This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
File:                     0b0pDan5aOcEvyQJEYgFk-f1rsY.mft (raw, json)
Hash identifier:          pDUaUEwDbtPMo/bMaVBjjBKmkwUNyfqyw7R+dsCnqX4=
Subject key identifier:   B3:DC:57:F7:F2:2C:F6:7D:9B:EA:7A:2F:3D:0D:26:E9:D9:58:20:D5
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Certificate issuer:       /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial:       01E1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
Manifest number:          01D2
Signing time:             Sun 25 Jan 2026 02:28:30 +0000
Manifest this update:     Sun 25 Jan 2026 02:28:30 +0000
Manifest next update:     Sun 25 Jan 2026 08:28:30 +0000
Files and hashes:         1: 0b0pDan5aOcEvyQJEYgFk-f1rsY.crl (hash: 3AUF/UoDgePOt8U/ct7Q/P8vqhzzM869AsE/2Z5IrXw=)
                          2: 6zD--t2pc7l7GPjxScKDCxlVr3s.roa (hash: m0naNPMiKurU2FNnUk8CLRM97Qp5zFGpnNQrLci7QXI=)
                          3: ETn_zphqpRbbuMRuMZtKap-Rf3E.roa (hash: wu81s4HvNZj6ZtNwD0JINqvX75q00nyXJ5c8lRKnWXw=)
                          4: HCnI_MDcOdwJ6NkBNiMfWTcD02c.roa (hash: RjV0BFV6JsUdoSv51ZVSon4sJ7NucwkbG/z3BKJ9Nuk=)
                          5: Nkp1JfJz04j-aKzOz-RlP_zs_io.roa (hash: txdhQLKzkcj51mOwnoL2n5rzsH5tt6QbTqrMy8i8Ruc=)
                          6: OSvsC8DKJ4BF7jiPROIlypfoyp4.roa (hash: yKs/rd2Zc1ifVNIHyEEw/3uBSCkzenRTqZbxOBkoduQ=)
                          7: PFlXsnDEmWxVt2hOAy-V4YbAXpk.roa (hash: g+yunAA0C1cJzXNLoZTNOW2DMxzoA1+L7p45hUac4+U=)
                          8: ZZ5xYS0V-9dE0xmIWxEnrddcWZQ.roa (hash: lxUd2qKVOMUCvBCdiQCe/RJ6ywSGyLzv9SzPQwWhScg=)
                          9: _yRz6l3WduIFaOmsie7ODfJVEro.roa (hash: RGaH24pWcUHVCmeOA6FwkAYGetUFEfrqhYE7KPCBzMA=)
                          10: eJx-7UMhBnbXL8BJZkjaPByl35g.roa (hash: 4XWKdSMro8hsNKlTqZqZjGFnDzfPUOxJFK5+yRVSmsQ=)
                          11: h0P1M0Rs3axactmSCenbWibhf2c.roa (hash: k3S7bQCz0Ez+1raM+vq80fL+sEU49H/tcsT2NMxGtaU=)
                          12: hk-GaKzX-rSm-1ZO90rVE1C6s1c.roa (hash: 7dMwegM6Euywana5YIFr0K4L/Vi+oLhHF0JAqBNvNyw=)
                          13: mdWkenbba6s37HdPrC9fXrswsHk.roa (hash: TQLo9txIGwdMyJGlgTYgYQ74cnDVRlY1/PmOQpA9bEw=)
                          14: qokihwJdeYt3M1tbUO747RZoNfg.roa (hash: EszXXFugVyLu+4UINfCl3N87aKfP5Uzgjy6Mj3ZFdNk=)
                          15: yDWN_10vUNUCYrKgTNvE2Dvv94E.roa (hash: ozO9iwHBgZDKkM39pCPzXmy9kzk96CxGmfGj+VGuofs=)
                          16: ys_fmp2jauv7bHyCpiPpeZrSJeg.roa (hash: bwq81+MlnkcVda6Zxgss0RPD4eSWjyvQseydElMt2Oc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 08:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
        Validity
            Not Before: Jan 25 02:28:30 2026 GMT
            Not After : Oct 23 09:04:31 2026 GMT
        Subject: CN=B3DC57F7F22CF67D9BEA7A2F3D0D26E9D95820D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:41:a3:1d:a8:ab:4a:42:f5:6c:5e:13:a8:
                    a3:72:59:03:e8:bf:a1:2a:6d:2a:92:66:1d:c6:15:
                    97:bd:9b:22:91:5a:53:30:29:56:62:fa:e3:75:89:
                    2b:31:8e:ff:75:b6:16:0b:99:43:7d:95:7f:13:8d:
                    f6:16:3d:2c:66:82:59:41:a6:68:50:a3:34:0c:ae:
                    17:5e:1e:ac:b5:26:70:59:f9:28:be:58:25:30:8c:
                    38:ea:7a:4f:69:46:41:c3:b9:71:de:03:d4:df:97:
                    6e:38:c3:71:4c:d8:c5:89:b4:8d:a5:91:30:e3:15:
                    6c:ce:b1:26:78:cd:ff:a3:8c:54:89:f8:69:25:51:
                    4b:40:f3:c3:fd:67:ed:3b:71:31:2b:25:f2:2e:27:
                    4a:fe:72:11:69:a7:6e:8f:b1:3f:3c:58:83:5d:48:
                    25:cd:c2:a6:4d:6a:71:4c:f6:93:6c:9d:0f:4e:5d:
                    5c:33:ae:97:b2:40:64:bf:e6:8e:9b:94:15:9f:56:
                    de:34:61:a6:57:f1:2b:79:c4:21:7f:0a:6f:12:63:
                    c1:da:89:8f:db:3f:33:e2:94:7f:7d:f9:6b:4e:60:
                    15:0c:bf:ca:50:49:71:e0:c1:4a:19:1d:7a:49:e8:
                    c8:45:4e:18:c8:0b:d8:d4:a9:2b:2a:cc:96:ba:54:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:57:F7:F2:2C:F6:7D:9B:EA:7A:2F:3D:0D:26:E9:D9:58:20:D5
            X509v3 Authority Key Identifier:
                keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:ef:48:c7:e7:ab:f6:7d:54:98:8a:17:f9:5b:de:7d:f4:
         82:75:92:2c:18:18:f8:3e:9e:37:71:a7:40:b0:0e:a0:c9:43:
         24:24:a9:3e:d4:58:b8:52:71:34:51:2e:8f:b9:8c:90:91:eb:
         5c:03:fa:17:2d:49:f9:67:98:43:f3:c5:76:09:b7:e4:fa:08:
         eb:b6:32:c1:47:57:7a:9b:d6:97:f6:7c:fd:b0:2d:ca:ae:69:
         27:5e:1f:92:89:ee:ef:2e:bf:e9:e2:1e:6b:d1:40:c3:ba:74:
         bb:6b:15:c4:06:1b:99:66:f6:2c:88:82:ac:ca:4c:f3:44:a9:
         c0:e8:01:85:e2:67:d2:93:17:82:d4:12:01:38:6c:ed:17:7e:
         24:9c:2b:02:d8:36:e3:ca:a2:74:1c:b5:11:68:81:4e:d0:b8:
         7f:5e:af:e4:3b:51:d5:aa:8d:37:63:2a:cc:ff:7a:7f:2e:25:
         9d:d5:5b:5e:1d:d4:46:1e:95:ea:96:5a:ed:24:aa:90:66:37:
         97:0f:bc:96:a7:a0:c4:7e:e9:b8:64:1d:a6:d3:3b:24:c1:c5:
         31:ee:48:c6:bf:69:83:57:3a:ac:ea:36:4d:94:ac:3c:a1:e7:
         82:b2:46:82:c5:ab:96:3d:03:06:f5:88:3d:d4:fd:ce:c7:ac:
         35:a6:37:ec
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDFC
RDI5MERBOUY5NjhFNzA0QkYyNDA5MTE4ODA1OTNFN0Y1QUVDNjAeFw0yNjAxMjUw
MjI4MzBaFw0yNjEwMjMwOTA0MzFaMDMxMTAvBgNVBAMTKEIzREM1N0Y3RjIyQ0Y2
N0Q5QkVBN0EyRjNEMEQyNkU5RDk1ODIwRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtjUGjHairSkL1bF4TqKNyWQPov6EqbSqSZh3GFZe9myKRWlMw
KVZi+uN1iSsxjv91thYLmUN9lX8TjfYWPSxmgllBpmhQozQMrhdeHqy1JnBZ+Si+
WCUwjDjqek9pRkHDuXHeA9Tfl244w3FM2MWJtI2lkTDjFWzOsSZ4zf+jjFSJ+Gkl
UUtA88P9Z+07cTErJfIuJ0r+chFpp26PsT88WINdSCXNwqZNanFM9pNsnQ9OXVwz
rpeyQGS/5o6blBWfVt40YaZX8St5xCF/Cm8SY8HaiY/bPzPilH99+WtOYBUMv8pQ
SXHgwUoZHXpJ6MhFThjIC9jUqSsqzJa6VCorAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUs9xX9/Is9n2b6novPQ0m6dlYINUwHwYDVR0jBBgwFoAU0b0pDan5aOcEvyQJ
EYgFk+f1rsYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQy
LzBiMHBEYW41YU9jRXZ5UUpFWWdGay1mMXJzWS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMGIwcERhbjVhT2NFdnlRSkVZZ0ZrLWYxcnNZLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQyLzBiMHBEYW41YU9jRXZ5
UUpFWWdGay1mMXJzWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkiO9Ix+er9n1UmIoX+VveffSCdZIsGBj4Pp43cadAsA6gyUMkJKk+1Fi4UnE0
US6PuYyQketcA/oXLUn5Z5hD88V2Cbfk+gjrtjLBR1d6m9aX9nz9sC3KrmknXh+S
ie7vLr/p4h5r0UDDunS7axXEBhuZZvYsiIKsykzzRKnA6AGF4mfSkxeC1BIBOGzt
F34knCsC2DbjyqJ0HLURaIFO0Lh/Xq/kO1HVqo03YyrM/3p/LiWd1VteHdRGHpXq
llrtJKqQZjeXD7yWp6DEfum4ZB2m0zskwcUx7kjGv2mDVzqs6jZNlKw8oeeCskaC
xauWPQMG9Yg91P3Ox6w1pjfs
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:31 2026 by rpki-client