This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
File:                     6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft (raw, json)
Hash identifier:          jkZbU26cqxr9JwzJfk7gNS4LkNxYVrvJqBvFpXD6r3w=
Subject key identifier:   B9:2C:99:9B:F2:A0:00:A2:02:01:52:7E:15:31:CE:67:17:C0:D1:9C
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       1652CBA3D33B67506C90F4D894B7244C08C1FBD0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 07:30:57 +0000
Manifest this update:     Sun 25 Jan 2026 07:25:57 +0000
Manifest next update:     Mon 26 Jan 2026 11:08:57 +0000
Files and hashes:         1: 3231392e37322e302e302f31362d3136203d3e2034383437.roa (hash: E35Ak8kryIUI2zOXyOabRVR/vhDEn+uGa0zCN0KdzcM=)
                          2: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (hash: 3fGts9fS3mm4peYPa5y25NpoXBF5DOH88ZO6sDHG1lc=)
                          3: 3231392e37322e3136302e302f32342d3234203d3e203138313138.roa (hash: 8dtxM9VRFS14jXgTL0jlExD+rRZPerBYVc3WFemUOQQ=)
                          4: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (hash: Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=)
                          5: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (hash: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=)
                          6: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (hash: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg=)
                          7: 3231392e37322e3136302e302f32342d3234203d3e20333938373034.roa (hash: d/cQSMYNBX/wZD+QYHNeyKRe0x+03uT3D/Oy6lO4iy8=)
                          8: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl (hash: 0XNlpR5mOx8JeOh6fYfMdPpR8ZQaMNqD0FXqlfyxopc=)
                          9: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (hash: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:cb:a3:d3:3b:67:50:6c:90:f4:d8:94:b7:24:4c:08:c1:fb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jan 25 07:25:57 2026 GMT
            Not After : Jan 26 11:08:57 2026 GMT
        Subject: CN=B92C999BF2A000A20201527E1531CE6717C0D19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:ab:c1:69:ab:37:d2:39:30:80:f1:f5:ba:
                    80:80:68:c2:73:0a:26:71:12:cf:ac:12:bb:18:6e:
                    04:81:6b:4e:ec:52:92:11:9d:74:d3:5d:8b:5a:92:
                    1f:05:fa:76:23:cb:a1:ca:46:21:f4:14:19:2a:0d:
                    7e:77:d9:ee:2c:62:f5:1e:87:d2:2d:33:04:2a:bf:
                    7d:9b:df:76:a6:3f:21:54:5d:1a:5c:0d:b0:97:4a:
                    d0:30:df:00:2f:d4:03:24:c1:92:58:6e:4b:a0:32:
                    c5:f6:2b:04:3b:8d:d5:f6:91:e5:e2:18:3b:f9:5e:
                    77:e1:c5:8d:5c:a0:80:fc:36:5d:a2:68:64:ad:3f:
                    9b:99:80:d0:a4:31:08:f7:59:5d:15:0a:53:b4:19:
                    b6:9c:67:34:73:84:17:5a:e3:4d:17:cc:66:c8:31:
                    80:ae:18:34:ff:bc:cb:f6:cf:a3:12:67:a9:02:db:
                    7f:6c:6f:e6:39:c2:df:bd:07:86:da:86:30:66:c3:
                    3f:4d:a7:a3:56:88:e4:2e:9a:6a:1d:c5:44:11:5a:
                    57:02:f8:45:cc:06:7e:eb:7b:05:2a:8d:30:6e:ac:
                    e0:06:60:8d:cc:2e:d7:a9:fc:de:6d:cc:68:70:1d:
                    4c:61:06:a0:f2:23:c9:16:67:7a:0b:e5:a8:8f:fb:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:99:9B:F2:A0:00:A2:02:01:52:7E:15:31:CE:67:17:C0:D1:9C
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7f:33:11:54:f1:93:75:ad:47:0f:9e:f8:85:55:c7:c0:7f:
         c4:db:ef:57:c5:8d:96:86:ca:b7:bb:1b:6c:e5:83:11:09:f9:
         c9:4f:1f:5c:22:f4:1d:36:cd:eb:91:54:21:fc:ed:46:15:f8:
         1e:06:39:d1:b3:33:6e:87:b2:b4:31:07:b0:39:25:ec:fc:d8:
         42:fd:10:81:eb:69:c9:da:21:87:46:d8:d6:8b:e4:83:e3:6d:
         86:38:02:b5:f2:82:97:d3:b3:bf:6d:ab:cb:84:23:61:3e:fe:
         ca:d0:e7:c6:11:37:91:3b:57:f0:86:27:bb:f1:ee:1b:15:4e:
         c1:e8:43:be:f3:8e:3b:80:c8:80:83:1e:ad:32:f2:33:d3:1f:
         9c:4a:c8:e8:bf:8f:15:2a:47:ad:06:ca:e2:f6:c9:70:7a:d5:
         d0:20:d0:42:c4:ca:12:72:5a:cd:20:e6:34:e8:c3:31:7b:28:
         04:26:80:b4:6b:4f:ea:4a:7a:a0:25:2b:36:31:a4:a0:cb:40:
         4a:25:2f:85:5c:36:34:ef:cb:0e:f7:0f:8c:ad:07:a4:fe:2a:
         1f:16:89:63:c5:c1:44:a5:3a:a6:9c:66:fa:32:ba:f2:82:b2:
         82:b0:d6:6c:42:3f:7c:32:39:e5:ae:be:02:0d:d7:2c:94:2b:
         03:1e:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:34 2026 by rpki-client