This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
File:                     HjLVp6TGq1Ov4e_srAET7e7SZYI.mft (raw, json)
Hash identifier:          rV1BucYvtstYUlv2b4d9/phOGFr4sWtNyp5fsIUhngM=
Subject key identifier:   C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
Authority key identifier: 1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82
Certificate issuer:       /CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
Certificate serial:       0B60
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
Manifest number:          0B60
Signing time:             Sun 25 Jan 2026 10:57:24 +0000
Manifest this update:     Sun 25 Jan 2026 10:57:24 +0000
Manifest next update:     Sun 25 Jan 2026 16:57:24 +0000
Files and hashes:         1: HjLVp6TGq1Ov4e_srAET7e7SZYI.crl (hash: q7wYyG+6m9DWFiCpBASEQxf1nfL6GUfsRJUa7XleOJY=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2912 (0xb60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
        Validity
            Not Before: Jan 25 10:57:24 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C353D4450C543C80DEDD52A146BC23765C53C480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:47:61:83:b2:d0:c6:93:4d:ae:70:cb:ad:
                    de:df:6e:ff:90:b4:4d:50:36:eb:1b:51:ca:37:c3:
                    5c:29:98:84:9d:df:ca:37:e1:3d:cd:e1:a9:f6:b9:
                    d9:0f:e4:6c:b3:fb:e7:e4:dd:28:11:16:d5:aa:08:
                    bc:d9:d5:3c:bf:bc:a4:66:a3:28:21:9a:f6:74:e3:
                    f6:15:bd:aa:35:5f:49:48:03:33:7f:7b:85:1b:43:
                    04:9f:8e:fc:74:dd:22:94:3c:91:67:e9:1c:0a:14:
                    81:89:56:9e:0e:77:bc:f0:73:fe:ce:74:89:52:38:
                    94:54:62:9c:7c:cf:a4:8c:4e:a6:bb:3f:42:04:73:
                    86:08:49:59:c7:5d:7d:b8:4c:36:02:80:a7:35:de:
                    47:48:15:d7:9b:95:a2:5c:1d:bb:89:91:35:69:de:
                    e8:e1:66:22:cc:e7:86:a3:81:a8:aa:f2:af:08:36:
                    86:c7:e3:fa:47:55:a3:f8:b1:52:80:57:76:36:b8:
                    f1:84:32:c5:e8:fc:35:25:3a:3f:50:39:cb:93:29:
                    6d:fb:0d:c1:ee:91:2c:fa:d4:f8:c9:83:ec:17:53:
                    89:bc:ce:82:71:00:d9:4b:e0:2b:23:cb:7a:6e:bc:
                    11:7e:66:5a:06:be:a7:29:05:01:a0:c0:c4:7b:cb:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
            X509v3 Authority Key Identifier:
                keyid:1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:4a:95:f2:8d:58:67:26:df:3e:25:19:79:13:e5:6d:85:
         9f:0e:2d:4d:bd:10:af:61:6c:6f:97:c6:4b:db:00:12:20:67:
         83:8c:d0:f5:05:dc:63:a8:74:aa:38:6f:95:94:6f:6f:2a:d7:
         84:09:dc:d7:f6:22:d5:1d:c7:c7:4e:42:2c:1b:1c:96:d8:b8:
         e8:76:7d:b5:f7:db:5b:10:91:1b:31:b9:3f:9b:9e:ce:05:28:
         5b:44:d7:ee:57:0b:e3:87:74:76:6a:7f:20:7d:98:3b:fe:f1:
         47:b3:f8:cb:4a:25:a0:e1:58:41:17:49:14:58:f6:91:0d:37:
         d3:37:3a:ea:67:d5:94:83:a3:88:a1:eb:21:e3:da:31:8b:05:
         69:b1:62:d7:91:c9:30:2c:1a:f6:74:7e:a4:ab:fd:81:9b:dd:
         f7:1a:02:7c:75:d1:34:ec:88:8f:63:f0:0c:00:6a:2f:70:35:
         9c:4c:e9:ba:18:5c:87:b1:0a:5a:07:08:4f:76:30:f2:5e:22:
         33:fc:87:ed:37:15:e4:04:89:66:ca:de:9f:bf:c9:fb:14:eb:
         43:d2:17:24:28:d0:65:ba:64:07:9e:fc:82:09:ae:de:80:bf:
         cc:b9:c7:29:57:00:d1:34:36:8e:f7:ac:ee:4a:79:f6:56:00:
         53:ee:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:22 2026 by rpki-client