This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File:                     816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier:          eWo34Pn20PPFYB5ceWLu1dUeJzB7bEo+Y8NLbNBhltY=
Subject key identifier:   59:DA:38:1E:A6:09:2F:67:DE:03:99:CD:18:3D:97:9A:C2:AE:30:4A
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer:       /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial:       707C5F537EC18E325A3F9C7A0425F82D5C42CFB9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 06:40:57 +0000
Manifest this update:     Sun 25 Jan 2026 06:35:57 +0000
Manifest next update:     Mon 26 Jan 2026 10:04:57 +0000
Files and hashes:         1: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
                          2: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: 3wf3xPhuiKAeG8rjCq/jfNGAh4IW4p1yMjClpQtNb0k=)
                          3: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:5f:53:7e:c1:8e:32:5a:3f:9c:7a:04:25:f8:2d:5c:42:cf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
        Validity
            Not Before: Jan 25 06:35:57 2026 GMT
            Not After : Jan 26 10:04:57 2026 GMT
        Subject: CN=59DA381EA6092F67DE0399CD183D979AC2AE304A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:51:cb:e3:2f:8e:1c:a5:37:56:ae:cd:03:
                    9c:25:ab:89:fd:6a:4a:85:23:0d:a2:54:d2:25:66:
                    bb:46:e9:c3:e2:21:8c:21:97:9d:8b:02:e2:50:6d:
                    80:66:ce:2e:f0:a5:a4:3a:b1:b9:ad:c5:d5:e9:49:
                    b3:63:83:f7:5e:eb:26:b0:03:6b:bf:12:41:d0:57:
                    5a:f5:72:63:4a:3f:66:2f:cb:f7:bc:9e:6c:8a:19:
                    c4:dd:2f:ae:cb:ad:55:13:d8:8d:68:38:e8:d1:1f:
                    c0:81:7e:29:15:fb:96:c9:30:cb:9d:fa:f8:31:2f:
                    14:e3:de:60:4e:ad:09:68:93:9d:e7:0a:73:06:72:
                    64:a5:5b:9c:ef:e2:1d:91:c0:6f:9c:b4:69:49:17:
                    f9:9c:fd:65:cd:e5:9f:df:8f:51:71:21:b2:e0:6e:
                    0d:cd:bd:2e:1e:39:59:d1:7a:ff:ad:9b:06:77:80:
                    c9:62:0c:a1:13:cc:d2:a5:c6:e8:db:10:dd:64:11:
                    8f:b0:c2:d0:4d:2e:64:8d:76:43:65:13:fc:84:13:
                    2e:bf:21:e6:58:4a:04:58:51:16:eb:9c:48:db:19:
                    97:9b:b8:9a:19:7e:ca:74:43:3e:4d:95:ee:49:d2:
                    c0:c3:97:ee:d9:21:64:47:f4:14:d2:46:14:a9:fb:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DA:38:1E:A6:09:2F:67:DE:03:99:CD:18:3D:97:9A:C2:AE:30:4A
            X509v3 Authority Key Identifier:
                keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:fb:1d:af:68:d7:9e:80:3f:6d:4b:e4:69:56:b2:80:60:
         80:65:c2:9f:0a:04:a4:76:57:4c:ac:d6:b9:40:7e:5e:a4:9d:
         8d:d4:44:64:85:83:66:ab:30:7b:09:c5:c6:aa:19:d4:a5:38:
         b2:5c:ab:ef:de:b8:8f:07:a6:65:8a:e6:37:24:37:a3:37:b7:
         46:52:5d:4f:ef:1f:ee:7d:26:d6:89:5f:29:0a:05:59:31:a0:
         fa:d5:fb:e2:2d:a2:56:a2:26:44:11:62:6f:37:1b:46:7e:38:
         2a:99:25:82:14:f7:09:9e:3c:51:3a:80:4c:10:6b:83:fd:da:
         c7:e7:da:b0:95:0e:f8:27:2c:d3:7a:a3:59:fa:c0:af:11:b3:
         c6:f6:42:9d:a2:d3:1d:89:62:52:e4:de:b5:ba:86:59:08:6b:
         c7:1d:c1:8f:d5:9a:a7:3d:21:43:86:8b:6d:d9:20:81:ce:ec:
         2a:c5:3f:55:e6:bc:ac:72:7c:c7:b3:09:7e:e8:f7:cd:d4:f7:
         2a:3d:57:37:d9:53:e6:30:b4:ac:fb:54:d5:73:22:f5:33:2e:
         07:5a:32:e3:ea:c5:bb:30:99:e5:83:0b:d7:24:4a:29:95:d7:
         b8:fa:a4:80:99:cb:41:12:3c:f7:ae:94:ff:69:23:8e:0d:e6:
         d8:fd:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:32 2026 by rpki-client