This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
File:                     6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json)
Hash identifier:          bQ8Y+SahL6e2wjilG+AT3JtF6jEBE+n9WtA0xbp//9M=
Subject key identifier:   EF:A9:13:93:0C:41:66:42:D4:6E:B6:E9:F9:96:AA:18:1A:06:9E:63
Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
Certificate issuer:       /CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Certificate serial:       7CA5667D8EF22918A7A625F234A1722750E56962
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
Manifest number:          08
Signing time:             Sat 24 Jan 2026 16:35:57 +0000
Manifest this update:     Sat 24 Jan 2026 16:30:57 +0000
Manifest next update:     Sun 25 Jan 2026 19:41:57 +0000
Files and hashes:         1: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (hash: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI=)
                          2: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=)
                          3: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: pTa+WzzZ0qR5YxsqLHyBsQ1jgS7+NamfC04mTnuPeQ4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a5:66:7d:8e:f2:29:18:a7:a6:25:f2:34:a1:72:27:50:e5:69:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631
        Validity
            Not Before: Jan 24 16:30:57 2026 GMT
            Not After : Jan 25 19:41:57 2026 GMT
        Subject: CN=EFA913930C416642D46EB6E9F996AA181A069E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:08:91:4c:5e:3a:b9:15:7b:93:41:b7:22:
                    4e:44:e7:e3:60:73:48:4c:68:ba:be:1d:ae:ff:77:
                    35:33:0b:9b:3a:4e:d1:fe:3e:84:3a:c5:b3:d9:c4:
                    c0:6c:4a:b4:53:71:43:af:93:b7:7e:ef:d1:f8:e0:
                    44:7f:76:f7:aa:e2:a1:0b:d0:85:39:22:79:a2:d8:
                    76:b4:51:30:96:70:5c:75:61:ae:74:df:d8:df:3c:
                    b3:42:81:1c:61:62:d4:0e:06:ba:a1:3b:0f:c6:1d:
                    5e:49:b1:70:9a:c8:ee:12:2c:7b:c0:fc:17:c8:17:
                    f8:cf:0a:35:9b:37:49:0c:84:1f:81:50:39:c6:e6:
                    7e:03:29:95:6a:28:d2:9f:fd:f0:00:37:82:57:eb:
                    a7:0a:d6:97:6a:8c:ff:96:47:4d:14:ce:ce:38:47:
                    81:03:da:be:42:01:ac:df:5a:7f:36:8f:60:d5:a7:
                    4d:e0:bc:98:48:b0:b7:06:50:0f:54:21:15:82:08:
                    2a:d1:df:3f:03:e2:e6:30:42:ae:c2:9c:d8:c1:92:
                    e1:03:78:24:10:c4:36:14:db:f5:84:21:c1:ce:fc:
                    be:4d:0f:a4:99:a5:1f:a7:e3:16:76:1b:1c:97:47:
                    99:e3:28:78:0f:e3:b6:13:44:be:28:53:33:e5:db:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:13:93:0C:41:66:42:D4:6E:B6:E9:F9:96:AA:18:1A:06:9E:63
            X509v3 Authority Key Identifier:
                keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:bc:7d:8d:69:3d:e8:20:27:2d:b3:4e:99:4a:52:03:e8:
         3c:93:16:4d:bd:d9:e5:23:e4:b6:2f:78:a8:2f:0a:77:80:ef:
         07:83:71:e6:7c:e0:e3:52:d3:37:8c:ac:25:7d:f7:8a:93:2b:
         af:4d:e3:d4:f2:ec:bf:d7:30:21:a4:00:27:92:fe:9d:c7:f9:
         c8:f0:b7:c8:3b:df:6b:b2:97:59:58:db:bc:ea:dd:26:ac:6f:
         f0:3a:2f:32:52:4f:12:37:1f:f7:bb:94:66:19:02:78:bc:2f:
         ca:20:60:bf:b6:dd:4e:8c:bc:44:7f:8c:76:76:8c:0e:1f:b0:
         26:33:6f:2c:95:07:3a:12:19:b3:a4:eb:39:8c:f7:58:18:96:
         32:49:c6:4e:1b:88:d4:e2:e4:2e:01:ab:fb:23:9d:96:ff:53:
         62:7f:65:93:03:4d:9e:de:ad:eb:1a:70:e5:b2:8b:1a:80:21:
         60:5e:59:e9:15:3b:63:2d:bf:2f:49:79:aa:b0:26:8e:94:a0:
         e1:8a:da:82:eb:46:ae:0f:9e:b4:10:28:ee:79:9b:76:8b:3a:
         36:2a:b3:a7:fd:d6:7e:e4:0b:26:3c:cc:db:b9:85:4c:43:7d:
         1e:62:6a:bc:43:77:f4:01:62:5f:53:82:92:c9:ce:d2:35:93:
         c9:1c:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:36:45 2026 by rpki-client