This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
File:                     CB0214A5C404D6F840433B120CACBB5B8C59E613.mft (raw, json)
Hash identifier:          YL9UehrAOCC7ilpq8DtpKY3N+I07pU9Hr/UA6kL4+eg=
Subject key identifier:   98:1A:9B:84:1D:F4:9D:25:F1:68:1D:4A:73:9C:4F:AB:9E:C9:2E:BC
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       28C33DE63D01C6741FE97B9A3AA4E2E34D37C2D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
Manifest number:          F3
Signing time:             Sat 24 Jan 2026 16:00:57 +0000
Manifest this update:     Sat 24 Jan 2026 15:55:57 +0000
Manifest next update:     Sun 25 Jan 2026 16:37:57 +0000
Files and hashes:         1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer (hash: FhQekzTy7C6OxtpsQvxtzjCO7KZ8y0mP+yndGsKEkcI=)
                          2: F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer (hash: 1qt+cCCuDTlBXzYb1bgFUCarAsIMkBcy8I1HtsFXcZk=)
                          3: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer (hash: YVREQUBkqSV8hbreZJSrO3JHQvND6MNTUJNavjT7H9I=)
                          4: D850080623F8BDB006D1C2A5705B45346A8CA661.cer (hash: 1hqS2reNU6w6jabkJ89V24C370HZiqo537RLLWU8IjY=)
                          5: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer (hash: NrpIcF6toAp1eMOj5hKOZthRQlcBgcBtKoUAveRUJ7w=)
                          6: AE296545389D949B88D36F0642F93E9C8AD9E79B.cer (hash: +aXRxKT2UQCZk8yDJCfMgAAkz6xGswU98zXh6gGrUKg=)
                          7: BE564B2EFF08B30078A1960732464840B104EF35.cer (hash: QclbJTAbTChtpBmRHTORftsiuk21QB22Cp4nZcltPgg=)
                          8: 12292A8CE4276ED3C82E79BA376F7A0363A06716.cer (hash: Y45dw+Ui4l9/riPoo4kYKLvAXGqwM0C0pdrhrzW25PA=)
                          9: D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer (hash: yaLbEp/Ox4j4gvJPdR9xu/NP9n1/yj4LD0OxDLQd6M8=)
                          10: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer (hash: ckmpKPzXuGym5mAuNNOL4egrUQ55CxGBmnQxt9ryPFs=)
                          11: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer (hash: O5Aqpeq/kZcfHJ2H0u+k2L3bZ42gmrdlPUk2s6js8js=)
                          12: C47353D21D668838E2523770D8C0FD078215052D.cer (hash: oCx9k04rIQgohGIWZtJ6Rrco/ozT/+Os4ERvm23+OJc=)
                          13: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer (hash: 1AaS6DqbRJFC0vtmE7vWy2PJmLa8/2N7Zg8/TCx/rgc=)
                          14: E9EED0187DAE9147812C7B516912D58FD976B964.cer (hash: KUS9LtzDrMOcNhZRLX4DYOLpBzaXv5N5PsPJyxrK1I4=)
                          15: A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer (hash: 0vGkmaTdF/cPG2QQ5aviW+cPg3IqrCLaFoM15NkMuJA=)
                          16: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer (hash: MrCLG/KLDuK7N7aUbP0PVGdbBlDzseLqha7MU7CIhjw=)
                          17: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer (hash: wteQerrrch7JWyMq6kXOLw8rQY8O02xVqBD1/zyV69E=)
                          18: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer (hash: OTqmalJYnGJ1DvTbxRIarDwZkd61tTpbUOcIuEaKNCc=)
                          19: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer (hash: MAtb9XjPHB5wojgWV3idOD+myk7+izc1kGjzNkP1wRM=)
                          20: 1E52A9C4B7583314611765C8F6A599F283954B3C.cer (hash: WydUxs3SJNtQaRqZf83ZZ1wTRh68zDdJw6QGcpZFj4g=)
                          21: E3993DB092F827CDCF711046B493411A00A72701.cer (hash: 2qPLi1U2TT62RF34MIsQW/GPEV2zuHtJkZFaaQ4Bvbs=)
                          22: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer (hash: VGmIVfwd1QqlPSzVPZYBBaVwijXnoGY70v4WB9xMBVI=)
                          23: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer (hash: XNdbMO/qJ0ItrhogJqEeaWhMfM45eo5FJcgzxhcLcN4=)
                          24: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer (hash: G77qGupkauIQrFBZXdfNdvKoU0Rr9B8gDuOaNv3JueU=)
                          25: AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer (hash: UQrVv+Fmb4MMvVnnHfddObJ+G/bIhYUpeR0dC8oRPWA=)
                          26: CB0214A5C404D6F840433B120CACBB5B8C59E613.crl (hash: yaQE2CWbPZTfaJgDi0ZEAZ9+bO2QJRfJWkuPtUvbW0w=)
                          27: 855381EC93CF009732540F616E4905D544D838C8.cer (hash: 9ZqWFHNj5yESQReKNEa/c29xnt6bqF7yJ+Gd9oV4dqU=)
                          28: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer (hash: PItaArSVk6NQh/k+8ZfYk4laxh0ev3jf4U9M4r425Yg=)
                          29: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer (hash: l5Fh8JRsthgDgewgC41E75W4ZViwpAqqnNTQLh3BoD8=)
                          30: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer (hash: tMDDxvN5y/rRtdbqBnWdBeOYsc0y7N+j0k/Rz89Qv/4=)
                          31: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer (hash: vczGN+X9UC4AtAh2Y2kCLy66ylIZtx3/NUmC2qe0cXs=)
                          32: 97B5B7009501E4718F06B9B36D215369C958203F.cer (hash: oI1LEFu91SulHVjvAecB0WG+VtEvHu9KeaCtgF6QgGA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c3:3d:e6:3d:01:c6:74:1f:e9:7b:9a:3a:a4:e2:e3:4d:37:c2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Jan 24 15:55:57 2026 GMT
            Not After : Jan 25 16:37:57 2026 GMT
        Subject: CN=981A9B841DF49D25F1681D4A739C4FAB9EC92EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:03:08:8a:28:5d:67:cd:25:4e:80:2f:f5:
                    ac:79:f6:2f:ff:36:9b:ed:bb:17:ac:aa:1e:0b:ca:
                    27:0b:30:40:8f:5a:f4:56:e3:4b:db:a4:41:88:d0:
                    04:0b:45:c6:f0:c3:64:41:7b:5d:b5:3e:6e:40:be:
                    3d:71:fa:81:52:40:9f:8e:f0:75:8d:4f:23:db:f1:
                    e0:be:e1:f2:64:1f:cf:dc:09:8d:e0:9c:58:78:33:
                    22:55:be:66:88:c8:f4:82:c6:36:84:98:a9:38:c7:
                    87:f6:3c:5a:1c:0f:67:05:dd:a0:4b:9e:4c:09:5c:
                    e0:4e:21:dc:fb:8c:e2:7d:2b:e5:04:09:c3:8f:07:
                    d4:8e:4e:7d:1d:4d:5e:e8:c1:1a:b9:d5:da:7c:92:
                    9d:fd:7e:81:6f:2b:72:d8:ac:84:05:48:02:cc:ac:
                    52:1d:ca:c8:56:a6:96:2f:c7:66:e0:c5:ac:ed:3f:
                    15:6e:a7:8c:4d:e0:98:06:9a:62:7d:be:c7:0f:2a:
                    c7:80:af:87:28:a2:fc:19:38:86:e8:f8:83:3b:c4:
                    82:b7:ed:3a:75:93:35:e4:c1:9d:2c:ad:e6:0d:4d:
                    b5:0c:1a:a0:ec:a2:0d:7e:b2:03:e8:ad:56:50:fb:
                    fb:57:d1:dd:ef:4e:4e:22:3e:0e:9b:20:2f:80:bf:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1A:9B:84:1D:F4:9D:25:F1:68:1D:4A:73:9C:4F:AB:9E:C9:2E:BC
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bb:98:af:f7:9a:81:28:bf:9c:2a:fa:b1:4e:bf:cf:b6:1c:
         bf:24:bc:c5:96:61:51:49:95:ed:d5:42:c2:1c:4e:9c:34:fb:
         61:2b:03:e3:2e:80:86:fc:7c:e4:1a:45:3e:c9:f3:56:44:11:
         dc:e1:0b:83:fa:0a:1e:a2:a0:80:68:26:24:ff:75:f3:12:fd:
         46:2b:97:ab:fa:67:92:04:79:a2:a3:fb:d1:2b:b0:aa:2b:70:
         ec:86:37:34:d1:80:5c:25:7d:67:f2:64:93:4d:75:f6:91:40:
         14:49:0f:68:6d:92:99:60:91:80:3f:05:4c:56:01:b5:18:0f:
         c8:10:ab:b1:cb:57:b5:d2:1d:d5:f3:45:cf:69:12:17:2d:53:
         30:0c:a5:3e:58:a9:95:7f:f3:a1:4a:75:f0:ea:89:63:6a:b7:
         2c:00:48:43:b6:79:9a:e3:0b:c1:fc:4a:41:c4:0e:de:4b:7d:
         f8:ce:54:b3:6a:4a:b5:53:53:35:d1:16:5b:80:74:8b:15:77:
         ed:47:af:67:a8:18:99:48:fc:3d:97:7f:15:90:f8:fe:b9:1b:
         af:47:03:e1:89:db:24:cf:1b:09:4e:ca:fb:e2:8e:7f:5e:04:
         7f:a8:12:a1:44:53:58:cf:71:51:9a:85:36:b7:97:bb:c8:ff:
         55:2e:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----