This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
File:                     l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft (raw, json)
Hash identifier:          LC202UZ7/7ie3sEpnANnqywwKNS1PHdoIFF7hwWIbz8=
Subject key identifier:   2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34
Authority key identifier: 97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15
Certificate issuer:       /CN=974591FE6CE9D9B1D7338743509FD4920BA15715
Certificate serial:       030F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
Manifest number:          030F
Signing time:             Sun 07 Dec 2025 01:46:03 +0000
Manifest this update:     Sun 07 Dec 2025 01:46:03 +0000
Manifest next update:     Sun 07 Dec 2025 07:46:03 +0000
Files and hashes:         1: l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl (hash: ZaD9eoynU2yA7Z9tfd/eN9liiJUj9cNnx3JH080Wyq0=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 07:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974591FE6CE9D9B1D7338743509FD4920BA15715
        Validity
            Not Before: Dec  7 01:46:03 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=2EC1A35BE4D5AD0A5782E218CDA2B72EB5D49634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:45:27:cd:1f:be:d0:60:27:8d:73:ea:12:
                    e7:5a:68:6b:ed:15:49:34:f6:20:5b:0e:e1:7a:7a:
                    a6:ce:9e:d8:08:32:51:26:de:e7:a1:54:80:33:9a:
                    0e:68:4d:4a:64:82:5c:e8:79:1d:18:91:77:c7:f8:
                    61:6f:b4:96:0a:42:85:72:a2:72:d5:91:02:1d:37:
                    21:45:f2:93:68:aa:e6:d2:e7:68:a2:2a:c1:ae:2d:
                    c3:9d:2a:fb:46:04:71:c6:44:87:31:d7:ab:08:0b:
                    50:b8:62:fa:80:b2:2c:6b:66:3f:8a:78:6a:40:b3:
                    63:59:1b:a7:04:a1:d6:ff:fc:43:5a:2a:10:63:94:
                    08:d0:3a:fa:c5:d0:c5:7f:3d:c2:b8:5c:2e:52:eb:
                    bd:91:2d:51:9f:f4:97:28:3a:44:8d:c1:a6:2a:f5:
                    39:d9:5e:8b:63:39:b9:09:05:50:c5:34:8f:44:86:
                    3c:b2:08:c9:f0:f3:99:2d:b1:35:81:9b:38:0c:74:
                    2e:56:57:bd:dc:70:60:4f:9d:3a:ec:8e:a9:bb:91:
                    3d:f0:fc:d8:c7:54:a2:44:3c:f8:9e:c1:64:a3:67:
                    8a:6b:a2:53:1e:79:38:3b:c3:12:58:e5:de:34:5c:
                    8f:3b:f7:37:23:86:70:0f:ed:f9:e1:64:ff:b1:07:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34
            X509v3 Authority Key Identifier:
                keyid:97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:34:f2:ef:ab:f1:72:c7:68:c7:d7:c5:f8:6e:d9:93:4d:bf:
         af:de:1d:b0:5f:6e:7e:87:bc:9d:e5:76:34:6e:a3:df:73:9e:
         12:74:a2:37:06:1f:0c:32:09:33:b2:d2:bb:a4:07:86:7a:98:
         0c:67:be:f6:f8:27:86:ba:9a:65:3a:d2:02:fb:15:06:b0:83:
         ff:87:ca:39:38:1b:f3:62:d7:e6:a5:c8:69:ad:16:47:b0:3c:
         7c:17:82:16:8e:a0:b2:af:91:ec:23:f6:6a:b9:f7:8e:44:aa:
         a0:87:de:91:c2:64:eb:87:55:fc:3f:6e:97:f7:22:d0:2b:8d:
         90:e3:0c:c9:d3:82:0d:d5:d5:f9:31:69:03:80:83:bd:88:03:
         96:91:ad:16:73:ab:a9:4a:79:f5:51:c6:51:a0:73:17:88:7c:
         6e:87:43:44:5f:0f:a2:05:fd:2a:42:19:c3:12:9c:97:72:f5:
         50:2a:63:67:7b:e7:d9:63:43:bd:ad:3c:df:c1:13:a3:66:4e:
         ae:5a:36:e7:09:4e:6d:3a:93:29:19:43:cb:f5:7b:9e:b2:93:
         76:11:bd:ed:e6:5f:b8:a5:2a:ef:d8:cc:f3:09:43:69:71:2a:
         1e:2d:8d:3a:8b:6a:57:1e:2b:d5:af:d1:71:9f:05:eb:3f:77:
         af:22:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:56 2025 by rpki-client