This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
File:                     UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft (raw, json)
Hash identifier:          zS4VLQwBX+tGUCYu6/Zp75HrGPEWm23K5WFX258+uFs=
Subject key identifier:   0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
Authority key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Certificate issuer:       /CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Certificate serial:       1D73
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
Manifest number:          1D73
Signing time:             Sun 25 Jan 2026 01:58:31 +0000
Manifest this update:     Sun 25 Jan 2026 01:58:31 +0000
Manifest next update:     Sun 25 Jan 2026 07:58:31 +0000
Files and hashes:         1: UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl (hash: MihpqtBi5JiA7rWwUHyUBraI6vheaMwEd42MoE3hbnU=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 06:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7539 (0x1d73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
        Validity
            Not Before: Jan 25 01:58:31 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=0E112DBB61710264884663A55999074BE9DFED12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:76:61:d1:03:2b:e3:f6:0c:ce:c3:a5:bf:
                    e0:89:6c:50:37:41:5d:34:7f:a1:ea:ba:9a:de:a9:
                    00:a6:09:28:c9:59:2c:fd:3e:26:2c:7d:1c:e1:9e:
                    71:d2:1e:9e:da:0f:52:76:7a:ec:d3:9a:08:3d:17:
                    2e:da:e0:b2:3b:da:ef:5b:a8:d5:09:db:32:e7:c7:
                    f2:26:66:b0:2a:53:a6:aa:3c:f8:4a:dd:72:f1:e1:
                    31:7e:b0:8b:a1:9f:af:27:20:29:8c:af:cb:61:06:
                    5c:52:f2:8f:c5:fe:ef:38:7f:46:44:2e:db:21:88:
                    6d:d5:9e:7b:4a:2e:94:16:57:c4:fb:67:c3:3c:60:
                    c8:05:00:92:7a:db:84:ec:2b:01:25:68:66:a6:76:
                    73:52:41:e7:3c:80:f7:9e:ce:75:93:f3:c8:50:b8:
                    fa:17:32:06:fe:31:4e:55:f4:0e:57:ff:f8:a5:a5:
                    9a:54:67:dd:ee:1d:e5:06:42:12:23:a0:8f:a6:16:
                    d1:4d:60:62:64:e3:63:a7:b6:91:dd:bd:3e:36:60:
                    bf:fb:44:c7:56:6c:a9:28:81:8f:5c:b1:e8:40:62:
                    b2:0d:3d:77:f1:8a:84:04:d3:88:33:20:21:45:db:
                    d5:d5:68:68:09:ea:58:5d:16:ab:27:6a:0f:ad:f0:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
            X509v3 Authority Key Identifier:
                keyid:50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b9:b6:3e:82:1a:b0:d3:98:7d:ed:cc:b5:58:25:7e:7f:d2:
         f3:35:a4:da:4c:43:3b:84:b3:03:f1:6b:2e:43:77:6a:46:c4:
         22:46:c0:5a:78:1f:22:b3:4c:96:52:42:17:ec:1e:0d:49:23:
         fc:ff:c3:46:70:17:a7:7b:df:be:59:7f:08:40:92:d7:43:90:
         33:ab:ce:12:dd:e2:45:0d:f1:9f:55:80:f2:2a:bc:4a:c7:5d:
         a3:ba:05:95:f7:09:a8:8c:92:1a:82:a3:1b:9b:d5:6b:5e:f2:
         0f:f3:22:41:1a:cf:02:ff:38:5d:fa:e3:c7:33:bb:9b:34:06:
         33:53:e5:33:84:29:e6:63:0e:b5:5d:a8:47:a6:77:54:78:1e:
         31:6e:9b:ba:53:a5:33:8c:eb:2f:98:9e:1a:70:3d:9a:ca:4a:
         5e:67:bc:c8:4e:ba:0b:9e:e9:55:f5:c5:f7:66:bc:b5:4e:88:
         2b:41:c0:3a:bd:c6:0d:9c:da:52:b1:00:be:2c:95:71:18:77:
         1a:c4:f4:88:ec:dd:87:8d:53:1e:fe:a9:c5:a0:45:85:3f:f8:
         00:7d:3b:05:30:94:24:60:cd:9b:5e:b1:4b:f7:12:e4:34:fa:
         77:c8:c4:53:07:1d:a8:8f:4f:18:1e:c6:4a:ac:87:04:42:5a:
         cd:e4:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:40 2026 by rpki-client