This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
File:                     B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json)
Hash identifier:          cRBy7DBsyKGe7mv/Eh+Mp6/104LDKt117YR4TP4a1zA=
Subject key identifier:   EE:1C:56:44:93:E0:B4:89:0A:48:0C:BC:81:C4:0C:74:FB:CD:1E:A9
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       5961CE8EF7BB75D165A5DB08FF2F883C12540933
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
Manifest number:          08
Signing time:             Sat 24 Jan 2026 18:05:57 +0000
Manifest this update:     Sat 24 Jan 2026 18:00:57 +0000
Manifest next update:     Sun 25 Jan 2026 21:57:57 +0000
Files and hashes:         1: 3130332e39372e35362e302f32342d3234203d3e20313532303932.roa (hash: 9JowGdQS60EvySPbEMdcRTNTQ1+mfk9mYrPz0eWhI8M=)
                          2: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: 9YiOIr7cjBOW4r+q/i0y+5a2tTpEkv/S+PmHdnhp2Bk=)
                          3: 3130332e39372e35392e302f32342d3234203d3e20313532303932.roa (hash: 3/58orjmzpKdtmKP2bXfseV66R6BzBQVq1m+AsGRi0M=)
                          4: 3130332e39372e35362e302f32322d3232203d3e20313337343433.roa (hash: tT7KABninYg0iamV5ShQ2APc57EUXLuPGm9ml3XoXL4=)
                          5: 3130332e39372e35362e302f32322d3232203d3e20313532303932.roa (hash: xzVFs6aTjbygQXEe4vJkKPr2ZvERkqIPBfioErfexIo=)
                          6: 3130332e39372e35372e302f32342d3234203d3e20313532303932.roa (hash: c4ptnMygLAmeXf14Sts1bgs4S+frcNg4CBkxXbL7OAs=)
                          7: 3130332e39372e35362e302f32342d3234203d3e20313337343433.roa (hash: Usfk3vKW8a6sdncccfCTAd6Pdzalj50eZ7FYBMBrLaI=)
                          8: 3130332e39372e35382e302f32342d3234203d3e20313337343433.roa (hash: JF5TxoFp3gy3/wvpBMe2C5Y2Ij/Gp3tRmMrWijml7no=)
                          9: 3130332e39372e35382e302f32342d3234203d3e20313532303932.roa (hash: 9g8q6C2zMMfK8FIvJQCnY2jS/6Obpq4wlvntZI6tOkw=)
                          10: 3130332e39372e35392e302f32342d3234203d3e20313337343433.roa (hash: YQJhhloPhqFiV0jq+cBSJsHLwVGC+4b9h11geBT/7MY=)
                          11: 3130332e39372e35372e302f32342d3234203d3e20313337343433.roa (hash: xdA/DzV+toI7Q3bECRbnQQmPTqAaNqd4BPhFTjhYgtk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:61:ce:8e:f7:bb:75:d1:65:a5:db:08:ff:2f:88:3c:12:54:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Jan 24 18:00:57 2026 GMT
            Not After : Jan 25 21:57:57 2026 GMT
        Subject: CN=EE1C564493E0B4890A480CBC81C40C74FBCD1EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:69:56:cb:8b:ed:60:2e:e6:ca:90:20:83:
                    89:3b:e1:0a:45:da:3b:ef:f0:76:bd:51:da:5f:9b:
                    5e:d2:27:d9:23:f8:20:40:29:b4:c1:05:e2:d6:15:
                    4b:ab:f9:90:f6:2b:66:19:66:5b:ed:d1:87:75:c1:
                    0c:af:c4:71:d5:b4:93:13:25:b1:d3:6f:f7:d9:88:
                    ae:65:66:8e:7b:39:b2:26:2c:24:df:e0:93:69:fe:
                    1f:92:01:ac:fa:d2:19:93:e5:6b:db:fd:d2:12:b2:
                    a8:d0:f9:20:9f:4d:d4:40:3f:fe:1f:88:8d:65:8a:
                    3f:8f:0e:cd:dc:80:fc:cd:84:b1:a9:66:25:f7:f9:
                    a1:0a:39:fb:7e:ae:f3:1a:d5:59:d5:79:27:cb:4c:
                    76:a7:92:13:9d:7b:3d:51:54:18:4e:fd:f6:d2:a0:
                    c5:fa:e1:25:a4:a5:ff:85:0b:ee:f0:a1:58:10:8b:
                    18:25:ae:46:5a:06:9b:ea:bb:95:7f:a7:76:34:29:
                    68:9a:fa:70:d7:cc:13:c3:1a:c1:22:69:75:8f:c1:
                    9b:f5:63:ba:40:b9:49:b6:7c:b1:f2:34:c1:d7:96:
                    9d:19:2b:ec:95:84:f2:f4:46:79:72:21:1d:b5:db:
                    d8:33:f0:28:0c:04:58:53:d4:ea:dc:6c:42:bd:bf:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1C:56:44:93:E0:B4:89:0A:48:0C:BC:81:C4:0C:74:FB:CD:1E:A9
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:12:c1:56:b6:62:59:3e:59:3a:5c:7a:22:10:73:05:e5:
         05:f6:6e:36:c1:7b:15:96:e9:c6:22:b3:a4:4b:9d:4f:88:8b:
         3d:f7:f2:a9:39:56:33:02:66:8c:7b:e0:84:92:70:73:ce:d9:
         eb:91:3c:66:d4:99:85:33:f5:b3:f2:b2:bc:a8:60:be:2d:e7:
         8d:b8:dc:37:77:bf:db:5a:6b:85:46:d6:cb:1b:f2:da:0a:e1:
         a6:2d:0e:04:0a:be:36:eb:55:f5:8a:54:fc:43:15:b3:03:d6:
         e0:ee:52:8e:9a:73:30:79:44:bb:a8:32:58:ca:4f:79:18:c6:
         a1:a6:44:0c:2d:68:22:a0:aa:a7:52:02:08:b6:b1:a2:80:74:
         c6:42:5c:43:f6:5b:98:c5:aa:63:46:5f:42:4b:dd:43:07:81:
         e1:44:ce:67:ad:ef:bf:dd:b3:7b:35:fa:d8:c8:3e:90:c9:e8:
         68:2d:8e:cb:20:ca:cd:68:69:68:17:fd:5c:00:a1:8a:2e:9b:
         27:31:a9:57:14:f1:37:2a:cc:33:70:84:26:be:9b:88:d5:19:
         69:fd:b3:84:d1:be:5c:90:78:9f:5b:a2:1e:5b:65:a3:1f:c0:
         ae:79:cb:db:90:51:42:3a:77:18:d5:8e:21:e8:5f:30:95:1e:
         b4:dd:3f:e4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWWHOjve7ddFlpdsI/y+IPBJUCTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2
MzU0NjFBQjAeFw0yNjAxMjQxODAwNTdaFw0yNjAxMjUyMTU3NTdaMDMxMTAvBgNV
BAMTKEVFMUM1NjQ0OTNFMEI0ODkwQTQ4MENCQzgxQzQwQzc0RkJDRDFFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpq2lWy4vtYC7mypAgg4k74QpF
2jvv8Ha9Udpfm17SJ9kj+CBAKbTBBeLWFUur+ZD2K2YZZlvt0Yd1wQyvxHHVtJMT
JbHTb/fZiK5lZo57ObImLCTf4JNp/h+SAaz60hmT5Wvb/dISsqjQ+SCfTdRAP/4f
iI1lij+PDs3cgPzNhLGpZiX3+aEKOft+rvMa1VnVeSfLTHankhOdez1RVBhO/fbS
oMX64SWkpf+FC+7woVgQixglrkZaBpvqu5V/p3Y0KWia+nDXzBPDGsEiaXWPwZv1
Y7pAuUm2fLHyNMHXlp0ZK+yVhPL0RnlyIR2129gz8CgMBFhT1OrcbEK9v/qFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU7hxWRJPgtIkKSAy8gcQMdPvNHqkwHwYDVR0j
BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC
MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3
NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPncSwVa2Ylk+
WTpceiIQcwXlBfZuNsF7FZbpxiKzpEudT4iLPffyqTlWMwJmjHvghJJwc87Z65E8
ZtSZhTP1s/KyvKhgvi3njbjcN3e/21prhUbWyxvy2grhpi0OBAq+NutV9YpU/EMV
swPW4O5SjppzMHlEu6gyWMpPeRjGoaZEDC1oIqCqp1ICCLaxooB0xkJcQ/ZbmMWq
Y0ZfQkvdQweB4UTOZ63vv92zezX62Mg+kMnoaC2OyyDKzWhpaBf9XAChii6bJzGp
VxTxNyrMM3CEJr6biNUZaf2zhNG+XJB4n1uiHltlox/ArnnL25BRQjp3GNWOIehf
MJUetN0/5A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:23 2026 by rpki-client