This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File:                     4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier:          PZCX9Ov+MX36A0E2VcplroHLM+d2R85fl8C/N9ucDlI=
Subject key identifier:   C1:15:84:82:79:85:01:F4:C1:F1:39:B0:36:F4:D8:ED:EE:12:64:93
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer:       /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial:       4D22EF20B59B1138BAA8C46CE9BE80320ECEBDCF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 08:56:02 +0000
Manifest this update:     Sun 25 Jan 2026 08:51:02 +0000
Manifest next update:     Mon 26 Jan 2026 10:08:02 +0000
Files and hashes:         1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: RUO/7gd+fwshuOrC2mDdR5fyzOo7RByJjcc0o9z/fd4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:ef:20:b5:9b:11:38:ba:a8:c4:6c:e9:be:80:32:0e:ce:bd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
        Validity
            Not Before: Jan 25 08:51:02 2026 GMT
            Not After : Jan 26 10:08:02 2026 GMT
        Subject: CN=C1158482798501F4C1F139B036F4D8EDEE126493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:b1:35:34:0a:a1:71:f7:c1:0f:ff:66:5e:
                    20:72:7f:71:ab:6a:6c:e9:35:1f:35:e7:cd:e5:4c:
                    f4:76:ca:7b:be:53:9b:c5:c4:78:74:9a:ae:1a:c9:
                    0e:ff:b4:15:f7:bc:d0:62:52:44:84:b1:51:7c:c2:
                    5f:e5:55:15:35:f7:75:be:ef:5e:fb:a3:84:bc:8d:
                    9d:d3:bb:2f:63:b6:50:63:6d:b1:5a:d6:13:cf:96:
                    63:cc:a9:1e:b6:29:fd:18:a0:82:97:8f:93:e9:bd:
                    15:a9:6f:65:86:00:f8:19:0a:66:30:7b:54:ae:e1:
                    a6:50:73:8b:3c:82:75:5b:40:61:04:88:cc:77:3c:
                    5e:61:93:1b:87:17:d9:16:5a:33:c0:c9:75:08:49:
                    69:5c:cb:90:fd:37:50:63:62:68:85:9d:af:4b:4c:
                    ee:fe:60:38:58:b2:6f:0a:ee:1b:45:e6:eb:0e:72:
                    08:ed:40:56:95:f7:83:14:aa:1d:80:43:88:1c:9b:
                    05:2a:8f:93:1a:8b:0d:50:e7:25:8c:29:68:2d:19:
                    09:8e:6c:8a:b1:2e:a3:21:95:da:1f:4f:82:40:95:
                    30:18:fa:86:ec:e6:d8:21:31:ac:48:22:16:2d:ee:
                    65:f5:bc:1a:08:77:48:70:b8:15:d6:81:be:f2:5a:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:84:82:79:85:01:F4:C1:F1:39:B0:36:F4:D8:ED:EE:12:64:93
            X509v3 Authority Key Identifier:
                keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:23:9a:37:aa:67:f7:1b:8e:c8:08:ed:d7:b3:bd:44:8e:fb:
         f9:0e:71:e4:d3:98:86:79:2d:8b:30:b6:e3:50:0c:a6:f6:e9:
         91:59:bd:11:a1:70:3c:0e:d9:86:43:ec:8a:a0:0c:f2:0d:35:
         5d:76:4d:ce:c3:ac:32:a8:81:63:07:c9:58:b7:ba:83:1a:30:
         e7:da:17:3f:41:74:a6:7c:2e:b0:de:04:93:0c:08:0d:75:44:
         ed:b2:5a:97:e0:9a:d8:31:0d:a6:e8:0e:cc:34:c0:46:d2:95:
         2c:c4:fa:59:1c:58:3a:90:fe:b6:86:15:08:fd:1e:53:eb:51:
         f3:35:a9:c5:86:e8:14:89:ab:8a:cc:77:d0:58:31:e7:35:31:
         c5:44:16:9b:64:d3:dd:e4:40:36:d3:1f:62:64:6c:15:e8:05:
         49:d9:42:e1:e2:ee:da:6e:b2:e1:f2:7a:4d:bc:91:7c:d7:f6:
         cf:aa:96:9b:da:d0:84:20:d3:f6:23:2b:15:84:55:c5:fd:c6:
         b0:f2:75:7f:e4:e5:df:39:4c:36:29:36:1e:79:85:54:af:46:
         5a:73:a6:27:c1:0a:a2:1a:ae:1a:4b:44:8d:c5:bf:3f:30:41:
         e4:be:c1:c9:11:7b:91:26:f8:ca:dd:07:dd:6e:ff:ed:49:1e:
         67:62:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:48 2026 by rpki-client