This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
File:                     056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft (raw, json)
Hash identifier:          4fZjnkaIPjaIjGCsDYa+eIBHoxE8hFhZEURwmH2rwwM=
Subject key identifier:   D8:B9:D0:E6:57:7F:B9:4B:FE:C4:50:E9:07:CE:5C:55:73:8C:A2:E0
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       509266D4172244A645044900C90BA6815047C166
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
Manifest number:          08
Signing time:             Sat 24 Jan 2026 14:30:57 +0000
Manifest this update:     Sat 24 Jan 2026 14:25:57 +0000
Manifest next update:     Sun 25 Jan 2026 17:48:57 +0000
Files and hashes:         1: 3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa (hash: cR1QC3KffhOvNISYzseljtU/thjp7UdYL89Ej+QpRLg=)
                          2: 35392e38322e3133362e302f32312d3234203d3e203435313032.roa (hash: IqkUZ5luK9Yhi/2XfaVOwPeI4UW5zGTXPhH03zlIdvw=)
                          3: 34332e3235302e31322e302f32322d3234203d3e203337393633.roa (hash: Axcsdv7wuYSOx59KjF/tPBAkwJMdYEqYj5y+PZH9YcA=)
                          4: 35392e38322e3133362e302f32312d3234203d3e203337393633.roa (hash: nvrBbCBZxiKHH4/w06YQmWfwNEM5VV1VM8cMrZ9eZm4=)
                          5: 3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa (hash: PVj8AKXZGpqgnyXN3N+0GWqD3qDlP6MOzJ8PFhiOdb4=)
                          6: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl (hash: 7ZgEJQbuwsXSevdoHxdiDt7aRhgCTFDxAuH7DwbcD38=)
                          7: 34352e3131322e3232302e302f32322d3234203d3e203337393633.roa (hash: O50RoXkWuwqIp3tU4cqtQBbuC+H8D0RovNcoO+GmWt4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:92:66:d4:17:22:44:a6:45:04:49:00:c9:0b:a6:81:50:47:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Jan 24 14:25:57 2026 GMT
            Not After : Jan 25 17:48:57 2026 GMT
        Subject: CN=D8B9D0E6577FB94BFEC450E907CE5C55738CA2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:69:3a:ab:56:58:5b:a5:25:04:21:d7:8f:
                    b3:4e:28:3b:a2:07:82:73:7f:f4:93:bf:8a:d1:0c:
                    de:63:d6:4d:a7:27:80:6a:28:1b:7b:6e:89:0f:70:
                    43:c8:0a:fa:d4:61:50:e1:98:42:6e:e0:31:78:73:
                    84:5d:c6:7a:bf:2c:16:7e:01:98:13:8d:38:df:c5:
                    2a:11:67:b2:2b:0b:a7:80:b8:8e:f6:37:10:3b:9a:
                    ba:2e:6b:36:56:31:2a:fd:b3:f1:4b:6f:32:24:64:
                    65:64:e4:4f:73:2b:22:b2:d8:1e:fe:99:e1:01:f6:
                    1f:0a:1b:44:24:d9:b4:ba:06:d6:45:7d:5b:09:54:
                    fb:24:1e:bf:22:47:94:84:96:df:f6:cf:3f:73:05:
                    32:5d:9d:80:8a:3c:bb:91:e0:3d:61:aa:8f:93:e0:
                    ae:0c:fe:0d:e0:06:1a:19:91:ab:58:e9:93:5d:7e:
                    82:af:f8:f2:72:ae:01:ab:31:d6:c6:01:95:bf:64:
                    3d:c0:28:cb:2b:67:54:1d:6e:73:0e:06:90:c0:a4:
                    de:a9:b0:8c:86:b0:c9:54:91:8b:d4:56:dd:05:0f:
                    07:92:29:50:a1:d3:a0:76:38:34:4e:40:53:43:73:
                    21:2b:e2:80:2e:a6:76:c6:bc:2c:43:12:da:b6:0c:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B9:D0:E6:57:7F:B9:4B:FE:C4:50:E9:07:CE:5C:55:73:8C:A2:E0
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:13:66:d3:49:5f:48:43:68:2c:4d:e3:4f:01:1d:e9:98:
         86:22:29:ef:6d:a8:40:04:77:d9:50:60:b9:7e:5d:ae:54:54:
         bc:70:5b:e4:ad:b4:6a:ef:ab:6d:76:76:bd:11:53:db:8d:98:
         a6:38:e9:6e:f8:d7:84:01:42:81:5b:4c:36:fd:c4:28:82:fd:
         09:4f:0b:00:94:9b:df:67:9f:ba:18:66:cf:c2:22:34:6e:7d:
         91:e5:1e:7a:1d:ff:88:c6:22:d8:91:00:20:a5:37:da:3c:e8:
         1c:7a:48:d3:b2:9a:37:20:b8:70:ed:86:4f:e9:ad:ca:b8:f4:
         e6:0d:2b:2a:96:61:90:ef:4f:44:b5:2c:77:ac:65:b9:da:d5:
         77:bc:53:d5:73:a2:a6:6f:fd:1c:bf:a7:31:b3:27:42:91:04:
         cd:43:c9:ac:76:82:34:0a:ae:83:99:da:d4:e9:db:e8:ca:ff:
         a6:7b:7d:30:96:fa:7e:fe:53:e6:5a:cd:15:6d:4c:34:97:dc:
         12:31:be:f2:4b:09:98:6b:03:bd:ba:54:20:ba:94:fc:8d:48:
         e9:e8:39:3c:96:e3:b3:21:be:8d:7c:29:2a:8a:be:a9:83:d6:
         08:af:cf:74:06:b8:d7:72:1a:4f:5e:1c:6c:66:b9:80:e6:1e:
         31:5b:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:53 2026 by rpki-client