This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          AiYTauzoeI7DJz4w5ZnGwR92QEeviE8ZhF1Sa2PlzP4=
Subject key identifier:   13:43:E0:0B:76:53:02:07:B1:C9:2A:F9:AD:A3:50:5E:97:D6:2F:A0
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       318CEE28E1E9834592093B2DD56E0F82534171E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 08:35:58 +0000
Manifest this update:     Sun 25 Jan 2026 08:30:58 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:58 +0000
Files and hashes:         1: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          2: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          3: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          4: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: 7dsy3z4OlIYVu2uWa5AAiTIqI0mu/IR5ewHXIsQwD/s=)
                          5: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          6: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          7: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          8: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          9: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          10: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8c:ee:28:e1:e9:83:45:92:09:3b:2d:d5:6e:0f:82:53:41:71:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 25 08:30:58 2026 GMT
            Not After : Jan 26 10:01:58 2026 GMT
        Subject: CN=1343E00B76530207B1C92AF9ADA3505E97D62FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2b:5e:ed:e1:2b:db:9d:d3:8a:83:04:1b:67:
                    92:20:f8:f3:34:49:11:30:9d:0c:ec:b9:4f:3f:41:
                    24:1d:41:7b:64:74:d8:3c:b1:1e:3c:4d:e7:27:49:
                    10:c8:40:bc:81:28:95:e4:5a:1a:40:0d:86:54:b1:
                    7e:7f:73:4f:8e:cd:e2:e5:dd:67:2a:aa:39:d4:9c:
                    5f:ab:68:8c:b9:95:e4:f0:37:54:5a:a6:d3:91:0c:
                    c7:64:0a:65:b6:51:e4:46:36:17:71:12:d5:bb:3c:
                    fa:6e:e7:c7:be:ce:75:b0:4d:21:3f:7a:e4:a7:8f:
                    4c:fe:68:8d:34:1a:d7:84:8f:81:fc:0c:0d:b5:ca:
                    55:77:12:9c:91:4a:51:9b:80:79:80:46:65:f4:c0:
                    4d:73:d2:1a:f6:51:ae:df:be:85:1b:78:6d:85:da:
                    2b:86:91:50:40:9f:2e:97:32:66:d8:75:a4:35:76:
                    c7:dc:2b:56:bf:79:9f:85:d8:1e:fc:f9:8a:7a:a1:
                    a7:94:d1:ed:21:8d:40:38:a2:5a:84:6e:44:d1:a7:
                    92:57:f5:e1:ea:11:34:35:10:ce:d9:32:f4:b8:fa:
                    6c:5e:d5:85:1b:d7:a9:6e:84:51:d4:ff:58:05:8a:
                    a7:f3:81:26:84:82:cc:bd:d9:03:03:5a:f1:d2:0e:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:E0:0B:76:53:02:07:B1:C9:2A:F9:AD:A3:50:5E:97:D6:2F:A0
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:e6:16:85:cc:33:ea:e9:7b:4c:10:26:38:93:cc:c1:9e:
         99:41:13:18:88:2e:90:6b:80:b2:15:6d:dd:8b:41:15:59:5e:
         b7:e7:6a:9b:66:ec:b6:83:a0:cc:8c:f3:a3:c0:63:93:fc:01:
         f8:1c:82:01:e7:3f:46:39:03:b6:6d:09:f3:ee:44:12:01:9a:
         41:2e:cf:05:39:95:64:bc:f9:57:0d:84:e0:3a:8d:2b:86:13:
         c9:ac:6c:b5:7b:db:97:18:a7:ec:30:3b:bf:4e:14:53:ce:ec:
         3b:3a:78:cb:bd:e6:4b:8a:7d:38:92:57:74:85:3e:27:3b:f1:
         1d:4f:64:de:d9:56:31:9e:f9:40:7c:7c:88:cf:85:cd:79:1e:
         76:47:d1:7b:54:92:07:ce:c0:26:cc:cd:af:e0:41:c5:07:52:
         c8:9d:29:90:f6:b5:d9:37:f3:4d:24:72:2e:24:de:63:fb:ca:
         b2:ae:bf:95:24:79:46:e4:f1:fa:ba:7d:1e:69:98:74:66:ae:
         45:44:c7:9d:35:c2:cc:97:71:62:ad:7b:cd:0c:94:d1:c0:51:
         fa:d8:7f:63:04:a4:20:bf:b2:62:21:33:44:0b:25:37:f2:6e:
         3f:1e:31:22:8f:ac:47:59:9d:30:e0:35:ed:b9:9c:7f:ec:3a:
         25:03:73:ea
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMYzuKOHpg0WSCTst1W4PglNBcekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVF
ODYwMkE4NjAeFw0yNjAxMjUwODMwNThaFw0yNjAxMjYxMDAxNThaMDMxMTAvBgNV
BAMTKDEzNDNFMDBCNzY1MzAyMDdCMUM5MkFGOUFEQTM1MDVFOTdENjJGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3K17t4SvbndOKgwQbZ5Ig+PM0
SREwnQzsuU8/QSQdQXtkdNg8sR48TecnSRDIQLyBKJXkWhpADYZUsX5/c0+OzeLl
3WcqqjnUnF+raIy5leTwN1RaptORDMdkCmW2UeRGNhdxEtW7PPpu58e+znWwTSE/
euSnj0z+aI00GteEj4H8DA21ylV3EpyRSlGbgHmARmX0wE1z0hr2Ua7fvoUbeG2F
2iuGkVBAny6XMmbYdaQ1dsfcK1a/eZ+F2B78+Yp6oaeU0e0hjUA4olqEbkTRp5JX
9eHqETQ1EM7ZMvS4+mxe1YUb16luhFHU/1gFiqfzgSaEgsy92QMDWvHSDiGNAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUE0PgC3ZTAgexySr5raNQXpfWL6AwHwYDVR0j
BBgwFoAUbmVR3fFfy2SFAKcID6N9juhgKoYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTIzMjY0MS8wLzZFNjU1MURERjE1RkNCNjQ4NTAwQTcwODBGQTM3
RDhFRTg2MDJBODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUyMzI2NDEvMC82RTY1NTFEREYxNUZD
QjY0ODUwMEE3MDgwRkEzN0Q4RUU4NjAyQTg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASODmFoXMM+rp
e0wQJjiTzMGemUETGIgukGuAshVt3YtBFVlet+dqm2bstoOgzIzzo8Bjk/wB+ByC
Aec/RjkDtm0J8+5EEgGaQS7PBTmVZLz5Vw2E4DqNK4YTyaxstXvblxin7DA7v04U
U87sOzp4y73mS4p9OJJXdIU+JzvxHU9k3tlWMZ75QHx8iM+FzXkedkfRe1SSB87A
JszNr+BBxQdSyJ0pkPa12TfzTSRyLiTeY/vKsq6/lSR5RuTx+rp9HmmYdGauRUTH
nTXCzJdxYq17zQyU0cBR+th/YwSkIL+yYiEzRAslN/JuPx4xIo+sR1mdMOA17bmc
f+w6JQNz6g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:23 2026 by rpki-client