This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
File:                     909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json)
Hash identifier:          1YAcSSdl1UyoLOWAqhYHiZQIDL4Vkdd29oBu6Jc8pPc=
Subject key identifier:   9C:36:56:ED:3B:6B:D7:DB:D3:BC:A8:73:0E:AB:B8:CC:0C:11:64:D1
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       14A946B36A442463E0C941A358DBEC3AADC344D7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 07:10:57 +0000
Manifest this update:     Sun 25 Jan 2026 07:05:57 +0000
Manifest next update:     Mon 26 Jan 2026 07:11:57 +0000
Files and hashes:         1: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=)
                          2: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=)
                          3: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=)
                          4: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=)
                          5: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=)
                          6: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=)
                          7: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=)
                          8: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=)
                          9: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=)
                          10: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=)
                          11: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=)
                          12: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=)
                          13: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=)
                          14: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=)
                          15: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: lIFKEslmHsuVme/XYU/+GGiyJ1GLnK5JpcBt60CMaaI=)
                          16: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:46:b3:6a:44:24:63:e0:c9:41:a3:58:db:ec:3a:ad:c3:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Jan 25 07:05:57 2026 GMT
            Not After : Jan 26 07:11:57 2026 GMT
        Subject: CN=9C3656ED3B6BD7DBD3BCA8730EABB8CC0C1164D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:5b:4b:58:e8:ed:49:7f:be:94:fe:6f:3a:
                    c1:80:c8:d7:c1:53:92:94:c8:f4:b2:9a:9b:df:70:
                    f8:9a:e9:1c:19:05:93:16:34:e0:a0:fa:f4:9a:b6:
                    e1:3c:0b:3c:a4:bd:ff:ea:82:7c:e8:76:9c:d9:7e:
                    96:33:53:f1:9a:c0:2c:ff:e3:84:d1:6e:35:05:ce:
                    68:8d:fb:51:c2:fc:16:43:dd:af:26:95:70:8a:95:
                    e3:ff:13:bb:06:26:0e:23:f3:1e:90:e6:7f:36:dc:
                    90:3f:1a:8e:63:ff:3f:47:9a:54:c3:3f:d9:94:46:
                    3a:62:bf:6d:62:df:c9:e9:89:91:3e:bf:57:9c:06:
                    6f:e3:ec:91:ba:cb:5c:66:a3:04:89:cd:de:73:37:
                    60:8e:db:d0:4c:44:a1:d3:1f:6f:05:dd:15:7d:44:
                    75:5c:e7:39:da:70:2c:66:2a:88:13:94:a0:60:69:
                    ae:0e:cc:94:87:fe:fd:2b:3b:25:d8:0c:aa:c4:16:
                    5a:84:42:3f:75:8a:09:b9:56:7a:ae:f8:de:f2:43:
                    62:19:49:60:e0:1a:35:fd:4a:35:fa:6f:61:8d:1c:
                    26:1e:15:34:ee:d6:10:8a:8f:a2:54:10:c6:7e:56:
                    09:ce:56:44:21:25:ce:73:2b:50:0f:91:86:06:e3:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:56:ED:3B:6B:D7:DB:D3:BC:A8:73:0E:AB:B8:CC:0C:11:64:D1
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:02:19:37:8f:a5:2a:9f:af:04:60:0e:f7:61:6b:21:27:99:
         6e:1b:34:be:aa:00:26:aa:f9:9f:30:6e:bf:df:e2:af:4c:1b:
         da:bd:57:05:11:22:ea:ce:a2:a8:a3:c1:71:01:f6:1f:85:80:
         eb:ab:09:8c:fc:66:3a:2b:08:31:25:ed:6f:ba:e8:c2:bf:5f:
         79:83:37:44:c1:92:77:13:26:0b:9c:14:f5:39:ea:25:80:db:
         dd:43:1f:6e:11:d3:0c:31:de:70:9b:88:c2:47:c2:fe:85:22:
         20:ce:9f:39:ff:1c:a0:65:79:cf:05:9d:25:75:01:c8:dc:94:
         ed:c7:87:49:1b:76:ff:a3:de:99:5e:8c:b5:e9:4e:61:25:f4:
         59:aa:42:5f:e7:6e:34:e2:c9:d0:1a:ca:b6:0d:07:2a:48:d2:
         53:3b:2b:d7:22:c7:0b:06:cf:0b:8e:4f:39:2e:4e:ea:61:46:
         25:ec:cb:c4:43:54:70:19:e7:1e:a0:3c:8d:59:e8:c4:74:ec:
         bc:b4:30:fa:a2:a8:02:33:c9:8f:62:66:fa:31:6b:5f:b5:c9:
         3e:3a:09:8f:52:b6:84:e0:bc:42:72:2c:84:11:5c:da:3c:15:
         ff:e6:06:fa:ca:99:1b:37:ee:92:ca:ea:a1:3b:b4:66:76:41:
         f2:28:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:45 2026 by rpki-client