This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
File:                     RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft (raw, json)
Hash identifier:          p6PgH5ohoU9oGjc0oQbpsGs4am01CA14438c1ocSQO0=
Subject key identifier:   96:5D:AA:48:54:B5:59:28:CD:A2:5F:51:C6:EC:DD:C2:AB:6B:31:5D
Authority key identifier: 44:10:2D:23:BA:95:6E:9A:B5:C3:28:73:EE:46:32:D9:3E:4F:DB:E9
Certificate issuer:       /CN=44102D23BA956E9AB5C32873EE4632D93E4FDBE9
Certificate serial:       0AB4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
Manifest number:          0AB4
Signing time:             Sun 25 Jan 2026 11:57:51 +0000
Manifest this update:     Sun 25 Jan 2026 11:57:51 +0000
Manifest next update:     Sun 25 Jan 2026 17:57:51 +0000
Files and hashes:         1: RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl (hash: N6GYFtBfbLhzyrkTjnXR/q1XUJO6PkxYuh3SyLUqaOQ=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740 (0xab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44102D23BA956E9AB5C32873EE4632D93E4FDBE9
        Validity
            Not Before: Jan 25 11:57:51 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=965DAA4854B55928CDA25F51C6ECDDC2AB6B315D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:2a:c0:63:43:33:68:45:08:82:ca:c2:a0:
                    51:b5:e8:7a:1f:b3:51:96:2e:95:ad:80:41:1d:a4:
                    18:78:c8:12:7d:24:cb:44:c7:01:03:53:56:c4:06:
                    0a:46:c5:c1:68:9c:5b:ce:ed:6c:37:fc:87:83:46:
                    78:77:47:58:3f:19:54:26:a6:4a:76:09:46:ac:1c:
                    8a:8d:f5:f9:24:27:22:27:31:2d:ed:14:82:5e:c0:
                    10:46:b2:82:8f:34:b2:85:7a:10:60:8d:81:68:5b:
                    26:25:a3:d1:cf:e0:1e:1c:26:f7:4e:c9:c3:b7:14:
                    f0:53:d0:42:a1:da:2b:2a:05:ca:4a:c4:2d:03:21:
                    2c:04:8b:85:07:69:2c:84:9b:bf:47:af:3d:d6:61:
                    95:11:97:aa:c1:ac:2a:95:63:67:5c:d7:57:3e:8b:
                    02:f5:35:9d:d9:91:2f:61:50:d4:8d:56:82:ff:40:
                    1b:a0:4a:84:c6:3f:24:ec:28:77:d5:cb:8e:44:f8:
                    a4:21:cd:2e:64:24:82:98:dd:c6:4d:e8:64:9b:61:
                    df:e5:ae:da:7d:58:6b:4e:58:11:f1:72:43:a3:00:
                    2e:84:35:f8:54:de:5c:4c:d6:b0:aa:92:1b:f6:1d:
                    0f:0f:9e:f3:b2:24:a4:2d:d7:93:4f:97:15:df:85:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:AA:48:54:B5:59:28:CD:A2:5F:51:C6:EC:DD:C2:AB:6B:31:5D
            X509v3 Authority Key Identifier:
                keyid:44:10:2D:23:BA:95:6E:9A:B5:C3:28:73:EE:46:32:D9:3E:4F:DB:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:44:7e:35:b5:65:ec:9f:93:7a:ba:af:10:d1:0d:b3:d2:9b:
         a9:f3:cf:41:7e:3d:1d:9f:cb:b6:14:80:9e:5a:3c:46:1e:34:
         99:07:cb:73:26:bb:09:19:2e:cb:79:76:36:f3:bc:44:29:5e:
         12:5c:2b:f8:8f:32:2a:4d:b2:41:25:a0:b2:6c:d5:56:ed:d2:
         da:16:fc:6d:03:34:0b:2e:9e:45:55:0c:11:e3:91:a0:3b:3f:
         b8:41:0d:cd:08:d1:80:b4:a7:fa:52:3d:de:0a:8d:d6:01:1b:
         0f:0c:25:01:b8:36:e7:57:9e:64:d7:78:54:de:d3:9c:0d:62:
         56:39:d4:d8:88:70:e2:69:6d:39:38:5c:e8:f0:e3:f9:5f:d7:
         d4:0d:19:4e:d0:c9:61:b2:cd:49:cd:1e:5c:c8:99:93:21:19:
         1d:b8:78:14:ca:5f:a8:53:26:35:83:57:16:25:c7:23:fd:73:
         c8:96:96:96:44:a9:53:56:c5:97:05:1a:fb:97:d0:32:dc:c2:
         0b:8f:90:92:09:1e:5e:4d:90:8b:8d:bc:fc:8d:c0:c6:09:40:
         16:08:02:8a:78:97:86:3b:d2:13:4a:33:18:ac:ef:86:e8:a0:
         29:7d:17:09:34:b1:72:0a:af:11:0f:a0:6b:18:79:94:97:da:
         2c:3f:a7:9a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQx
MDJEMjNCQTk1NkU5QUI1QzMyODczRUU0NjMyRDkzRTRGREJFOTAeFw0yNjAxMjUx
MTU3NTFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk2NURBQTQ4NTRCNTU5
MjhDREEyNUY1MUM2RUNEREMyQUI2QjMxNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQOyrAY0MzaEUIgsrCoFG16Hofs1GWLpWtgEEdpBh4yBJ9JMtE
xwEDU1bEBgpGxcFonFvO7Ww3/IeDRnh3R1g/GVQmpkp2CUasHIqN9fkkJyInMS3t
FIJewBBGsoKPNLKFehBgjYFoWyYlo9HP4B4cJvdOycO3FPBT0EKh2isqBcpKxC0D
ISwEi4UHaSyEm79Hrz3WYZURl6rBrCqVY2dc11c+iwL1NZ3ZkS9hUNSNVoL/QBug
SoTGPyTsKHfVy45E+KQhzS5kJIKY3cZN6GSbYd/lrtp9WGtOWBHxckOjAC6ENfhU
3lxM1rCqkhv2HQ8PnvOyJKQt15NPlxXfhaTtAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUll2qSFS1WSjNol9RxuzdwqtrMV0wHwYDVR0jBBgwFoAURBAtI7qVbpq1wyhz
7kYy2T5P2+kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
Ni9SQkF0STdxVmJwcTF3eWh6N2tZeTJUNVAyLWsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1JCQXRJN3FWYnBxMXd5aHo3a1l5MlQ1UDItay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDYvUkJBdEk3cVZicHEx
d3loejdrWXkyVDVQMi1rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALNEfjW1Zeyfk3q6rxDRDbPSm6nzz0F+PR2fy7YUgJ5aPEYeNJkHy3MmuwkZ
Lst5djbzvEQpXhJcK/iPMipNskEloLJs1Vbt0toW/G0DNAsunkVVDBHjkaA7P7hB
Dc0I0YC0p/pSPd4KjdYBGw8MJQG4NudXnmTXeFTe05wNYlY51NiIcOJpbTk4XOjw
4/lf19QNGU7QyWGyzUnNHlzImZMhGR24eBTKX6hTJjWDVxYlxyP9c8iWlpZEqVNW
xZcFGvuX0DLcwguPkJIJHl5NkIuNvPyNwMYJQBYIAop4l4Y70hNKMxis74booCl9
Fwk0sXIKrxEPoGsYeZSX2iw/p5o=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:09 2026 by rpki-client