This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.mft
File:                     QV82SQKuPpLOqr3b3NRhLqut6pg.mft (raw, json)
Hash identifier:          vLuQ4gph+aqDQou1c9m6ExDjQE7cmJrsG29HXd9pj/w=
Subject key identifier:   B8:E8:AC:13:83:83:2F:42:6C:A9:D5:DE:99:DC:06:4F:28:4C:13:93
Authority key identifier: 41:5F:36:49:02:AE:3E:92:CE:AA:BD:DB:DC:D4:61:2E:AB:AD:EA:98
Certificate issuer:       /CN=415F364902AE3E92CEAABDDBDCD4612EABADEA98
Certificate serial:       0B2A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QV82SQKuPpLOqr3b3NRhLqut6pg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.mft
Manifest number:          0B2A
Signing time:             Sun 25 Jan 2026 11:58:24 +0000
Manifest this update:     Sun 25 Jan 2026 11:58:24 +0000
Manifest next update:     Sun 25 Jan 2026 17:58:24 +0000
Files and hashes:         1: QV82SQKuPpLOqr3b3NRhLqut6pg.crl (hash: HpcUzu+CEf/YbIXeIaB+AiVxxs1+czbSs7ayS1Gx2+w=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QV82SQKuPpLOqr3b3NRhLqut6pg.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2858 (0xb2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415F364902AE3E92CEAABDDBDCD4612EABADEA98
        Validity
            Not Before: Jan 25 11:58:24 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=B8E8AC1383832F426CA9D5DE99DC064F284C1393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:83:40:59:83:1d:7f:8d:6e:0d:47:6c:e7:
                    6f:54:7e:b2:76:92:7d:a6:fd:29:cc:c5:1a:5c:e6:
                    fe:af:9f:f3:9f:5b:ce:a3:bb:64:1b:d6:a6:ed:00:
                    6a:1d:4b:65:d9:87:5e:ea:2b:2c:c2:73:4a:26:52:
                    bf:d0:aa:3f:4b:87:4b:45:e6:2b:98:d5:92:63:f6:
                    1f:af:e7:7f:5c:30:05:8c:90:b9:81:72:ba:6c:88:
                    6e:73:28:0f:49:ed:15:09:dc:8e:89:e7:e8:b8:bf:
                    9c:63:42:7c:37:5b:39:e5:29:f1:75:4a:b9:50:a1:
                    0b:88:4f:81:5b:b6:d7:03:3d:6a:2e:78:af:ff:5b:
                    01:02:76:eb:fe:ba:85:90:78:7a:92:dc:0a:67:53:
                    9c:f1:57:19:3c:ad:37:a3:f4:e7:6d:bc:7e:52:24:
                    67:6e:22:c2:b5:97:9d:77:4d:62:44:d4:48:20:54:
                    eb:c5:bd:07:ca:1b:eb:a9:07:c4:22:74:0e:d5:5f:
                    9f:85:7a:fa:b4:48:e1:e3:90:4f:f6:7e:4e:3b:e7:
                    2f:61:3f:ca:ab:73:cb:7f:21:6d:6d:e0:d2:cf:41:
                    cd:15:23:01:30:21:b1:9c:8d:fe:8e:40:20:41:30:
                    52:31:a4:f1:60:e4:69:52:af:3c:7a:70:a0:e7:1a:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:AC:13:83:83:2F:42:6C:A9:D5:DE:99:DC:06:4F:28:4C:13:93
            X509v3 Authority Key Identifier:
                keyid:41:5F:36:49:02:AE:3E:92:CE:AA:BD:DB:DC:D4:61:2E:AB:AD:EA:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QV82SQKuPpLOqr3b3NRhLqut6pg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:46:d7:c6:35:1d:ba:68:9b:82:51:2f:10:d0:ce:2e:69:cf:
         60:ba:8d:c3:7a:19:98:0c:35:44:56:48:76:85:80:74:8d:e7:
         02:92:40:60:be:f7:04:cc:eb:ac:2e:a6:ec:d2:19:ad:0c:9b:
         6a:51:25:3b:f1:a9:ec:de:04:83:6e:4e:6d:83:fb:33:a1:21:
         b5:0a:10:76:4b:54:8d:a7:08:bc:fe:53:8a:1d:3a:75:01:0b:
         6b:03:60:46:9d:85:3d:ac:37:3a:fc:f6:70:75:43:cd:2e:34:
         fc:4d:19:33:d4:0d:be:f4:e3:c2:56:8b:6d:8b:b0:3d:ad:b9:
         92:04:5d:30:34:bd:dd:b1:e7:12:bd:42:63:e9:1c:f7:0f:41:
         9e:e6:de:1e:23:11:e6:8f:ad:47:43:c2:93:87:8d:4f:c5:a2:
         c5:f1:5f:c2:4f:68:79:22:5e:93:a2:52:c6:14:da:30:44:bf:
         ec:14:42:b4:5f:2f:f9:ab:87:d7:a9:c0:2d:8a:16:db:ac:8f:
         68:40:eb:ba:8c:09:4c:17:e6:5f:be:20:c9:07:7b:ab:f3:5b:
         73:d8:33:24:f9:b6:2a:50:fb:70:90:1a:51:ef:79:11:d5:75:
         13:19:4d:94:49:d1:7e:4a:55:68:ee:e0:c5:db:5c:fe:3d:ff:
         86:f0:ab:6f
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDE1
RjM2NDkwMkFFM0U5MkNFQUFCRERCRENENDYxMkVBQkFERUE5ODAeFw0yNjAxMjUx
MTU4MjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEI4RThBQzEzODM4MzJG
NDI2Q0E5RDVERTk5REMwNjRGMjg0QzEzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHd4NAWYMdf41uDUds529UfrJ2kn2m/SnMxRpc5v6vn/OfW86j
u2Qb1qbtAGodS2XZh17qKyzCc0omUr/Qqj9Lh0tF5iuY1ZJj9h+v539cMAWMkLmB
crpsiG5zKA9J7RUJ3I6J5+i4v5xjQnw3WznlKfF1SrlQoQuIT4FbttcDPWoueK//
WwECduv+uoWQeHqS3ApnU5zxVxk8rTej9OdtvH5SJGduIsK1l513TWJE1EggVOvF
vQfKG+upB8QidA7VX5+Fevq0SOHjkE/2fk475y9hP8qrc8t/IW1t4NLPQc0VIwEw
IbGcjf6OQCBBMFIxpPFg5GlSrzx6cKDnGoSrAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUuOisE4ODL0JsqdXemdwGTyhME5MwHwYDVR0jBBgwFoAUQV82SQKuPpLOqr3b
3NRhLqut6pgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
OS9RVjgyU1FLdVBwTE9xcjNiM05SaExxdXQ2cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FWODJTUUt1UHBMT3FyM2IzTlJoTHF1dDZwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTkvUVY4MlNRS3VQcExP
cXIzYjNOUmhMcXV0NnBnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGhG18Y1Hbpom4JRLxDQzi5pz2C6jcN6GZgMNURWSHaFgHSN5wKSQGC+9wTM
66wupuzSGa0Mm2pRJTvxqezeBINuTm2D+zOhIbUKEHZLVI2nCLz+U4odOnUBC2sD
YEadhT2sNzr89nB1Q80uNPxNGTPUDb7048JWi22LsD2tuZIEXTA0vd2x5xK9QmPp
HPcPQZ7m3h4jEeaPrUdDwpOHjU/FosXxX8JPaHkiXpOiUsYU2jBEv+wUQrRfL/mr
h9epwC2KFtusj2hA67qMCUwX5l++IMkHe6vzW3PYMyT5tipQ+3CQGlHveRHVdRMZ
TZRJ0X5KVWju4MXbXP49/4bwq28=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:15 2026 by rpki-client