This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
File:                     E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json)
Hash identifier:          wFsZeXwFUxls31kfMrRVdEEuVg6ruSyHzTBI1Y8PyU0=
Subject key identifier:   35:7F:A8:11:01:26:E4:6A:E1:D3:21:DC:AA:08:64:29:CA:69:B9:42
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       55C68807065D774425C24AFFFC0F4AF4EADA1F62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 02:35:57 +0000
Manifest this update:     Sun 25 Jan 2026 02:30:57 +0000
Manifest next update:     Mon 26 Jan 2026 02:44:57 +0000
Files and hashes:         1: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=)
                          2: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: zb2h+adeQqdiN7H9Ay3vTX5I/2N/gTf9BG21f01AT+U=)
                          3: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c6:88:07:06:5d:77:44:25:c2:4a:ff:fc:0f:4a:f4:ea:da:1f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Jan 25 02:30:57 2026 GMT
            Not After : Jan 26 02:44:57 2026 GMT
        Subject: CN=357FA8110126E46AE1D321DCAA086429CA69B942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ea:b7:af:1e:45:6c:b9:86:04:6d:24:50:46:
                    ae:c3:55:14:cc:af:e7:34:43:de:d5:33:10:cd:06:
                    ed:70:ac:6f:24:f5:32:01:3f:de:71:1f:d8:99:f7:
                    4d:d6:3f:f1:d5:38:d4:0f:95:27:72:5c:f0:a2:a7:
                    1f:32:4f:ef:14:26:31:91:27:0a:81:5b:91:3f:65:
                    87:5a:b4:b1:15:2c:54:84:b9:21:7e:98:94:d1:38:
                    51:ba:4d:76:80:f4:3e:a8:a4:14:0d:e3:6d:88:79:
                    c2:dc:73:cb:7c:9a:dc:9b:ac:39:dc:e9:e2:6d:d4:
                    b7:d5:15:52:7c:5b:b0:81:8d:84:80:47:12:43:0a:
                    cc:85:e4:65:38:8d:82:10:43:6c:4f:7b:2e:67:14:
                    a7:cc:d3:6c:54:c1:44:0e:a6:8c:7b:c3:b3:71:46:
                    62:84:9a:f4:9d:7d:08:ff:03:73:73:72:c4:e0:be:
                    ab:45:5d:d7:58:a9:c4:b3:43:a3:00:24:c5:0a:b5:
                    6a:62:a7:3f:2f:a3:6a:fb:fd:9a:4e:45:ce:42:ee:
                    d1:3e:cf:3e:a6:01:cf:18:ac:61:1f:d3:67:7b:93:
                    04:42:fe:b5:6f:a7:f9:ab:59:5c:f8:36:80:2c:5b:
                    08:36:54:1a:1c:eb:85:69:05:98:e5:93:52:a1:fc:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7F:A8:11:01:26:E4:6A:E1:D3:21:DC:AA:08:64:29:CA:69:B9:42
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:68:28:1b:1a:f5:b0:b8:b0:0e:40:e7:78:99:a6:fb:2f:d4:
         f7:43:75:7b:0a:9f:3d:0e:4c:17:5e:ba:cf:7d:7d:1c:19:d2:
         47:2e:f0:f4:a5:d1:b1:cc:1c:8a:01:4e:a4:ec:47:9a:05:1b:
         68:a4:31:3d:61:5a:1b:28:fd:b3:fb:1c:da:a4:4f:78:db:79:
         8b:7b:12:0a:27:d5:d0:79:cb:4c:3d:c0:3e:ed:a1:ba:75:e5:
         07:98:b7:20:c8:51:19:0c:75:8e:95:ba:90:c7:52:86:43:91:
         4d:e6:f0:0a:26:ff:61:09:83:c2:01:5b:c2:75:a7:00:a4:cd:
         d1:90:34:d5:f4:c6:ea:e0:f7:3c:e0:1f:e0:23:66:b7:74:aa:
         a1:fa:58:a5:20:60:c4:da:02:bf:6f:91:5f:01:71:d2:6d:14:
         13:b5:8e:13:01:36:40:ff:23:e5:a9:ff:69:b6:28:11:4b:c3:
         82:fe:2a:3e:0d:9b:de:86:2d:b5:4a:56:bf:d8:ec:23:e6:3c:
         71:db:2a:48:0d:c2:dc:ec:a2:2f:1a:cd:dc:8a:4f:6b:73:d0:
         e3:55:ac:85:b1:1a:ab:a1:d5:2b:01:33:3e:ea:2f:29:3a:3b:
         ad:9f:bb:fd:5f:23:e8:f4:fb:35:d5:7c:c1:61:4f:45:03:88:
         5f:7b:eb:cb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVcaIBwZdd0Qlwkr//A9K9OraH2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz
MDgzMDIzMjAeFw0yNjAxMjUwMjMwNTdaFw0yNjAxMjYwMjQ0NTdaMDMxMTAvBgNV
BAMTKDM1N0ZBODExMDEyNkU0NkFFMUQzMjFEQ0FBMDg2NDI5Q0E2OUI5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs6revHkVsuYYEbSRQRq7DVRTM
r+c0Q97VMxDNBu1wrG8k9TIBP95xH9iZ903WP/HVONQPlSdyXPCipx8yT+8UJjGR
JwqBW5E/ZYdatLEVLFSEuSF+mJTROFG6TXaA9D6opBQN422IecLcc8t8mtybrDnc
6eJt1LfVFVJ8W7CBjYSARxJDCsyF5GU4jYIQQ2xPey5nFKfM02xUwUQOpox7w7Nx
RmKEmvSdfQj/A3NzcsTgvqtFXddYqcSzQ6MAJMUKtWpipz8vo2r7/ZpORc5C7tE+
zz6mAc8YrGEf02d7kwRC/rVvp/mrWVz4NoAsWwg2VBoc64VpBZjlk1Kh/KozAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUNX+oEQEm5Grh0yHcqghkKcppuUIwHwYDVR0j
BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1
NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy
QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWgoGxr1sLiw
DkDneJmm+y/U90N1ewqfPQ5MF166z319HBnSRy7w9KXRscwcigFOpOxHmgUbaKQx
PWFaGyj9s/sc2qRPeNt5i3sSCifV0HnLTD3APu2hunXlB5i3IMhRGQx1jpW6kMdS
hkORTebwCib/YQmDwgFbwnWnAKTN0ZA01fTG6uD3POAf4CNmt3SqofpYpSBgxNoC
v2+RXwFx0m0UE7WOEwE2QP8j5an/abYoEUvDgv4qPg2b3oYttUpWv9jsI+Y8cdsq
SA3C3OyiLxrN3IpPa3PQ41WshbEaq6HVKwEzPuovKTo7rZ+7/V8j6PT7NdV8wWFP
RQOIX3vryw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:34 2026 by rpki-client