This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
File:                     8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json)
Hash identifier:          LQoJ4CrL7pwcQ8hAhmToZq06JDCsbcdtJlUlfXei1l8=
Subject key identifier:   1F:A2:64:EC:E6:7C:9F:19:33:8F:37:62:69:EE:00:AC:46:5A:90:17
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Certificate issuer:       /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial:       40BCF7B51EF506776A74991CFBB106DE03C01576
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 06:40:57 +0000
Manifest this update:     Sun 25 Jan 2026 06:35:57 +0000
Manifest next update:     Mon 26 Jan 2026 07:07:57 +0000
Files and hashes:         1: 3230322e36352e39362e302f32342d3234203d3e2034383038.roa (hash: XInuRiVmp2gchaX1GICHppoHhbgEn885ELkzy+trvsU=)
                          2: 3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa (hash: 1C/L6TcWpvNm22ZzgpqJuGe58/EqXsxE5aPKEEX53xA=)
                          3: 34332e3235342e3233302e302f32342d3234203d3e203435313130.roa (hash: NorobvWdGqodbBj8OyFKQCHfzKeN5Tjtw/VqDHOHG70=)
                          4: 3230322e35372e3230312e302f32342d3234203d3e2034383132.roa (hash: utdVCY4l0dcFIG/TVJVwiWA21IYNF1kd1eD/Vknn8vs=)
                          5: 3130332e3230312e3139332e302f32342d3234203d3e20313331333134.roa (hash: NTqsPXAjXp48oI3AI/C13TIn2Piu3xDHuu7t6RAetGc=)
                          6: 34332e3235342e3232392e302f32342d3234203d3e203435313130.roa (hash: hps40GthnEO7UU1qgDGV3g2kd4ewHW9K6snMzsnXMUw=)
                          7: 3130332e3230302e3232302e302f32322d3234203d3e203435313130.roa (hash: kzUThDj46vrC1FApvE33ujC68KuJ6SB7L3Mj3caB4S4=)
                          8: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: waE7PqIWlz4O+azGj0Vm29YPHFXFkdG0/szsg5H5Xpk=)
                          9: 3130332e3230312e3139322e302f32342d3234203d3e20313334373733.roa (hash: 6BLYddYeEeDqDU8fdzI0rnVzDC05vTqwdK+2yfGMwzA=)
                          10: 3230322e36352e39362e302f32342d3234203d3e2034383437.roa (hash: r6hYqYkKaLY2KUvN1UAoHdA/G53GRFVL962VLu1kVXw=)
                          11: 3230322e34372e3131302e302f32342d3234203d3e20313331333134.roa (hash: 7adlvrP3uQseRyYtxDXWA+mafTgc5oe8hKf0jnYmZ+k=)
                          12: 323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa (hash: Jp2XGNH52ssQ0bdikTWGuqpgPCbzux6iZDhsBMPzYMw=)
                          13: 3130332e3230312e3139332e302f32342d3234203d3e203137363232.roa (hash: 7ijKsPmNlgXx+WTxf4W4VN3Nq7WHyK2KRy4WnwP8l7o=)
                          14: 3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa (hash: OM/Zbo4+rhmJKkNEv9SMrBBMuzephsrrlzSkkgmexNE=)
                          15: 3130332e3230302e3232302e302f32322d3234203d3e2034383132.roa (hash: siVNgfCDj6bvBI1m5sUrrPq9lO+mtUIABZ24C9DCFF0=)
                          16: 3131312e3131382e3230302e302f32342d3234203d3e203435313130.roa (hash: 7UiV6DH4n2sZpsx+39CMi75Cc+wLwjEg9xmZoNvX3OQ=)
                          17: 323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa (hash: P2kJYoqRoYD0SqfvYjbkoouF8EZfEcslMZdxFkbZVa0=)
                          18: 34332e3235342e3232382e302f32342d3234203d3e203435313130.roa (hash: FXoD21RBqOqwuywgeejLde35DBrBDAnRi0f85zG0xj0=)
                          19: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383038.roa (hash: k4vFlUdiMCS0bd4s8LdyWoletvKxAr290jb6WY/LSgs=)
                          20: 323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa (hash: QaWug+cNDDzS9dvHPNuT1ZuZWisdg7F8igJGbDTVhns=)
                          21: 3230322e34372e3131302e302f32342d3234203d3e2034383132.roa (hash: 9s3ic0lfpCLrK4v9PnYYThNn4W+qc6cqILtlqEH+bh8=)
                          22: 323430333a396230303a363030303a3a2f34382d3438203d3e203435313130.roa (hash: ofTONHQ16mGQgbJs1sloxLXx4/7TSorjhpO9rnIwkh8=)
                          23: 3230322e36352e39362e302f32342d3234203d3e20313331333134.roa (hash: cb/Gqb6qtrEFBWMmIIpCS2l1uWPq+vkVShzM0pl28qY=)
                          24: 3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa (hash: hGhV4E3aYHsMwtwfUvLKZMNlkn0O1oh3hS56LmlwRss=)
                          25: 34332e3235342e3232382e302f32322d3234203d3e203435313130.roa (hash: xkTXCqdqeVI+Xrgo9PUO1HTTi3bx7XtcQJ8tsJy96KQ=)
                          26: 3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa (hash: z8k2fN2Pdv0kR4aQFAD9lFiI0sJXlm/SuhSkv2n308w=)
                          27: 323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa (hash: h8Dsp5I71swsmHii1MzitIcYsL+pqCT7SgdRcyTJX7I=)
                          28: 3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa (hash: 8eLHNRuQPDos/VQVqtrUan8VhqrgRT0eANeLwIl9R5A=)
                          29: 3130332e3230312e3139322e302f32342d3234203d3e203137363232.roa (hash: lUVldvkW7zrCmTl2I/FkaVLNraKUrCWh1zaOfF1v1bE=)
                          30: 3131392e3136312e3132342e302f32342d3234203d3e2034383038.roa (hash: oJPzEgWiYmZnQp7PG/QBqGrmp02PI4wAhkJPWKQQ8CU=)
                          31: 3130332e3230302e3232342e302f32342d3234203d3e203137363231.roa (hash: Be3hReiEFACxV6iYJQwfzk9wHKiJznC6Do1PJiOGduM=)
                          32: 3131392e3136312e3132342e302f32342d3234203d3e20313331333134.roa (hash: trDdHL32FPMMe1Pupksons//b+AQDqoBfLL/Onzj3Lc=)
                          33: 3130332e3230302e3232342e302f32342d3234203d3e2034383132.roa (hash: LIiH4yO0XiF6bKA9C6MKJWqsh+V2gF8apiHbu3m7f5Q=)
                          34: 3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa (hash: EMW00fnBuKVnoiTvKKxsVDW2WHDg0xhGk6Oa1ZO6SRw=)
                          35: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383437.roa (hash: +SRL20ezVJ4xXC1XC6q4wh6WnZa2oCvwcc4Zp3ATaL0=)
                          36: 3131312e3131382e3230302e302f32342d3234203d3e20313331333134.roa (hash: 7LSlu5OKw1qOtgyRN/pPG+VNMM4PDl4woSy90UEe4P8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bc:f7:b5:1e:f5:06:77:6a:74:99:1c:fb:b1:06:de:03:c0:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
        Validity
            Not Before: Jan 25 06:35:57 2026 GMT
            Not After : Jan 26 07:07:57 2026 GMT
        Subject: CN=1FA264ECE67C9F19338F376269EE00AC465A9017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:4e:16:e9:cb:41:6b:e6:0b:33:99:05:b7:
                    01:d4:6e:e2:8e:c2:88:7e:21:22:b0:ad:ef:56:c2:
                    e6:15:e2:37:9c:f4:c6:b7:dd:df:88:81:6d:5c:e0:
                    8f:7d:85:fd:ef:ae:ee:b2:ff:15:92:5d:36:3d:2e:
                    33:f8:f0:8f:56:e3:93:54:5c:a8:15:fd:78:41:77:
                    7c:2c:d7:0b:06:72:c6:3d:d9:e7:b4:be:02:30:f1:
                    d6:e4:1e:09:f2:5e:68:e3:9a:c3:08:c9:58:7f:4f:
                    50:33:c4:ca:50:f1:df:9d:7c:e8:60:e9:f7:62:83:
                    52:04:27:a2:b6:99:58:61:ae:cc:11:29:04:a6:af:
                    24:1a:a1:96:d6:76:fe:71:c5:72:d6:c8:17:03:9d:
                    0f:dc:ac:ec:70:bc:cb:4f:a6:aa:2a:da:7c:86:9f:
                    87:a9:67:bd:5c:a0:eb:43:a8:fb:ac:4a:94:fa:21:
                    18:cf:02:7d:59:09:3a:5f:00:3d:0c:91:93:d0:dc:
                    1d:5f:df:82:86:b3:f7:00:af:ff:1d:93:1f:72:0a:
                    0c:d5:35:b4:2d:4d:0a:44:32:94:51:5b:18:be:26:
                    81:69:d1:87:e7:8a:e9:a4:32:d1:b4:38:55:e4:67:
                    c9:8c:7c:b6:20:b9:33:f1:a5:ad:f3:f7:36:76:93:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A2:64:EC:E6:7C:9F:19:33:8F:37:62:69:EE:00:AC:46:5A:90:17
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:39:b1:59:a2:7a:92:08:ea:c2:cc:4f:30:35:64:c8:1e:61:
         93:65:8e:e4:fc:04:eb:61:dc:b5:b9:e1:c5:27:42:4b:84:1e:
         5f:a5:bc:9e:02:44:df:37:e6:29:a0:5d:65:a6:22:23:e8:c8:
         1e:0c:68:5f:9e:99:39:93:5d:c9:47:df:ec:26:72:60:05:89:
         6b:8f:d3:cd:0d:67:78:fb:a6:10:9e:7e:18:e2:47:ce:87:50:
         3f:9e:68:f4:36:9b:51:ab:20:70:32:e7:7b:2c:db:dd:c1:75:
         06:0f:fd:14:52:d1:4d:b9:4a:5e:dc:f2:5a:9a:7a:fb:07:35:
         a6:a6:9f:e2:a0:22:a7:a0:eb:4f:ca:8f:11:e1:3e:45:4f:c3:
         08:9f:a6:3a:d3:27:ac:07:16:14:4d:7f:b9:2d:fa:53:21:ab:
         14:f2:4d:89:4a:03:db:68:cf:91:78:7a:44:47:f9:36:80:2a:
         7b:86:9b:dd:5c:c7:68:cd:83:9d:e2:1f:92:1c:ca:4e:c7:56:
         43:6a:07:d5:6c:ab:6d:e7:81:80:66:85:ac:3b:43:ac:ca:f4:
         50:7c:62:2a:41:d5:8f:c9:fc:c4:b0:7e:b6:9f:d1:40:6e:a3:
         73:5a:b3:f4:85:3c:3f:64:20:a4:0e:07:71:d6:01:42:ad:bc:
         86:8e:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:22 2026 by rpki-client