This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
File:                     fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json)
Hash identifier:          Z2t39BmfarBKtS7zqrEpNZwI07T7O/hDACtbn2IwiqQ=
Subject key identifier:   50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3
Certificate issuer:       /CN=7E089D463B607740931A4077CEB34CD35D0396B3
Certificate serial:       1088
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
Manifest number:          1088
Signing time:             Sun 25 Jan 2026 02:28:32 +0000
Manifest this update:     Sun 25 Jan 2026 02:28:32 +0000
Manifest next update:     Sun 25 Jan 2026 08:28:32 +0000
Files and hashes:         1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: d9zOtXrEUAJVo5juvDiCJCPXVNX8u8pq/5C8LS39FPw=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 06:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4232 (0x1088)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3
        Validity
            Not Before: Jan 25 02:28:32 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b:
                    75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a:
                    39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76:
                    9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3:
                    c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a:
                    c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c:
                    5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0:
                    97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00:
                    b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18:
                    d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e:
                    6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37:
                    7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30:
                    f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b:
                    0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8:
                    76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90:
                    db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21:
                    83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F
            X509v3 Authority Key Identifier:
                keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:85:07:26:5b:17:86:60:07:2c:f2:01:04:a0:5c:d8:70:
         31:b1:ac:89:3f:49:47:fa:b0:3a:2a:0a:c4:b6:67:dc:a8:2d:
         08:bc:25:8c:71:e9:f1:97:99:ff:83:5c:bb:53:8d:a3:87:ca:
         de:b5:bd:51:9c:0f:80:28:ce:2b:f0:22:45:b5:6e:47:fc:6b:
         ec:0e:22:e4:0a:ed:c7:9f:2f:4c:ff:3e:63:43:3e:b6:2c:a1:
         fc:41:fc:9b:65:72:67:e2:dc:8c:aa:0f:b3:9b:2f:3d:e0:f1:
         a5:f1:cd:5a:ed:92:a2:19:a4:8c:78:9a:40:8e:61:ab:c9:a5:
         1c:86:0c:dc:11:b7:db:1b:65:f7:13:14:c9:b3:50:b1:be:f0:
         93:3b:00:78:85:af:28:75:db:05:3b:41:6a:62:bd:07:7c:de:
         3f:a0:4e:51:a9:fd:03:5d:f6:3f:0c:e8:2b:ef:de:4a:85:b4:
         19:61:cd:15:42:d4:95:8e:f6:2b:52:c9:e6:c3:1f:cf:7f:13:
         90:26:59:a1:a5:7f:40:65:f8:4b:1b:36:90:4c:65:6b:91:47:
         ea:cc:ef:37:3a:93:36:be:dd:f4:9c:bf:2c:e0:7b:8c:5d:ed:
         0e:7f:7a:dd:bf:b6:71:e5:30:1f:6b:e8:97:d8:89:3a:c1:81:
         2b:3e:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:51 2026 by rpki-client