This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
File:                     wMvSeKkeuDXc9AHfRczjD-cAVyE.mft (raw, json)
Hash identifier:          X133FcyuL3WajXVHdMi/w+ygXcizTS0u7tQV11l78CM=
Subject key identifier:   6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47
Authority key identifier: C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21
Certificate issuer:       /CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721
Certificate serial:       1D3B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
Manifest number:          1D3B
Signing time:             Sun 25 Jan 2026 06:27:32 +0000
Manifest this update:     Sun 25 Jan 2026 06:27:32 +0000
Manifest next update:     Sun 25 Jan 2026 12:27:32 +0000
Files and hashes:         1: wMvSeKkeuDXc9AHfRczjD-cAVyE.crl (hash: 9fwa3Y8r5s+iSkRyjakR8eH2AkcHcRF3rTbbhpqWYrY=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 11:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7483 (0x1d3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721
        Validity
            Not Before: Jan 25 06:27:32 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=6AD891BB958F7A9887B1A4F27F259FC94C440A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:ad:ca:5b:c2:0c:0c:d3:27:fe:f7:e7:96:
                    17:6b:58:61:4d:96:7b:ef:75:65:c8:b2:ee:ba:d9:
                    66:5f:a7:0f:6f:63:a2:70:bc:50:44:44:2e:98:ac:
                    72:76:99:54:35:5c:dc:de:06:ce:9e:30:2c:17:da:
                    07:64:08:b7:1f:ef:09:b8:cf:ee:ed:46:d4:a3:b1:
                    5b:e8:72:7c:dd:82:a3:03:9d:08:27:b2:de:30:c4:
                    81:b7:c4:51:37:a6:04:81:65:77:67:47:cd:09:23:
                    0c:4c:06:9b:44:87:37:ff:df:43:9b:0e:33:83:5f:
                    9c:68:22:9d:38:5d:c1:91:65:4f:41:cb:a1:cb:41:
                    3a:68:de:3d:a1:88:32:90:f8:d2:9c:5c:53:8a:6f:
                    7c:25:e2:27:89:bb:53:a9:2c:6d:9a:34:49:b3:d2:
                    61:b5:a2:62:28:80:a0:d9:63:f1:a6:6e:4e:be:c0:
                    b9:ba:3f:dd:eb:35:2a:af:7a:50:02:df:38:f2:fa:
                    db:73:d2:44:a1:01:c0:98:1a:27:ad:22:9b:39:9a:
                    28:cc:86:bf:fd:b2:45:29:4d:9d:75:b7:f5:86:2f:
                    8a:72:95:18:bb:f4:1e:9b:44:88:60:f9:b7:26:29:
                    6f:a2:bc:83:02:57:95:e6:3a:1e:23:d5:2c:37:2b:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47
            X509v3 Authority Key Identifier:
                keyid:C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:c0:ff:3b:6c:e6:f4:5a:cf:e7:89:e3:91:9a:60:d2:79:
         b8:2e:eb:3d:75:4b:97:aa:af:a7:ee:ae:d3:3f:18:b6:3d:a8:
         b7:7d:3a:0f:6a:ef:ea:4b:43:81:35:35:2a:dc:d2:c1:67:92:
         6b:8e:8f:3f:61:c4:7e:b1:cf:3e:4a:0a:c5:ee:8e:57:4e:82:
         78:db:1c:38:89:12:b8:44:9d:a0:b7:5c:34:84:a0:7c:3f:4c:
         b2:6d:07:ee:44:76:33:99:7c:fe:99:e9:a0:64:14:a1:11:3c:
         79:4b:94:f1:8c:a9:46:24:f2:30:9c:93:79:cd:bf:4c:c4:44:
         03:82:3b:c1:fa:f0:63:75:51:40:c4:e9:0d:2b:d5:38:cf:2d:
         de:a8:86:96:44:a2:0d:91:b5:c8:9b:2b:1e:f4:be:9d:7f:ef:
         69:df:48:32:a9:30:b5:3a:aa:99:df:3a:cd:d8:90:6e:5e:47:
         df:5d:e4:8e:ce:b8:1c:36:1d:63:62:75:d1:dc:6f:2f:24:0b:
         e3:c2:8d:1c:de:b5:60:15:2c:ad:10:4f:08:b1:07:1c:76:69:
         78:3e:af:7a:b3:be:f4:df:76:12:cd:bc:48:fb:44:22:af:15:
         a1:fb:5a:7c:ef:e7:d0:f5:f0:14:34:0c:17:9e:e6:c5:af:23:
         ac:95:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:38 2026 by rpki-client