This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
File:                     46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json)
Hash identifier:          X54L7kQhzXnTdLgnn9RC/Dg89SAF5pGlajVwTWsqENQ=
Subject key identifier:   65:B4:69:9F:5A:09:2E:F8:55:4D:3F:9F:12:E6:06:EC:E9:95:05:2A
Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Certificate issuer:       /CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Certificate serial:       6998C501B36846D68F7DE2AE3B4FA8E2BAB7EF91
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
Manifest number:          08
Signing time:             Sat 24 Jan 2026 13:30:57 +0000
Manifest this update:     Sat 24 Jan 2026 13:25:57 +0000
Manifest next update:     Sun 25 Jan 2026 14:55:57 +0000
Files and hashes:         1: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=)
                          2: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=)
                          3: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=)
                          4: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=)
                          5: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: WaSYeC+E6Vn9UU7+ajLU3J7UCGetLkj75qkB+rqzUYo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 14:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:98:c5:01:b3:68:46:d6:8f:7d:e2:ae:3b:4f:a8:e2:ba:b7:ef:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
        Validity
            Not Before: Jan 24 13:25:57 2026 GMT
            Not After : Jan 25 14:55:57 2026 GMT
        Subject: CN=65B4699F5A092EF8554D3F9F12E606ECE995052A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:11:ed:22:8e:93:05:25:e3:f0:a9:19:84:
                    36:ef:40:6d:ed:8b:81:44:eb:99:de:ea:ba:8c:54:
                    63:6d:5d:2f:f4:b9:3d:1d:7b:f5:41:50:b7:cd:8a:
                    5e:6f:c5:94:7a:ea:8f:de:7e:90:42:89:4e:0e:79:
                    c1:54:c0:47:db:23:ed:0b:0a:9a:da:33:98:28:7e:
                    5c:0e:d3:fe:e5:e4:cf:ad:2f:16:45:f7:67:a8:e7:
                    2a:f9:0d:2a:0a:9b:4a:dd:38:c2:26:d5:fc:bf:89:
                    fe:d8:e6:f4:29:13:96:19:48:8c:60:97:82:b4:44:
                    27:50:8b:20:35:53:15:d6:57:bd:5f:0a:95:97:e7:
                    23:d5:c2:79:48:f4:44:cb:3e:0f:57:2b:83:7c:04:
                    24:5b:cb:29:d8:d6:05:81:43:89:61:32:34:1c:0a:
                    95:4e:8b:75:89:6b:ca:dd:40:24:44:72:b3:b7:a3:
                    bd:e0:69:d6:cf:6e:37:e1:35:cb:41:1b:54:de:d0:
                    ad:2e:c9:a4:06:30:1b:63:f6:b2:11:2c:a8:e7:85:
                    4c:68:99:99:59:cd:c0:df:34:f2:ab:69:87:a0:4c:
                    11:2a:12:e5:59:18:c5:51:89:82:c1:99:ba:42:23:
                    7e:1d:a7:14:6c:94:dc:3f:d9:9f:10:d0:9b:6e:31:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:69:9F:5A:09:2E:F8:55:4D:3F:9F:12:E6:06:EC:E9:95:05:2A
            X509v3 Authority Key Identifier:
                keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:c2:50:24:2f:22:a9:6f:af:9c:9e:b6:a9:ea:5e:7c:89:
         80:9c:20:01:94:76:75:10:7e:8e:27:10:77:74:1f:d1:fd:fe:
         10:dd:fe:62:dd:3e:25:cb:cd:fc:58:b6:3f:03:45:13:fd:05:
         82:5d:a0:fe:9a:58:e6:95:9a:4b:5c:c6:93:17:0a:77:90:c8:
         d0:d8:2e:3a:ea:7d:b9:bd:81:f3:93:f7:54:e1:dd:d7:51:f8:
         14:47:48:46:2d:95:7b:11:b0:cf:76:ee:36:6f:a8:50:4f:94:
         1d:7d:38:c3:3a:94:9c:4d:7c:55:e0:ca:ae:46:2f:a6:d8:8e:
         b9:96:da:71:b9:f4:f6:26:4d:c8:d2:69:cb:8f:ee:5d:a0:c1:
         d7:a1:06:a5:23:2d:8b:bf:0e:b8:9a:e3:72:84:ba:89:6a:83:
         c2:50:79:f7:17:25:5c:f7:bc:60:a2:f9:44:47:97:b2:7f:22:
         6b:af:fd:33:3c:63:d2:08:89:0b:98:d0:01:84:b9:7e:ed:fa:
         36:eb:ff:9d:ad:f4:5a:a0:b8:9b:4b:ad:a2:31:d9:de:7a:7b:
         1c:2f:5f:bf:7f:3e:8d:3b:83:28:0c:39:a6:35:7f:63:7b:6b:
         94:60:17:7b:9a:47:ab:4f:48:a1:6f:21:e7:e2:48:40:3e:22:
         1e:c8:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:36:44 2026 by rpki-client