This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File:                     vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier:          GsaHQS9nveAaTa6O0kYR4gdV8iNJbpjOAkfTj8pXf+I=
Subject key identifier:   E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       81FE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number:          552C
Signing time:             Sun 07 Dec 2025 06:50:59 +0000
Manifest this update:     Sun 07 Dec 2025 06:50:59 +0000
Manifest next update:     Sun 07 Dec 2025 12:50:59 +0000
Files and hashes:         1: 0WPOtftbuv6XlKwcQGdJTy2bHA0.roa (hash: 9tX1zuaC2IO1pFc6Vgg+czbS5gB1j28C2GhJnMBvnxc=)
                          2: 1E0n4ROZj5qS1mv3Psb2nYulmJ4.roa (hash: qhmNRZc3ESeMJG2OfLqEuQh9vQeNOyj9lfUcEXerXMg=)
                          3: 2ykehmXXhoverS1razLaK2Cw9oM.roa (hash: BSCO+LsBWKbxlEIZbqfXb6ME3jR325sZ52zJEe8kEzU=)
                          4: 3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa (hash: w9bDHp7UsgmhtfqUjhGkTJDkTqNN3EnOHWc7Ki+SSKg=)
                          5: 3JXnXy6rNiFmIZZQPMZ6BwgQVnk.roa (hash: PDtlpCGRSUE3QdQ/9iYK+EM9l9dOKEXrGFKB1zphtPY=)
                          6: 4DU-LJELvAAVgage-9De6WBxyfo.roa (hash: Cn37iZuJd5YlTecj+msAdD2+d++n3EN1QkDnelO3l5w=)
                          7: 6SxtQP3DrofnLHda_35CH9nSdtE.roa (hash: EltO10fLVmTZNw1eX5XH7pnxpe70KdZMzCibcxk66xc=)
                          8: 6oJCwq3huRhuptRwkUvV4orD08M.roa (hash: 29C14QBs1Lskn1hNbX+Sv5gQlo/YIeXBaAz7YsJVGj0=)
                          9: 6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa (hash: 6bueCw5EAsSKsvnDFv0t/AIuvd95Q3wQuAvbWELMnQ4=)
                          10: 89256y-OFuaNZAVPS-Eol6VomIQ.roa (hash: bDvlmrdnFJhvCbcQbgqwKymZOt28MdyoXQRfTofiEoI=)
                          11: 8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa (hash: a9fsM/bA5t/CqWUJprqpz3b1cg5JnQMeBptwjbcfIWc=)
                          12: 9TjiVGAygYB_IsTra7l53EO3Fyc.roa (hash: Wsy50zullNoYup/ZGDTq9u3Gqpmd4TW9gi+aGfYH9gU=)
                          13: B679Oh4-vdKsws-ydVTtHssgfzg.roa (hash: TFY4T4RqczNfz6PykeC1FmVSt0OH0ge/vOR3eWezFIg=)
                          14: DCzDScpGmfQbeVQCu7XBIwf5uEM.roa (hash: D6GVPWMEg+Je4T/sFiTPcW47ZzT8olDgepJm4uT3Ldg=)
                          15: E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa (hash: 9cwtJW5exCVRvI29LdcswfWX+79bTzBtMVJ0k2OU9AM=)
                          16: EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa (hash: Cb0TWy+OJEN2x9k4JhcH8/M/N8ErAy6tjvZc/qnkgpk=)
                          17: F40yyzr-rK6Hpf7hTocwOAXCGBI.roa (hash: eLshj3lyqfRCYc5jfVqKe/soyYADrOvnc3G/RrfmhPQ=)
                          18: HENqmW8P5dcEQIfswIqgbjfICaE.roa (hash: 2uQSitIo9B3RR+cJnZzNJCmzNIkok2Z3w96MqLM6zRk=)
                          19: Hxoh_L710oEY2VOZAXmyZQvV0iw.roa (hash: TD/RqD8yyMI0So/HO9LjHV0xvt3Q5yA+8bIrub4KPuI=)
                          20: JmkbA9C4Ve43qq7vdxNTnHY2lSc.roa (hash: Eja4/Uz9ntt5ezaTERprjyG28TScDFjCB1FF4thwWH8=)
                          21: P6v82Fruxw-1SeCErOe5-P9Jp7Q.roa (hash: jColINLDU073VLMONpbTtK+frDdA9jiFVgjQwo0m394=)
                          22: Qw65VpafvAKV0-0DyJqQaA2TsdQ.roa (hash: 5myDnZrTfpBjIUV3HQvZ67XIaNP5FEgYF1UUAXGUYsE=)
                          23: RxEYtKW6qcUTYdvI3Y4qGmnDjDM.roa (hash: TgBe+m/zxo6tZkyJDyW/qdXzf7gm/P/eGDEVP6kWE9Y=)
                          24: S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa (hash: U0eDChCQOiousTE3KapYoV736YuqG8Eqol2uOWGx9XQ=)
                          25: TEeTO1E3vBmhX1zAcKT7lm-3mWA.roa (hash: sMNyC/W8hJu8s6CyNVERsiOZIY/Zg8Rw4bKY1DVf/cA=)
                          26: VqiBBV-b3i7iECrnzuRfjpYxvio.roa (hash: FRFdxO6TuIzqcetERdcscnhSb+5o8PvLuaDd4kMnN+M=)
                          27: YthLqDjiD_roL8ZjQakwVYhdZm0.roa (hash: HP5cmcqgYRONvP3Vl8/il14eyKAI9IW9j+0yzYttN0s=)
                          28: dCgMf9XJsxgj5oMyIijm2CObJ-c.roa (hash: ArcxUILWhZ2km3Tezbi+tFxMRHHL9SOyKO00i3Dz3uk=)
                          29: dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa (hash: KyC8NCezfjeRtd9aDyBaeuIag6fWROOAIKe36HPDndA=)
                          30: fXvxjkxv2gWy_3cun_FTjfx5SQA.roa (hash: 0Pu3ybTislFO6gg9e4amXypT9qUdLSSk1iKedwaARe4=)
                          31: fn06Y1Bm-KeePI6AAJySEwvAaY0.roa (hash: zzYSr88nFNz+P5uXb8vBbXcZU/idj3/rIigYlBhSi2M=)
                          32: frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa (hash: QaaLY/xsJTYXx5yIvrGiyO28iEd1LXpGcFH+Sn8p/Us=)
                          33: hx0tyEUQsVMeThffkgpe2O2ceLU.roa (hash: IwIDtdr6+OYt3HasXBCZsocJppL1Kz9oaZymlBuju/0=)
                          34: iJXesGmzm64-koYvSYz2T1LIMAU.roa (hash: BbjYrEHzNP4BiAwUlEwGX70hp79k8GaPLLdWUC+wWYo=)
                          35: iZu8_KB3gM46XY3h2RL7rkNyfaY.roa (hash: UrX8KljlZ9ePQUhFlv6h0wf1lJULnQx2q87SMT/gBPs=)
                          36: q7CXJRH13TusfD8L3DVSCTfz70o.roa (hash: zCYFqQJBqwdMQBxIBX5zjVeFKyTawBzRbf6jYYpHu4I=)
                          37: sV_AAIAwAhYk14W3TQoWU0zjoRc.roa (hash: mNQa0Qkk+V2b2ChQfyzPFSWOCOpric0Xhzo7Dd1gO+E=)
                          38: smtX13zKoaBh5jvgSXUfMywsBtY.roa (hash: p3yEJdTvX2XbkA5KCvfLbfqTk4tncsnb6xiZc4/3eqI=)
                          39: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: AX7DG6jWPM+Ao+WuJab+BPboVOrHzVndZOWNKSHU7hw=)
                          40: x6lluZzLr_zG1Sq5du8HtQL3ioc.roa (hash: dVgzYhXlp+UzsNjIsjeBSuuyI+LTDovWntfnwui4bdQ=)
                          41: zpuaFHKL3UcXE0R08JLlXZyxl1M.roa (hash: zrteVbxUv9b4I/nDY1o/omsx6LH+udfXZkUYre6/YDc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33278 (0x81fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Dec  7 06:50:59 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
                    a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
                    6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
                    e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
                    74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
                    aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
                    f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
                    74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
                    4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
                    21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
                    3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
                    d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
                    45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
                    42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
                    95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
                    e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
                    4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:e7:5c:f7:83:c5:7c:97:3c:2d:9d:40:23:42:7a:72:c9:
         1a:79:4c:92:e2:37:3f:fa:c0:dd:52:7c:01:8e:2d:e0:0c:a2:
         f5:d5:f1:38:0a:d6:32:5d:f1:23:bf:81:bc:9a:9a:42:e4:24:
         74:d5:57:30:94:c1:83:bc:55:8a:c6:61:ea:b6:81:3d:04:f8:
         4e:05:4e:c8:dd:84:3d:f9:4f:01:e5:4a:ce:aa:fd:a2:3f:be:
         f0:9d:89:0e:ca:fa:cd:ac:58:f8:1c:a4:69:5a:8b:75:ad:38:
         68:88:34:75:7e:50:7b:02:dd:de:8a:99:12:c2:c7:69:5b:76:
         1c:de:45:91:07:f6:87:9f:ea:ad:2a:4e:ca:64:7d:98:9c:db:
         2a:7f:44:92:58:ce:c0:d2:3d:f6:99:50:5b:72:6f:87:e5:c1:
         6d:d9:22:7f:94:4c:34:47:ee:96:0e:bd:97:fb:93:e6:80:22:
         fe:1d:32:18:65:f3:6c:94:49:c5:a1:6d:88:9f:3d:0a:b8:55:
         69:bc:c6:3d:0b:d4:b1:65:71:ab:a5:20:97:7c:32:5e:dc:5d:
         46:a7:24:df:2d:5e:fc:28:e1:9e:28:10:a0:da:1e:73:eb:3f:
         8a:c9:14:15:ae:29:a1:89:26:6f:92:9f:c9:d9:4e:ef:30:67:
         3b:f8:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----