This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
File:                     A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json)
Hash identifier:          K8hWpyRIFm+8TS5u+Wuquqe1rsnAQg+rBT3iP2QWTNE=
Subject key identifier:   55:0C:15:21:2B:78:36:64:7C:A5:1F:E8:07:6A:80:C2:2B:17:FF:3E
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Certificate issuer:       /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial:       47EC98E68A9CF0D25F1754E0F8DC0FF9DC4FAA54
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 05:45:57 +0000
Manifest this update:     Sun 25 Jan 2026 05:40:57 +0000
Manifest next update:     Mon 26 Jan 2026 06:58:57 +0000
Files and hashes:         1: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: ymIFb4F67p2mv/QVJwrgPcsa58hVNMu3Y94s7RObMZI=)
                          2: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=)
                          3: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ec:98:e6:8a:9c:f0:d2:5f:17:54:e0:f8:dc:0f:f9:dc:4f:aa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
        Validity
            Not Before: Jan 25 05:40:57 2026 GMT
            Not After : Jan 26 06:58:57 2026 GMT
        Subject: CN=550C15212B7836647CA51FE8076A80C22B17FF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:32:78:0d:55:fd:9c:d6:f1:d5:d2:5e:73:
                    0b:f5:05:ab:ae:a7:32:3e:ec:7f:5b:a2:de:58:67:
                    8e:24:bf:b6:ab:29:1b:a5:70:34:9f:52:53:0b:1c:
                    ea:fc:d8:0e:15:a4:51:90:12:21:ce:78:1b:08:88:
                    1a:98:a2:6b:fd:d2:1b:1d:b3:49:1b:a4:14:7b:1f:
                    02:cb:6b:aa:52:68:dc:5b:08:79:d7:4e:28:ca:8b:
                    76:45:96:50:d3:44:f2:41:08:12:57:19:46:72:a2:
                    e0:a5:95:d7:a0:c4:59:7c:37:4f:a7:5b:00:cf:6c:
                    da:66:9d:f3:52:f8:5a:a9:88:8c:6e:2b:a2:69:53:
                    6b:b0:42:a9:17:a8:77:d8:4f:6c:32:29:4e:fd:f6:
                    18:f1:bb:7c:00:f3:57:39:5f:aa:d5:57:b3:d4:fc:
                    0d:ef:03:f6:5b:8a:5a:da:b7:16:b9:b8:90:39:87:
                    db:c2:d4:c3:4c:b0:ba:38:f0:87:71:d6:f7:89:b3:
                    ef:aa:98:ae:5c:cd:16:05:35:21:28:83:0c:06:9d:
                    b2:39:62:f4:e8:ee:48:db:81:e9:aa:21:9b:4a:ee:
                    cf:3f:41:3d:58:e4:40:50:88:b8:96:6a:e5:69:a1:
                    ce:66:88:a8:1d:3b:6a:4f:22:43:3e:d6:0c:ca:44:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0C:15:21:2B:78:36:64:7C:A5:1F:E8:07:6A:80:C2:2B:17:FF:3E
            X509v3 Authority Key Identifier:
                keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:ec:cd:09:c5:85:a9:a5:14:0f:24:14:ac:84:a8:81:2e:
         dd:76:0a:d6:08:b9:1a:55:90:d2:4b:56:f9:00:0e:e4:1a:56:
         4e:f7:6b:b6:3d:af:eb:74:ec:74:23:3f:98:5c:40:fc:c6:73:
         59:d4:49:26:d0:4d:ac:64:0e:e4:ef:52:25:17:49:9b:5a:90:
         37:6b:0d:70:e1:01:eb:9e:76:9e:8a:ad:1e:d6:61:11:36:d3:
         0e:c0:0a:ab:02:79:4c:a3:a7:8b:e6:c9:ba:f0:5f:10:86:cd:
         dd:df:dd:e6:f6:57:10:a5:0c:22:93:59:a9:5a:03:a1:49:18:
         b5:ae:20:5a:c0:fa:1a:b3:5d:2e:3d:c6:d3:96:54:dd:04:46:
         83:89:56:33:76:c6:23:78:9a:c8:34:47:44:12:00:b3:7c:e2:
         28:3c:ea:ea:ff:2e:ef:fd:0a:57:ac:ae:19:34:8d:49:6e:6d:
         18:76:92:21:c1:69:83:c0:82:3b:7a:5f:6b:27:6e:3d:8f:e3:
         da:76:df:45:db:c3:d6:73:25:26:cc:99:ac:16:26:1d:61:00:
         90:fe:e6:c1:32:ce:48:59:2c:1f:bd:29:fd:bf:e1:01:8e:1f:
         0f:b0:d9:eb:ed:2d:a9:b2:af:f6:cb:fb:cd:1b:e2:09:be:ab:
         26:61:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:46 2026 by rpki-client