This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
File:                     7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft (raw, json)
Hash identifier:          74XTumONTpkZ3jbk/mAk6uJqYbguLpNbP9ZyOMFX7u8=
Subject key identifier:   59:1A:A4:99:48:98:3E:A0:1E:8B:FC:5B:00:09:3C:64:61:0C:FC:B8
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Certificate issuer:       /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial:       1DD5D6BE9B7D86FD2A97E8AEB0B456B0193526A5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 09:56:02 +0000
Manifest this update:     Sun 25 Jan 2026 09:51:02 +0000
Manifest next update:     Mon 26 Jan 2026 10:14:02 +0000
Files and hashes:         1: 34302e37322e3235352e302f32342d3332203d3e203538353933.roa (hash: N+EpGWN+5eD7X8BPdHo0VUuyK/mruZfTCEv7P/4k7IA=)
                          2: 34302e37322e302e302f31352d3332203d3e203538353933.roa (hash: GZdXu8wxwSiGKPAoovUfq55Hmtnm5G22A4eA9cJCeZ8=)
                          3: 35322e3133302e302e302f32302d3332203d3e203538353933.roa (hash: Vu2jxMs7CK3kLgU26e5xvo6YxnU5hanMh+ZAQYoDfno=)
                          4: 3133392e3231372e3132382e302f31372d3332203d3e203538353933.roa (hash: gyaQRSP2K4Ar7mRLlvlWZj3SxsO0p/6gafUPCndYi6E=)
                          5: 3133392e3231372e302e302f31372d3332203d3e203538353933.roa (hash: mDztGBZGQDwnkeO355GRuWH/wTqbzk6W9oIP/6iNQwU=)
                          6: 35322e3133312e302e302f31372d3332203d3e203538353933.roa (hash: XxUvbwE08xpcTt8/cgh/Tt51+k5+EoVDyDrSrQ6xvUg=)
                          7: 34302e3136322e302e302f31362d3332203d3e203538353933.roa (hash: f8MfVshx5lGzRK+oYYL4bZpTGfVrnynfJo9OIWhBK3I=)
                          8: 35322e3133302e31362e302f32302d3332203d3e203538353933.roa (hash: 9fmayBtgmtjpp4jzOoesECemG0iPag+LmUb3f7R4naw=)
                          9: 3135392e32372e302e302f31362d3332203d3e203538353933.roa (hash: mNIQFZ7xCBM9upD56r+wfpao/kJgLgozsC1Q5YvTI1c=)
                          10: 34302e37332e39392e302f32342d3332203d3e203538353933.roa (hash: 7R7fDqZf/5+3oxpf17LppS6FttEpLPqj/SRHzmBlL90=)
                          11: 3133392e3231372e302e302f31362d3332203d3e203538353933.roa (hash: TjfWShvYyMSe5iUDgDmO2D0KmAjdpi9YE3JeWe6558M=)
                          12: 35322e3133302e3139322e302f31382d3332203d3e203538353933.roa (hash: dzApubPVeFSkZdW4H5zf0mOm6a9a8hNkGDjx4j4dslE=)
                          13: 35322e3133302e39362e302f32302d3332203d3e203538353933.roa (hash: SC40P6NDcdhOegIh1hNUJy6M7bQHc/Eyem9IEbFOErk=)
                          14: 35322e3133302e33322e302f31392d3332203d3e203538353933.roa (hash: TaXNna1Dld+PQ4rV4kwEt/hzeJ7wdeyhTCohXgzWwhs=)
                          15: 3133392e3231392e302e302f31362d3332203d3e203538353933.roa (hash: 5/v1XCI+Wp9jyoAJYxMrFQ0MkUCnWejLKnHtIrf5Bp8=)
                          16: 34302e3132362e36342e302f31382d3332203d3e203538353933.roa (hash: Hub7TsuiHLAWEoiAunlBnvggqSEF/qF1dBxzvZVqGHk=)
                          17: 34302e37332e302e302f31372d3332203d3e203538353933.roa (hash: cadugSY+Rd6qeZvb4VDsR6/4DGyePb52mtwl/w4kXbs=)
                          18: 34302e37322e3235342e302f32342d3332203d3e203538353933.roa (hash: jVmLljqYigSR/3QuR32HfCR3CxY+RzXqqg+sV43pBR8=)
                          19: 34302e37322e3132382e302f31372d3332203d3e203538353933.roa (hash: p/W3urv9s6Mh0sKXJJNeu9I+tgf84ncaa3h8zoru8OE=)
                          20: 34302e37332e3132382e302f31372d3332203d3e203538353933.roa (hash: CiPHFGZqvfKg4LSjdZddwLwpgrGQUYVCQQV/0MxCEaY=)
                          21: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl (hash: ZtMUqiwhnt2pBU40SGqYBWh40MBBbMJtHr2BUp/82/4=)
                          22: 34302e37322e302e302f31372d3332203d3e203538353933.roa (hash: LYiQ73taquPSuSpTuy+vzJGoHi18mwv4asxbOTvv1Ho=)
                          23: 35322e3133302e3132382e302f31382d3332203d3e203538353933.roa (hash: a7a2yAbEPau4rOfXkuk4CqfYJnYw6MKh/LA/cb7L83c=)
                          24: 35322e3133302e36342e302f31392d3332203d3e203538353933.roa (hash: OprOlplssuamN3h94BT0AnEzNk6BvCRELQ3ohphCM00=)
                          25: 35322e3133302e3131322e302f32302d3332203d3e203538353933.roa (hash: X9x1G+66O/IP7eldA7B5QA4a1jvmKEuYQFj2+IV1wr4=)
                          26: 3133392e3231392e302e302f31372d3332203d3e203538353933.roa (hash: IVrHknvKkh8yROa4tiv3v+u48kSCR3yp5mlGRj7MBmg=)
                          27: 35322e3133312e3132382e302f31372d3332203d3e203538353933.roa (hash: RDf3SYXo4Ea1wuB9olxpjnqUjJTNs4/UFcrcG5ZHM4k=)
                          28: 34302e3132352e3132382e302f31372d3332203d3e203538353933.roa (hash: xvYQ7lwBaxHOGikSMgtXf4dBxT9LF60nwDMT1WLA8D8=)
                          29: 3134332e36342e302e302f31362d3332203d3e203538353933.roa (hash: T4vLezJn7xNu2bByphuJEu2Ig4ZD46V9jH6bAdcEpuo=)
                          30: 34302e37322e302e302f31362d3332203d3e203538353933.roa (hash: bA5WI7/KpYNhKJN4cMgSEIprY/S1uA3j47J24s7t+5w=)
                          31: 3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa (hash: WvSyW7YTV1pD7rlW8kL0SgPBrbkm666YUP9aQtCGrCU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:d6:be:9b:7d:86:fd:2a:97:e8:ae:b0:b4:56:b0:19:35:26:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
        Validity
            Not Before: Jan 25 09:51:02 2026 GMT
            Not After : Jan 26 10:14:02 2026 GMT
        Subject: CN=591AA49948983EA01E8BFC5B00093C64610CFCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:2d:bd:5d:1d:98:a2:37:d1:9b:b9:28:ba:
                    a3:e3:65:cf:b1:91:64:17:c0:20:e4:c5:94:d5:ad:
                    fe:3e:af:74:75:cc:55:10:aa:01:b7:00:d5:41:a0:
                    76:dc:01:70:29:0a:19:b4:55:ff:c4:d5:66:5e:75:
                    5a:5a:ab:22:d6:87:26:16:64:9c:39:ca:bb:a1:9f:
                    c1:0a:0b:3d:d3:ba:73:72:f9:66:67:a9:8c:1a:f3:
                    58:c2:a4:79:55:a4:1d:57:0c:19:0f:e5:36:41:8a:
                    e1:28:94:2b:ea:66:ce:5c:f3:f8:7b:05:e2:70:3a:
                    82:4e:b3:f0:6a:a4:9d:31:76:6c:0e:a5:66:82:e0:
                    21:8a:bc:bd:6a:59:cf:79:79:dc:d8:7f:95:3c:c0:
                    1e:30:cb:a1:aa:3f:a3:f1:cf:d6:e5:8f:4b:59:e5:
                    e5:04:3f:96:90:76:5d:12:72:88:d6:6e:9b:bc:4f:
                    e5:4f:2d:ae:bc:c1:8a:f3:fb:d1:05:0a:34:7a:78:
                    03:60:5d:8d:f6:f9:57:85:a7:ed:d9:d7:ba:e8:a0:
                    04:64:8f:c6:6a:f9:d5:cd:9f:e0:ee:93:3b:26:93:
                    31:49:99:de:44:86:b7:d7:b4:1d:28:71:a1:f2:64:
                    78:4f:4b:b8:7b:19:c2:1d:9a:38:fb:1c:3b:48:35:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:A4:99:48:98:3E:A0:1E:8B:FC:5B:00:09:3C:64:61:0C:FC:B8
            X509v3 Authority Key Identifier:
                keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:5e:52:71:3e:9f:ac:43:73:21:37:7b:dd:5a:65:42:4d:
         d4:e4:e5:5f:ca:7e:5f:e7:53:cd:7e:d5:81:d7:b6:73:74:38:
         2f:e4:cd:ee:69:7c:1a:50:6f:51:41:1c:f8:02:23:cf:79:22:
         ff:80:63:2d:a5:7d:f6:1b:ac:76:39:4c:3f:74:0b:0e:5a:d3:
         e1:7c:4d:00:79:31:75:a5:03:8d:41:53:33:cf:86:a0:71:3d:
         19:b4:86:f9:7e:28:b5:f2:02:40:11:60:a5:d0:a4:20:3b:6b:
         72:fb:85:ad:be:e5:9f:17:e1:49:85:d6:2d:79:ee:0e:3f:a9:
         8b:44:48:05:e8:f9:d0:a7:6a:15:a9:39:8f:28:6c:2a:e0:b4:
         69:ba:92:3c:ae:e6:ae:84:01:44:d8:b8:c2:2a:31:dc:56:cd:
         50:37:e9:e0:e2:ce:b8:0b:16:b4:49:b8:84:ba:2a:d4:5f:b1:
         1a:15:a2:78:34:32:e7:94:27:e4:fd:7f:cd:33:a4:57:97:21:
         f3:99:99:24:0b:bd:14:12:a7:46:d9:8b:af:17:33:af:77:49:
         14:eb:0e:f0:d5:bf:f4:38:20:58:df:ec:14:07:40:fb:51:bb:
         4b:1a:4e:52:b0:0a:b0:c9:8e:36:b9:6a:36:c2:ae:7e:d9:6b:
         cc:30:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:49 2026 by rpki-client