This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
File:                     kplWWPMq3ggkbl0WG0zq9E6BFb8.mft (raw, json)
Hash identifier:          GWk2lq1cwxHiO9wFm85Ol767YmUVFcOoPsvkEhm4KxU=
Subject key identifier:   2E:7A:41:FF:BD:29:B8:3A:39:10:81:69:3F:18:F0:59:A5:DC:F8:F0
Authority key identifier: 92:99:56:58:F3:2A:DE:08:24:6E:5D:16:1B:4C:EA:F4:4E:81:15:BF
Certificate issuer:       /CN=92995658F32ADE08246E5D161B4CEAF44E8115BF
Certificate serial:       0E32
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
Manifest number:          0E32
Signing time:             Sun 25 Jan 2026 15:59:02 +0000
Manifest this update:     Sun 25 Jan 2026 15:59:02 +0000
Manifest next update:     Sun 25 Jan 2026 21:59:02 +0000
Files and hashes:         1: kplWWPMq3ggkbl0WG0zq9E6BFb8.crl (hash: ykC78Uz0YyGPXBRKl4Poo2VqBBfubw2lBuhKGr3MF7E=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 20:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3634 (0xe32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92995658F32ADE08246E5D161B4CEAF44E8115BF
        Validity
            Not Before: Jan 25 15:59:02 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=2E7A41FFBD29B83A391081693F18F059A5DCF8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:25:0f:9c:de:65:4e:35:21:c7:06:62:8b:
                    b2:7b:57:f1:c4:b8:53:7c:fd:28:88:4f:db:25:c8:
                    6e:71:bc:28:07:92:3f:1e:7b:49:ee:d7:bc:99:db:
                    ea:66:32:c3:91:08:76:f0:c3:b0:8a:c4:94:cb:d1:
                    f4:dc:df:1e:be:c6:ee:dc:ba:ef:b7:09:85:fd:97:
                    97:9f:33:f4:94:19:99:be:69:e8:c4:b6:c6:fc:cd:
                    87:f2:0d:d7:fa:ca:0f:22:06:b2:fc:7e:7b:13:22:
                    72:82:5e:68:f7:2a:0e:2a:d5:fd:74:26:38:e9:39:
                    99:6a:64:63:39:d3:57:59:bd:c7:4b:c4:71:e5:6d:
                    98:1a:90:f3:34:48:38:ca:e3:84:28:a6:4e:93:df:
                    3b:b0:9c:79:47:6f:5b:5d:d8:a1:5b:f6:75:4f:ee:
                    c1:47:37:8f:f3:bd:ff:18:90:ee:75:a8:75:95:0e:
                    e4:cb:b8:bc:30:11:09:97:a8:ef:2e:56:49:c7:92:
                    08:b9:18:a6:68:1e:ed:39:72:80:98:3b:1b:90:d5:
                    3a:bb:e0:f2:fe:42:3e:f1:22:11:67:4c:71:57:15:
                    39:14:29:f3:0e:7b:5d:48:a0:78:f9:c7:ed:dd:30:
                    5f:71:25:f1:75:66:1e:33:05:b9:48:c1:e7:1e:94:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:41:FF:BD:29:B8:3A:39:10:81:69:3F:18:F0:59:A5:DC:F8:F0
            X509v3 Authority Key Identifier:
                keyid:92:99:56:58:F3:2A:DE:08:24:6E:5D:16:1B:4C:EA:F4:4E:81:15:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kplWWPMq3ggkbl0WG0zq9E6BFb8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/kplWWPMq3ggkbl0WG0zq9E6BFb8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:44:40:76:72:26:2e:59:cd:e5:4e:b8:3a:ce:8d:74:13:
         1f:56:d8:ad:15:e1:6f:b4:07:6f:04:f1:b7:77:c1:3b:2d:94:
         d9:37:0b:84:d4:70:29:23:46:0a:d0:d6:e0:22:06:75:db:e4:
         60:fd:9a:5c:2a:a7:5d:eb:4e:17:cf:ff:47:7d:b9:f0:7f:e6:
         a3:d6:2c:96:5a:86:d1:25:5a:77:91:5e:d9:f4:43:12:70:4c:
         e3:2f:00:c2:88:d9:77:fd:e5:7d:2a:fe:3c:08:de:b7:78:6b:
         0b:4b:13:d5:bf:b9:32:7d:e3:73:29:ab:66:65:47:40:10:6f:
         da:e8:a7:39:06:2f:d3:d7:7d:4a:e4:31:d5:ad:1d:d6:ff:e2:
         72:5c:34:8c:f8:87:b3:f6:30:c4:4e:99:a9:ac:aa:15:20:0f:
         17:19:7e:df:8b:58:11:c4:50:55:07:cc:43:de:cf:a3:9d:1a:
         9e:3a:e0:ab:8e:1c:8e:23:49:5f:2c:7f:17:44:6f:0f:6c:fc:
         b1:ca:59:f8:dc:9d:23:d5:18:37:06:3d:35:ab:f7:40:a7:a7:
         25:8c:9d:fa:a5:c3:b9:29:3f:cb:20:e3:0f:68:8f:cc:10:c3:
         0b:04:0b:c9:40:bc:d0:76:fc:a8:48:ef:20:33:ac:d2:78:2b:
         17:05:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:23 2026 by rpki-client