This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          W4kdpdv3PGcprKI3VlfcGm/Cev6D3/gj7ocPDp47KAI=
Subject key identifier:   EF:82:04:04:30:77:89:6F:60:EF:D0:8B:4F:79:AA:B4:88:D2:7B:FA
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       666D3B370B973ABCB28E66328CDF8FD4D9C7B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 04:50:57 +0000
Manifest this update:     Sun 25 Jan 2026 04:45:57 +0000
Manifest next update:     Mon 26 Jan 2026 07:18:57 +0000
Files and hashes:         1: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          2: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          3: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          4: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          5: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          6: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: 7r08s5vLzc6pENR9jHKSfYnhC+6ixmCJkUWWY6Sgr44=)
                          7: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          8: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          9: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          10: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6d:3b:37:0b:97:3a:bc:b2:8e:66:32:8c:df:8f:d4:d9:c7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jan 25 04:45:57 2026 GMT
            Not After : Jan 26 07:18:57 2026 GMT
        Subject: CN=EF8204043077896F60EFD08B4F79AAB488D27BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:11:1c:3d:06:9a:08:8e:00:3f:1b:3d:22:b0:
                    85:6b:72:6e:47:56:5e:86:4b:c0:d3:94:28:be:45:
                    db:43:d3:59:c3:5a:40:de:7f:75:b0:e4:db:09:d1:
                    6e:3f:5d:13:8f:06:94:5f:25:3f:fa:4f:57:45:85:
                    a5:aa:fc:43:f5:ac:ef:30:96:aa:6c:14:3d:ff:76:
                    e1:2f:f8:df:1a:4a:f4:d5:bd:53:fb:ba:2d:30:5c:
                    77:34:cd:60:2a:93:9b:9f:28:0a:cc:14:3e:24:26:
                    b3:58:33:20:82:c5:0b:28:cf:80:0f:40:9d:9c:97:
                    c7:42:c7:91:15:04:3b:95:e8:59:19:05:da:c5:1c:
                    1b:d7:1c:d4:07:df:a0:89:a9:89:53:3c:eb:42:8b:
                    4f:fc:ba:c4:ca:ae:13:01:5d:87:16:6b:8b:a0:7d:
                    e5:99:24:a1:70:f3:4c:9c:0b:14:2c:7f:d1:f4:eb:
                    7a:dc:65:4f:3a:cc:4a:d3:e8:1a:88:02:2e:1a:36:
                    51:b0:0f:ca:44:34:bb:37:5c:de:81:e4:dd:c8:9e:
                    68:ba:93:76:9e:03:e5:45:f5:5b:c3:67:d2:44:84:
                    b2:a0:46:b9:79:08:1e:b9:a4:b3:cc:c4:ce:80:de:
                    20:d1:7f:0e:1d:63:13:bf:4c:e8:28:a9:da:b5:53:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:82:04:04:30:77:89:6F:60:EF:D0:8B:4F:79:AA:B4:88:D2:7B:FA
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:75:e3:fe:8b:34:3f:7d:92:d9:4b:7e:bd:7d:5c:85:1a:a2:
         97:86:a4:d9:cf:5a:b1:66:ac:08:bf:5d:cb:87:77:43:ac:57:
         5c:0b:88:ae:7f:c9:57:47:0b:3e:3a:c9:e1:f9:77:1d:95:ce:
         b9:93:27:e5:9d:25:d8:1e:57:5d:39:a0:53:5e:82:64:66:ab:
         8a:cc:3e:10:0e:e9:20:3e:09:43:8d:af:a9:74:5d:04:20:d1:
         6c:93:2b:a1:c7:2e:58:bc:22:ec:d9:9e:52:46:fd:a5:6a:02:
         ad:fd:77:e4:27:89:e5:55:dc:e9:42:73:9a:dd:05:64:e6:65:
         91:3c:33:5f:a7:68:8f:52:e8:4f:62:28:41:dd:cd:56:38:20:
         e5:77:66:dd:25:fa:62:d2:f4:1e:f6:12:28:0b:47:83:44:32:
         a3:57:5c:bc:7c:ef:36:1e:79:25:07:9b:50:3e:ce:ce:32:4a:
         99:31:9f:bb:3f:b9:d8:85:59:83:4e:06:bc:6c:2a:6e:3f:66:
         8b:6c:4f:65:d8:d0:7f:a2:b8:26:76:95:d3:66:6a:cd:a9:db:
         e3:a5:7b:5d:a9:d7:72:8a:83:c4:41:94:72:9b:33:d5:61:fc:
         11:c3:fa:96:1d:69:18:92:40:34:8e:14:04:5a:49:26:c8:a7:
         29:75:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:10 2026 by rpki-client