This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
File:                     SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json)
Hash identifier:          G5kXBY7VQ9YUeAA9CyD9EdBYljXbS2ae7B/zzebncj4=
Subject key identifier:   64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
Certificate issuer:       /CN=49449B46CAECE75D1C558061394DB402B6D009BE
Certificate serial:       2264
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
Manifest number:          2224
Signing time:             Sun 07 Dec 2025 01:47:06 +0000
Manifest this update:     Sun 07 Dec 2025 01:47:06 +0000
Manifest next update:     Sun 07 Dec 2025 07:47:06 +0000
Files and hashes:         1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=)
                          2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=)
                          3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=)
                          4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=)
                          5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=)
                          6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: hFOhHBB9q9lc7ZmuBfQTBfG234AD+MVrDGsKw4sPoC8=)
                          7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=)
                          8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=)
                          9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=)
                          10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=)
                          11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=)
                          12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=)
                          13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=)
                          14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=)
                          15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=)
                          16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8804 (0x2264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE
        Validity
            Not Before: Dec  7 01:47:06 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27:
                    46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1:
                    70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30:
                    20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12:
                    48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d:
                    84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07:
                    9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c:
                    82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b:
                    68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54:
                    bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb:
                    6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e:
                    23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13:
                    7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e:
                    b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c:
                    0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10:
                    24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23:
                    c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
            X509v3 Authority Key Identifier:
                keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:c0:ab:92:69:cf:57:09:0c:3a:f9:ef:18:d6:cf:62:38:
         b7:c5:f7:d5:c6:2c:42:1a:85:b4:ca:49:27:a6:10:54:27:2a:
         7c:d4:72:10:9a:2c:6e:9b:93:9b:cf:91:16:2e:1e:53:96:ef:
         d1:3c:f2:9e:01:03:fb:92:d6:8a:24:cd:06:da:11:c5:04:80:
         cf:5a:c6:87:2a:72:91:bf:0d:80:05:5b:fd:79:cd:bb:bb:2d:
         44:5b:80:06:d6:46:2f:68:c8:1c:0a:cb:0c:b6:33:96:ff:aa:
         56:4c:7d:69:14:c3:f9:6f:fa:e9:12:c0:b6:e6:e9:b2:e8:3e:
         16:0f:61:1d:a2:2c:39:ab:80:5f:ba:2e:04:26:1f:1b:e5:42:
         00:7b:4f:51:3e:d0:22:67:ad:11:57:52:7b:5b:ca:f8:de:44:
         e0:ff:b0:60:c8:be:73:be:36:29:7d:79:51:f8:33:9c:be:d0:
         e0:f3:82:a6:6f:6e:72:bc:80:12:d9:8f:a7:66:de:24:3e:29:
         e9:d5:c9:23:b0:df:cc:f5:c2:21:c4:f4:2c:98:21:1d:1b:8a:
         59:61:91:b9:07:d2:9a:5a:05:93:52:23:76:27:4e:b9:0b:3f:
         6c:6d:3d:85:50:95:8e:1d:fc:48:f9:74:39:e2:22:a1:f6:1f:
         d3:39:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:37:29 2025 by rpki-client