifest next update:     Mon 19 Jan 2026 16:28:57 +0000
Files and hashes:         1: bpDPw0IBYTZGvwABiMWUyGrjN48.crl (hash: qE+c1Itar1/H5AttLghxLRqdzJoMGp+Nw3UhoP0EvCs=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22169 (0x5699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90CFC34201613646BF000188C594C86AE3378F
        Validity
            Not Before: Jan 19 10:28:57 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=1C2579D77E6CDA9A7D741DD64C1CCB8C395392DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:14:26:0e:e7:a2:e4:a1:12:d7:67:27:7a:
                    8f:a2:dc:f9:0e:99:0e:f7:6f:9c:58:ad:27:47:5d:
                    72:5f:75:86:a2:14:1d:4a:77:da:4a:10:4c:1a:95:
                    2c:d2:ca:96:50:35:17:ef:3b:a4:b4:df:51:e6:54:
                    69:df:d4:00:97:fa:d8:7e:f4:0d:ea:05:1b:63:c0:
                    ec:2f:ab:ec:9d:37:7e:74:18:e5:9b:63:49:8a:10:
                    19:60:ba:a3:5a:25:b1:08:46:91:f1:df:95:64:55:
                    61:bd:a7:2d:fc:dc:6f:07:d2:90:18:a5:7e:d9:c6:
                    2e:36:cf:6d:2d:52:9f:19:2c:40:a9:33:4b:fe:9c:
                    2d:ce:06:59:15:41:60:9c:60:02:12:09:0e:2f:9d:
                    4d:e7:d8:2a:d8:cc:51:16:88:cb:68:dc:51:4e:6f:
                    cc:a4:81:b2:c0:5f:61:46:e2:73:4d:cf:85:37:f1:
                    45:3a:44:c2:7b:1a:53:a0:21:a1:7c:e1:a6:35:2e:
                    cb:94:42:f4:61:7d:83:94:19:6e:c0:92:53:c5:32:
                    7a:b5:b3:3d:18:7a:3d:73:15:fa:03:a5:a6:29:67:
                    bf:c6:14:92:c5:e0:d8:21:da:a6:79:6d:64:5a:72:
                    f8:19:b7:45:d5:03:da:00:f7:a9:b7:58:67:14:71:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:79:D7:7E:6C:DA:9A:7D:74:1D:D6:4C:1C:CB:8C:39:53:92:DC
            X509v3 Authority Key Identifier:
                keyid:6E:90:CF:C3:42:01:61:36:46:BF:00:01:88:C5:94:C8:6A:E3:37:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:50:19:c3:f7:44:2b:a7:4a:03:3b:1d:a8:29:b0:3f:06:ad:
         2e:55:81:78:b5:bb:67:0c:4b:3b:d5:20:af:18:09:9e:92:a9:
         f3:ca:be:5c:9b:06:14:e0:96:8e:3f:04:7c:da:2a:d5:0e:0e:
         8f:d0:88:dc:ff:cc:2d:60:fc:96:a4:eb:7e:40:bd:07:c0:13:
         b5:6b:84:33:95:11:dc:29:45:a1:c7:6b:48:b3:c1:3f:79:22:
         a3:05:fa:c8:fa:a3:32:a7:53:ad:9a:5f:75:20:93:5d:a0:f4:
         48:92:b2:9a:58:85:25:b8:27:e5:8d:36:8b:7e:86:b1:63:9a:
         5c:3a:d7:44:21:95:50:00:ca:43:d9:57:b0:a0:e3:b9:1a:21:
         d5:a0:d6:24:54:b4:cf:54:89:f3:1b:86:41:8c:aa:89:5e:f2:
         28:5c:0c:11:ce:b7:99:2b:8e:d3:66:62:63:f6:3c:51:71:3a:
         6a:01:a5:7e:0d:2a:e8:e7:50:f6:40:51:a4:da:6d:b9:1c:bd:
         01:e1:e7:df:ae:78:a9:1b:01:29:b9:2c:68:1a:8f:09:b6:1b:
         0f:d3:eb:1c:61:76:01:86:7f:a3:fe:5a:93:89:27:76:8b:08:
         ba:53:40:7d:fc:bb:3a:da:e8:42:f6:4c:6a:b8:64:e1:75:77:
         cd:44:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:44 2026 by rpki-client