This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          DLxbiKoF6DbBHn8AOfdVoRBDC34ijzSjdVSwcyrL6Bc=
Subject key identifier:   57:54:57:23:D3:5A:C7:F6:CB:05:5F:58:D4:66:EC:A9:8D:BC:BA:BC
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       3F6D2E28C445E8431292001C2FE4CA2B2F2251A3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 05:40:57 +0000
Manifest this update:     Sun 25 Jan 2026 05:35:57 +0000
Manifest next update:     Mon 26 Jan 2026 08:45:57 +0000
Files and hashes:         1: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
                          2: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
                          3: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          4: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          5: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
                          6: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
                          7: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
                          8: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          9: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: wDZmpPp2CmiFUO+Zmf/EL9CiD7p8qgSBBOkB72ZtiWw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6d:2e:28:c4:45:e8:43:12:92:00:1c:2f:e4:ca:2b:2f:22:51:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Jan 25 05:35:57 2026 GMT
            Not After : Jan 26 08:45:57 2026 GMT
        Subject: CN=57545723D35AC7F6CB055F58D466ECA98DBCBABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:c1:11:24:b9:b8:51:dc:36:1e:07:38:c0:
                    c7:78:0b:19:53:c2:61:c1:86:9a:8e:1f:66:36:20:
                    7a:43:06:16:76:a1:8a:bd:f2:dc:70:4f:90:74:13:
                    df:39:a4:c4:10:45:f7:f3:95:75:c0:af:a8:0b:13:
                    6f:10:01:5e:c2:ef:17:c1:3c:77:a5:4a:c5:2e:f5:
                    d3:98:62:fb:04:76:7e:24:9d:10:36:ef:42:5e:f9:
                    09:a1:bd:2f:81:6a:30:e7:0b:de:09:4a:c3:a3:69:
                    aa:00:3c:c8:55:4e:16:bd:f0:d0:78:90:b8:a0:d4:
                    91:20:33:9a:c7:c9:e3:60:43:62:cc:48:d9:9e:28:
                    87:40:6d:82:e5:d3:7b:6a:32:56:b7:43:bd:29:ad:
                    7c:71:e3:2d:81:61:98:e9:32:78:0e:11:a6:f2:59:
                    ff:c4:db:0b:72:2c:32:50:f0:c3:26:18:53:00:f2:
                    b9:0e:15:1f:0e:50:07:5e:ed:9c:56:c5:95:c0:b4:
                    0f:b6:58:59:e1:95:19:30:10:db:f0:e5:2c:d9:53:
                    3c:f8:83:31:da:b7:f4:59:bf:56:b0:8c:66:bb:9f:
                    68:eb:ec:99:e3:b4:58:05:d7:22:05:88:02:04:8d:
                    a1:bd:bd:82:6a:91:72:dc:6f:16:5b:f2:04:44:1f:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:57:23:D3:5A:C7:F6:CB:05:5F:58:D4:66:EC:A9:8D:BC:BA:BC
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:df:87:f2:24:8b:6e:33:0f:b0:b7:24:27:f1:0c:86:bd:
         87:4c:f3:bf:72:11:07:36:d2:05:86:7d:f2:af:fa:b9:a4:d0:
         5c:01:50:a2:f8:9f:e6:04:5c:eb:97:f0:fa:b0:c8:ed:ab:24:
         d0:37:47:53:b9:48:0e:b2:5f:ac:55:53:df:54:e6:08:e3:86:
         a8:ae:00:5a:89:90:bc:ce:9a:28:cc:4f:a3:8a:9e:0f:d7:b3:
         6c:a3:fb:1e:7b:87:8a:d8:f1:46:72:db:e4:f0:66:74:95:d7:
         ed:e3:b7:13:1f:e3:47:5b:55:27:60:ce:b0:cd:60:64:3a:b1:
         2c:02:72:86:08:74:24:4a:40:1f:b9:31:56:f7:61:87:54:11:
         16:76:0e:0c:94:ea:74:b2:b6:78:19:90:b7:66:9a:d8:68:a5:
         90:2c:9b:1a:8d:c6:1d:55:d3:67:40:3d:83:7d:fa:7c:59:b4:
         39:5c:2a:5b:16:1c:91:b4:2f:10:7a:24:2e:d9:52:8e:03:27:
         6e:41:46:68:68:7a:15:76:b0:02:aa:67:5a:11:47:e9:02:c5:
         fa:1e:e8:01:91:55:a0:2b:8f:7c:30:98:ff:4b:54:50:a7:6f:
         4b:d1:39:f0:b3:0b:05:a1:db:1c:65:63:ee:5b:bf:ea:af:d4:
         36:dd:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:34 2026 by rpki-client