This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
File:                     VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft (raw, json)
Hash identifier:          FPuRATaW0WjfNT4iDglDzdIl6rSBTX37CtMpIkhNjMs=
Subject key identifier:   40:4E:96:EF:91:DC:32:5C:65:65:CD:57:4A:D7:17:9D:6F:D8:F9:46
Authority key identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70
Certificate issuer:       /CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270
Certificate serial:       1281
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
Manifest number:          1281
Signing time:             Sun 07 Dec 2025 06:49:23 +0000
Manifest this update:     Sun 07 Dec 2025 06:49:23 +0000
Manifest next update:     Sun 07 Dec 2025 12:49:23 +0000
Files and hashes:         1: VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl (hash: nAYaPHy2FwjTslZk14dGdVotlss/B0fRCmxkR7XhC74=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 12:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4737 (0x1281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270
        Validity
            Not Before: Dec  7 06:49:23 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=404E96EF91DC325C6565CD574AD7179D6FD8F946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:1f:a4:a4:d2:1b:73:9f:cf:8e:6d:33:7b:
                    4c:b0:c5:3e:44:c6:89:d8:a9:0d:0f:fa:a4:47:c5:
                    dd:3b:de:db:51:dc:a4:35:31:aa:0c:38:36:40:8b:
                    bf:19:48:33:fb:86:fc:65:c7:c3:27:51:9e:58:6e:
                    5c:f2:c7:f2:42:78:13:06:77:65:1a:93:62:a7:33:
                    0b:b0:b1:73:6e:ae:89:59:ae:dc:ee:31:90:2b:17:
                    dd:ab:0c:ca:3e:af:c3:65:66:56:07:c6:e1:08:27:
                    50:36:10:21:cb:fb:36:f1:26:8d:5f:c4:c9:32:0e:
                    0d:cb:f5:99:f5:0b:e3:88:d7:c7:e7:2a:21:d6:f2:
                    ce:44:8e:20:e5:39:39:c0:3c:7e:32:84:07:41:4d:
                    44:ff:d1:19:c5:52:5c:71:15:a3:de:4b:fe:ff:74:
                    6b:e1:74:b6:83:e4:ff:68:48:99:37:01:a3:90:cb:
                    6f:b7:9d:c7:58:8d:19:79:7b:c8:43:3e:f6:b0:0c:
                    40:56:e5:5d:c3:ed:9b:f9:d5:33:61:72:d0:40:2b:
                    74:2f:36:a2:47:65:cb:85:90:71:a7:17:49:04:49:
                    e9:45:d2:0f:02:85:5e:44:45:3d:26:15:05:1b:e5:
                    90:e5:b9:8f:c1:a8:49:60:23:77:7c:9c:c1:83:a5:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:96:EF:91:DC:32:5C:65:65:CD:57:4A:D7:17:9D:6F:D8:F9:46
            X509v3 Authority Key Identifier:
                keyid:54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:80:0c:54:81:a3:58:1e:ef:6f:50:60:82:a7:e8:b4:84:e6:
         47:4a:ba:b7:d2:ac:a0:a4:57:03:5c:12:89:82:12:bf:bd:15:
         9c:0f:56:ea:d4:a1:76:d5:2d:21:7d:82:b9:d1:34:f7:4b:35:
         6f:2e:3e:15:a8:41:20:f0:7d:64:24:e3:e3:7c:34:73:de:4d:
         b7:58:4f:58:94:e0:15:0e:23:ea:c5:b1:8f:dd:69:59:75:0c:
         77:f5:25:30:91:d3:95:5d:45:29:4d:45:dd:a0:98:4b:5a:d0:
         06:fb:25:94:a4:8c:02:d1:8f:5a:c4:9f:63:17:e5:14:42:8a:
         78:78:f6:66:1b:e2:65:74:b3:c7:17:73:d3:7f:05:95:a5:52:
         fc:bf:b2:ac:9a:a8:3b:92:b7:30:d4:aa:09:35:cd:c1:3d:bf:
         fa:0b:1c:60:a9:c5:4e:74:58:2c:1b:0e:12:43:eb:2b:01:cf:
         a4:9d:13:77:7e:de:69:b3:25:85:a3:6e:e8:cc:ec:91:ce:10:
         2c:9b:22:66:28:08:5d:5c:72:68:dd:77:95:b5:0e:3f:8e:ce:
         4f:86:20:0d:b4:b1:fd:74:06:00:d5:c1:ba:ca:92:71:59:5f:
         38:55:5a:6e:b6:c8:3a:81:de:5c:64:aa:35:22:42:6f:27:a5:
         fe:1d:9c:f5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTRC
NUZGQjZDRkE4NzlFNEVCNThBRTIwQUJEOTZDRDlDQkUwNzI3MDAeFw0yNTEyMDcw
NjQ5MjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQwNEU5NkVGOTFEQzMy
NUM2NTY1Q0Q1NzRBRDcxNzlENkZEOEY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvOR+kpNIbc5/Pjm0ze0ywxT5ExonYqQ0P+qRHxd073ttR3KQ1
MaoMODZAi78ZSDP7hvxlx8MnUZ5Yblzyx/JCeBMGd2Uak2KnMwuwsXNurolZrtzu
MZArF92rDMo+r8NlZlYHxuEIJ1A2ECHL+zbxJo1fxMkyDg3L9Zn1C+OI18fnKiHW
8s5EjiDlOTnAPH4yhAdBTUT/0RnFUlxxFaPeS/7/dGvhdLaD5P9oSJk3AaOQy2+3
ncdYjRl5e8hDPvawDEBW5V3D7Zv51TNhctBAK3QvNqJHZcuFkHGnF0kESelF0g8C
hV5ERT0mFQUb5ZDluY/BqElgI3d8nMGDpRljAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUQE6W75HcMlxlZc1XStcXnW/Y+UYwHwYDVR0jBBgwFoAUVLX/ts+oeeTrWK4g
q9ls2cvgcnAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx
My9WTFhfdHMtb2VlVHJXSzRncTlsczJjdmdjbkEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1ZMWF90cy1vZWVUcldLNGdxOWxzMmN2Z2NuQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTMvVkxYX3RzLW9lZVRy
V0s0Z3E5bHMyY3ZnY25BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAH6ADFSBo1ge729QYIKn6LSE5kdKurfSrKCkVwNcEomCEr+9FZwPVurUoXbV
LSF9grnRNPdLNW8uPhWoQSDwfWQk4+N8NHPeTbdYT1iU4BUOI+rFsY/daVl1DHf1
JTCR05VdRSlNRd2gmEta0Ab7JZSkjALRj1rEn2MX5RRCinh49mYb4mV0s8cXc9N/
BZWlUvy/sqyaqDuStzDUqgk1zcE9v/oLHGCpxU50WCwbDhJD6ysBz6SdE3d+3mmz
JYWjbujM7JHOECybImYoCF1ccmjdd5W1Dj+Ozk+GIA20sf10BgDVwbrKknFZXzhV
Wm62yDqB3lxkqjUiQm8npf4dnPU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:42:14 2025 by rpki-client