This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
File:                     JAYub_eOGiv-CxWIf_OE9ltu6qA.mft (raw, json)
Hash identifier:          25RUGPkoa7jTNH23CIcu01e9PM6uSR4yZTdkkr8eChM=
Subject key identifier:   BC:5F:49:66:27:55:0A:E7:E2:5B:97:7A:3B:0C:0F:7B:A9:AE:70:94
Authority key identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
Certificate issuer:       /CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0
Certificate serial:       2AB1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
Manifest number:          2AB1
Signing time:             Mon 12 Jan 2026 03:58:26 +0000
Manifest this update:     Mon 12 Jan 2026 03:58:26 +0000
Manifest next update:     Mon 12 Jan 2026 09:58:26 +0000
Files and hashes:         1: JAYub_eOGiv-CxWIf_OE9ltu6qA.crl (hash: smF+gGRaz/IXdQre8/Q23PVsGxRT3yHLrIKduI/UzvM=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 07:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10929 (0x2ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0
        Validity
            Not Before: Jan 12 03:58:26 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=BC5F496627550AE7E25B977A3B0C0F7BA9AE7094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:26:c4:fd:95:f1:01:04:55:04:6c:0c:95:
                    96:0e:28:f0:5d:71:21:70:42:36:d2:7a:94:cc:d7:
                    f2:55:63:17:97:98:97:b8:4c:67:3d:8e:7c:31:f9:
                    a6:ab:69:37:fa:d7:12:f2:e4:cc:fd:8f:34:8d:46:
                    c8:23:51:ca:e8:0f:26:1d:e4:00:98:9b:75:fc:bb:
                    6d:14:1a:4c:7e:f9:0c:b9:44:72:e2:6a:b4:8e:5e:
                    91:6c:e8:0a:4c:04:18:e1:33:a8:41:71:cc:17:28:
                    29:53:a3:8d:73:3e:c4:13:15:89:10:77:2b:8f:7c:
                    cc:28:97:04:c8:ef:8e:b2:8a:f4:8e:bf:9f:c8:c5:
                    d7:c6:c7:57:c2:2b:fd:ee:81:fe:92:4e:06:fe:ff:
                    87:79:ed:6a:65:52:96:6e:df:6a:37:07:83:32:fc:
                    e2:ec:7f:fb:25:d7:02:39:ae:74:56:20:4d:ae:01:
                    c6:f6:db:6c:d9:0a:b9:a5:21:f9:85:f1:83:a2:bb:
                    81:ec:18:d5:e5:16:94:5b:b0:55:f5:40:6e:17:9d:
                    cd:e9:37:59:43:c6:51:d7:db:a5:aa:95:a6:98:98:
                    c1:4c:3e:a3:c1:6c:f0:0f:51:85:a8:2e:11:9c:6e:
                    e0:09:5a:c0:d0:5e:b1:bc:e2:b3:63:28:9f:3d:dc:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:49:66:27:55:0A:E7:E2:5B:97:7A:3B:0C:0F:7B:A9:AE:70:94
            X509v3 Authority Key Identifier:
                keyid:24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:85:f2:fb:d2:1c:84:1e:f2:97:e8:ea:f8:e5:f5:71:ec:21:
         9f:35:ab:23:33:98:10:48:f2:86:de:9a:bb:9a:11:e6:49:41:
         85:45:83:8b:bd:f8:3b:02:0f:ce:06:b9:22:98:02:d1:8d:23:
         22:32:fa:c5:a1:91:b6:c3:9f:18:5d:04:03:c0:99:24:88:50:
         a3:52:14:ae:99:d8:af:54:be:2d:b0:44:8c:59:a4:74:88:d3:
         88:70:22:00:eb:63:d9:6e:d9:c8:34:db:e5:7f:84:1c:2d:51:
         81:f0:d9:a1:de:ef:19:e7:c6:bf:2c:7d:c3:23:5d:1b:62:a0:
         b2:eb:24:a5:fd:7b:f6:22:e0:79:76:27:34:d4:8a:67:71:e1:
         b9:5e:df:fc:14:1c:63:88:4e:e0:a5:70:2c:15:d3:18:25:22:
         11:da:d9:84:14:02:34:99:3e:f4:12:77:ab:ff:07:78:42:ab:
         ca:40:12:02:32:c4:a5:2b:f1:3d:0f:c4:de:ee:cf:c6:36:5e:
         f6:fe:10:f8:74:0f:a4:f8:c8:8c:e2:e5:d3:ec:c5:06:37:1b:
         76:79:8a:1f:ea:2a:0d:69:d3:87:01:dd:a4:d6:06:f5:93:9a:
         d0:be:14:6a:5e:75:a5:cb:7c:f0:09:ba:2c:82:45:8a:c7:c2:
         23:df:cb:19
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICKrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw
NjJFNkZGNzhFMUEyQkZFMEIxNTg4N0ZGMzg0RjY1QjZFRUFBMDAeFw0yNjAxMTIw
MzU4MjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJDNUY0OTY2Mjc1NTBB
RTdFMjVCOTc3QTNCMEMwRjdCQTlBRTcwOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7FCbE/ZXxAQRVBGwMlZYOKPBdcSFwQjbSepTM1/JVYxeXmJe4
TGc9jnwx+aaraTf61xLy5Mz9jzSNRsgjUcroDyYd5ACYm3X8u20UGkx++Qy5RHLi
arSOXpFs6ApMBBjhM6hBccwXKClTo41zPsQTFYkQdyuPfMwolwTI746yivSOv5/I
xdfGx1fCK/3ugf6STgb+/4d57WplUpZu32o3B4My/OLsf/sl1wI5rnRWIE2uAcb2
22zZCrmlIfmF8YOiu4HsGNXlFpRbsFX1QG4Xnc3pN1lDxlHX26WqlaaYmMFMPqPB
bPAPUYWoLhGcbuAJWsDQXrG84rNjKJ893OcZAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUvF9JZidVCufiW5d6OwwPe6mucJQwHwYDVR0jBBgwFoAUJAYub/eOGiv+CxWI
f/OE9ltu6qAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODAv
SkFZdWJfZU9HaXYtQ3hXSWZfT0U5bHR1NnFBLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9KQVl1Yl9lT0dpdi1DeFdJZl9PRTlsdHU2cUEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC84MC9KQVl1Yl9lT0dpdi1DeFdJ
Zl9PRTlsdHU2cUEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
JoXy+9IchB7yl+jq+OX1cewhnzWrIzOYEEjyht6au5oR5klBhUWDi734OwIPzga5
IpgC0Y0jIjL6xaGRtsOfGF0EA8CZJIhQo1IUrpnYr1S+LbBEjFmkdIjTiHAiAOtj
2W7ZyDTb5X+EHC1RgfDZod7vGefGvyx9wyNdG2Kgsuskpf179iLgeXYnNNSKZ3Hh
uV7f/BQcY4hO4KVwLBXTGCUiEdrZhBQCNJk+9BJ3q/8HeEKrykASAjLEpSvxPQ/E
3u7PxjZe9v4Q+HQPpPjIjOLl0+zFBjcbdnmKH+oqDWnThwHdpNYG9ZOa0L4Ual51
pct88Am6LIJFisfCI9/LGQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 06:29:51 2026 by rpki-client