This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
File:                     1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json)
Hash identifier:          y9ubgfw92tt1HAVWMejfmhzJ6Ua1R796UrrHTMunpNA=
Subject key identifier:   8F:13:EA:C7:F6:E6:A6:1E:21:ED:1B:B0:C5:2F:99:A4:64:08:0C:4C
Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Certificate issuer:       /CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Certificate serial:       69CBEF337A7168A7FDB5BC498166D12BA211968F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 03:40:57 +0000
Manifest this update:     Sun 25 Jan 2026 03:35:57 +0000
Manifest next update:     Mon 26 Jan 2026 07:21:57 +0000
Files and hashes:         1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: gx++OCfu1PSq+4IqYcLmTsF7tJdr5QR4/PQ+oZSNnI0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cb:ef:33:7a:71:68:a7:fd:b5:bc:49:81:66:d1:2b:a2:11:96:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
        Validity
            Not Before: Jan 25 03:35:57 2026 GMT
            Not After : Jan 26 07:21:57 2026 GMT
        Subject: CN=8F13EAC7F6E6A61E21ED1BB0C52F99A464080C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:00:2e:6c:db:a9:ea:4a:75:9a:e8:90:da:
                    20:51:08:58:31:ed:d5:db:66:06:fc:89:92:d1:31:
                    0d:98:e0:5a:8b:12:ad:7a:95:db:d1:ec:71:51:6b:
                    6d:89:ed:b6:ec:2d:8e:b1:54:d6:63:f2:ec:78:37:
                    d0:cf:17:a3:92:82:73:ce:b6:97:c7:ad:ed:ea:ea:
                    7b:1b:a0:de:91:65:b0:c9:a3:f4:d0:23:2f:43:bd:
                    48:a4:30:29:40:c0:cc:5f:40:4b:ee:e5:7c:10:42:
                    b1:2c:2a:1e:9b:87:81:72:7b:80:75:b4:d9:bd:2a:
                    82:8c:33:11:13:cd:1c:cc:4e:37:46:e5:3d:2a:0c:
                    bc:37:9a:21:5e:ba:ab:7d:c7:8b:af:1a:dc:22:db:
                    b9:ad:f8:9d:f7:10:0d:2d:e8:2b:8a:b7:2c:6c:ef:
                    37:7e:0e:4e:0c:8a:40:5c:9c:9b:02:ec:6f:8a:91:
                    f6:29:94:ea:ab:ea:37:a4:db:52:ba:06:69:76:d9:
                    63:4e:46:20:02:07:6b:c0:7b:89:82:40:1b:ad:66:
                    de:e0:a9:97:47:07:26:58:03:1d:dc:df:06:12:53:
                    cd:f3:58:05:28:7d:06:2b:8d:39:54:36:81:03:26:
                    63:eb:67:38:0c:b6:71:82:a2:93:b8:94:99:82:63:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:EA:C7:F6:E6:A6:1E:21:ED:1B:B0:C5:2F:99:A4:64:08:0C:4C
            X509v3 Authority Key Identifier:
                keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:24:01:92:df:c5:87:06:1f:d6:f7:ea:b6:f6:1e:7c:6a:
         0d:c0:c0:1c:a6:cd:ac:85:17:76:08:00:c2:8b:89:24:c8:22:
         92:77:dd:2c:0e:bf:4d:4c:20:1d:cc:36:d7:00:c9:0c:2d:17:
         d5:0d:33:5f:3b:9d:e6:f0:d0:5e:b8:54:a0:b9:f1:44:d0:7a:
         70:cc:13:d0:1b:3b:71:b1:52:41:c3:29:19:8e:fa:00:87:2a:
         58:8a:d4:92:9b:b7:7d:e4:7b:8d:64:02:32:11:e0:1e:ef:ed:
         a3:2e:0f:10:03:a3:72:99:05:08:ef:fc:3f:1e:06:fc:53:e8:
         ca:9a:be:e6:96:42:e7:5b:48:7d:1a:13:8e:25:f2:48:72:75:
         87:df:43:ee:d9:0c:d6:7c:31:ec:28:8a:a7:90:6b:e1:a3:96:
         f2:4b:41:16:fa:4b:ef:53:24:b1:a5:9d:92:8b:bf:41:b9:22:
         17:23:44:a2:f3:8b:68:61:5a:18:90:b1:56:44:ab:2c:51:96:
         1b:5b:35:db:f6:af:3a:8e:09:73:3b:ac:d2:7b:69:af:7f:1e:
         25:48:3d:ca:a7:b3:bb:81:18:88:91:25:a6:86:38:e2:4f:4e:
         8f:0d:1a:1d:2b:ff:7b:2f:2f:ca:d1:ed:bc:4f:b7:8f:88:e9:
         41:ec:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:43 2026 by rpki-client