This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
File:                     Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft (raw, json)
Hash identifier:          LlCPzoPRb0x7ki/r0rl9sFDO+U7/uTnyLeInxmSXKkM=
Subject key identifier:   CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
Authority key identifier: 67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2
Certificate issuer:       /CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
Certificate serial:       073F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
Manifest number:          073F
Signing time:             Sun 25 Jan 2026 11:59:41 +0000
Manifest this update:     Sun 25 Jan 2026 11:59:41 +0000
Manifest next update:     Sun 25 Jan 2026 17:59:41 +0000
Files and hashes:         1: Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl (hash: cmT3snPrDmKmKnUeb/QPbJasKNVDpfLH49DtSSZlids=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
        Validity
            Not Before: Jan 25 11:59:41 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=CC89F50C62CD7DA153A019DDCEF4FC2C12C0BDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:97:d7:85:73:b4:03:b3:98:d0:f3:24:a5:
                    cd:91:aa:28:98:f8:5a:15:d0:96:54:3a:c1:1a:17:
                    e1:5b:a3:79:c0:51:c9:2f:0a:43:12:ab:1b:56:fd:
                    64:eb:1b:ef:d7:2a:2a:95:23:65:bf:2e:5d:6c:c9:
                    e5:ae:2c:e9:b7:05:b5:f7:22:43:8b:ab:d9:1e:d1:
                    a4:d4:ed:6c:99:5d:c0:71:4e:7f:63:39:c0:65:66:
                    72:57:0e:10:95:80:d5:c9:fb:87:5c:c6:2c:3f:07:
                    95:31:f8:5d:aa:28:87:59:77:0e:f5:d7:49:0c:82:
                    83:6a:1c:94:a0:ea:c7:87:1e:7b:eb:e8:b9:56:90:
                    9a:b3:df:16:e4:e0:aa:42:6a:00:5a:d2:dc:89:43:
                    af:9f:0d:ba:2b:ad:ac:62:5c:57:0f:c8:15:ff:81:
                    b8:72:77:0e:fd:ae:d0:24:71:1f:e1:0c:87:00:f5:
                    a8:9f:db:f5:95:aa:6c:12:76:e5:2b:90:d9:96:c4:
                    f6:ba:37:a9:1c:6a:47:d2:4f:50:49:01:99:2d:3a:
                    74:37:97:a3:75:56:db:5c:37:9a:33:77:a7:9b:42:
                    a1:ef:9a:39:37:65:0d:75:73:cf:13:14:41:56:5c:
                    ed:dc:cb:60:92:1d:29:a7:53:cb:97:61:dc:db:18:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
            X509v3 Authority Key Identifier:
                keyid:67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:74:76:06:75:ba:41:09:b9:eb:15:ca:45:2f:bd:c6:95:35:
         22:45:14:72:06:bd:6a:ab:4a:9c:be:0b:46:56:82:2f:47:9c:
         c8:eb:18:a9:fa:f7:b2:f1:c6:5b:28:1f:0f:10:a0:60:d7:ad:
         62:07:5b:2f:58:c5:e6:cf:31:90:26:56:3b:ae:73:07:79:48:
         47:c9:05:8c:e3:8f:5a:6d:a9:08:4d:df:5e:3c:23:27:9e:07:
         f5:a2:c4:e3:a0:bf:cb:50:b4:da:6d:f2:2a:df:c1:e3:1b:01:
         04:3c:c8:11:e4:f5:91:ed:80:8e:74:b3:a6:59:69:2e:06:04:
         d3:8b:f5:1f:52:59:37:f8:57:19:b5:cb:5c:56:78:a2:1f:83:
         7c:e9:4f:01:c3:7f:fb:e6:92:04:80:73:40:73:54:40:47:74:
         d6:25:75:c1:f6:65:02:c4:a8:e4:42:32:bf:63:22:19:f7:65:
         01:f7:6a:c6:4f:51:b2:ba:bf:06:ec:c5:de:0d:f9:44:a5:55:
         95:c9:f9:ec:8c:a4:62:5b:98:82:f4:40:55:3c:a1:bb:de:bb:
         e6:b6:d5:e3:67:a6:8a:5e:36:f8:df:e3:dd:66:8b:74:55:2f:
         71:5a:b4:fb:e2:05:4e:af:c2:77:a9:08:bc:17:e3:95:d7:9b:
         9f:93:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:29 2026 by rpki-client