This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
File:                     97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json)
Hash identifier:          Cfu//Hpw3tnybB2ejOpZHktlrpylUtxN0TQhAMM7V9o=
Subject key identifier:   B4:79:7D:94:99:6C:74:82:F8:D0:B7:86:96:8F:D0:0C:C6:9A:27:42
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Certificate issuer:       /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial:       61FEC61F1FC70D861FB719DB402BA8C49B113E62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 10:46:02 +0000
Manifest this update:     Sun 25 Jan 2026 10:41:02 +0000
Manifest next update:     Mon 26 Jan 2026 13:12:02 +0000
Files and hashes:         1: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: Z3qCofjBQRzI2lPa9h37sIUhNXzt9uGaN4tzxlhaG2c=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fe:c6:1f:1f:c7:0d:86:1f:b7:19:db:40:2b:a8:c4:9b:11:3e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
        Validity
            Not Before: Jan 25 10:41:02 2026 GMT
            Not After : Jan 26 13:12:02 2026 GMT
        Subject: CN=B4797D94996C7482F8D0B786968FD00CC69A2742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:2b:ac:32:49:a5:a1:9f:08:9f:e4:06:c6:
                    0d:38:a2:53:50:ca:27:4b:fe:fe:59:cb:3b:aa:9d:
                    c2:40:ac:b6:b9:56:1d:9f:01:da:56:07:69:9d:d6:
                    89:b2:4d:1b:51:d4:3d:22:37:52:ec:66:c5:dd:12:
                    64:7f:62:5d:41:87:63:bf:b4:73:83:a6:c9:36:cc:
                    c1:f1:34:19:36:fd:60:96:44:c1:f2:88:c7:42:ce:
                    20:67:fa:a1:dd:68:86:59:c5:43:d9:0c:31:19:26:
                    31:65:3d:06:85:be:f8:9f:2d:4c:0e:67:d1:c9:18:
                    13:ae:05:31:55:90:9f:6c:cf:19:f8:d0:b4:f9:a5:
                    a2:24:ae:76:9f:01:bd:66:6b:0e:66:84:03:b4:62:
                    c5:30:ae:18:9c:0e:48:ec:eb:b1:79:11:87:8e:3d:
                    7a:b5:80:be:41:0d:a9:7d:1f:7c:65:38:4b:09:0e:
                    b1:9f:fb:07:28:dd:dc:b2:0d:36:d6:45:e3:8a:da:
                    da:47:20:f7:88:85:a4:3a:1e:82:2a:f2:21:ad:78:
                    76:c0:a2:fa:7c:af:90:25:cb:fc:a9:18:53:90:7f:
                    95:48:12:af:2c:b9:59:75:54:62:42:26:b0:d6:b7:
                    c6:13:15:55:82:19:fd:51:f8:3f:9c:f9:b2:ca:85:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:79:7D:94:99:6C:74:82:F8:D0:B7:86:96:8F:D0:0C:C6:9A:27:42
            X509v3 Authority Key Identifier:
                keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b1:76:4f:5e:3b:1f:65:40:f4:e3:b2:2b:b8:94:ae:d1:12:
         39:fd:f5:1f:b8:c2:bd:a8:4a:e2:05:b2:8e:56:7f:5f:bb:a5:
         21:7b:3a:2d:26:20:5e:5a:41:9c:1b:f8:8b:13:4d:56:c7:8a:
         63:e9:2b:3a:20:a3:1a:52:e7:00:f9:6a:85:27:d0:0b:25:c7:
         df:49:3c:11:a8:e9:d6:a3:2e:6e:fe:d0:ca:84:36:d6:e0:d7:
         c2:49:bd:f4:70:35:cd:6c:2e:1b:fe:fe:dd:19:85:53:3d:a3:
         e9:60:8b:e9:ab:87:11:69:ec:03:b8:80:5b:b2:1b:85:e0:c0:
         2a:46:15:4c:83:53:1b:7c:c4:03:75:22:58:26:e2:79:8d:37:
         51:91:02:d3:6a:64:77:11:85:0b:74:4b:3f:53:9c:74:e2:a3:
         98:2b:58:cb:66:3c:b6:ed:6c:3c:f5:6f:11:74:1a:25:6d:ed:
         94:c3:e6:3c:54:da:77:b8:97:08:22:e3:64:35:ef:08:08:71:
         a9:78:e1:cd:06:1d:e8:54:9a:a5:4c:c3:46:2d:98:c0:3a:d7:
         d9:5d:c5:7e:87:6d:54:e7:7e:9d:8c:e3:d8:1f:09:f2:db:21:
         61:8c:0f:fe:22:0e:11:92:39:79:d3:e9:e6:4d:f7:5b:9c:39:
         bc:53:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:53:00 2026 by rpki-client