This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
File:                     eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft (raw, json)
Hash identifier:          MyflljBdxxZ41V+HY0K/vw4VW1br4Qpn8JH0KcZn//A=
Subject key identifier:   EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C
Authority key identifier: 79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49
Certificate issuer:       /CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49
Certificate serial:       0E13
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
Manifest number:          0E13
Signing time:             Sun 07 Dec 2025 01:50:46 +0000
Manifest this update:     Sun 07 Dec 2025 01:50:46 +0000
Manifest next update:     Sun 07 Dec 2025 07:50:46 +0000
Files and hashes:         1: eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl (hash: hLlVnhFW158GJAe24vWRyZhECkDgOneyQ1Gl43feeWQ=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 07:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49
        Validity
            Not Before: Dec  7 01:50:46 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=EB02FD0C614B8CF076E57DA34828AC26FA0A327C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:bb:e8:33:9a:66:41:08:9a:48:b1:36:30:
                    af:65:72:ee:6b:fd:bf:2a:20:03:0f:40:d3:cd:4c:
                    7e:43:33:c6:5a:23:4c:16:3b:7e:03:fa:ea:74:2c:
                    c1:10:c0:2e:e9:a4:4a:83:1c:42:5b:30:c0:73:b3:
                    c8:92:45:58:48:cb:60:9a:7d:00:95:45:73:b2:28:
                    bd:27:37:d4:60:1c:10:c2:3f:13:66:84:a2:ce:e6:
                    8f:d4:8d:94:36:48:4b:f9:02:bf:77:9a:2c:06:a8:
                    6b:da:50:3a:67:a3:29:3a:da:15:2f:ca:dd:1c:f9:
                    7e:58:cf:02:4f:bc:f3:f6:99:0a:ae:49:b0:1c:59:
                    1f:3d:15:88:ab:ce:19:cb:9b:fd:80:e0:34:e9:68:
                    43:9c:fe:91:fc:60:1a:62:61:f6:7c:2e:84:f9:84:
                    75:47:44:5e:90:b5:db:3d:87:c7:7c:d0:0d:77:a6:
                    b9:d0:6a:6f:29:16:c2:cd:8e:62:d1:e0:34:80:19:
                    f1:92:c3:90:70:15:d5:20:15:c3:52:a7:40:33:43:
                    1a:58:72:08:2d:43:a5:64:8b:bf:fd:7b:78:e7:43:
                    1a:84:3c:e5:66:d0:0e:44:ae:39:ca:01:af:dc:2f:
                    56:37:2e:2a:b3:9c:cf:b9:76:cf:b4:7a:48:bd:8e:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C
            X509v3 Authority Key Identifier:
                keyid:79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:66:59:54:39:30:84:1b:1a:76:c6:39:ec:80:e5:fb:cb:
         56:f3:e6:0e:52:9e:bd:52:d0:8b:f8:82:d3:4b:3b:12:53:29:
         85:65:58:03:98:18:77:a6:8b:89:9a:0f:c7:7b:35:1d:c4:59:
         17:e9:75:3e:1d:ec:24:53:c1:64:cc:2c:8b:de:71:da:01:a0:
         00:ab:cc:15:71:db:d6:1a:ce:a6:06:2f:9c:7d:51:3c:87:70:
         ea:d7:bc:92:27:68:4c:27:51:30:be:af:13:aa:ec:bf:9a:91:
         cf:c6:81:33:9e:91:25:8a:68:c6:a5:0e:47:eb:bd:82:c1:ac:
         f7:9e:8a:45:bd:79:32:21:a3:f9:6c:e9:fd:2e:9d:7c:df:92:
         a9:4e:4e:ca:04:fb:84:18:fd:9b:a2:68:75:5c:26:d6:08:0c:
         6c:5b:86:bb:46:c5:b3:83:93:fd:d8:c8:0b:a6:00:6c:3c:b0:
         40:2d:96:de:97:52:c4:be:da:29:b0:a9:7b:d1:df:db:95:4d:
         fd:48:ae:5d:b2:e5:c3:04:dc:13:a6:df:6b:d0:88:28:32:90:
         15:45:9b:84:c9:c1:19:56:6e:ea:49:3b:2b:c2:34:bb:ab:5b:
         a6:01:c5:13:1d:76:1b:54:51:0b:3e:87:66:6b:b3:47:0d:04:
         63:15:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:13:17 2025 by rpki-client