This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File:                     71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier:          tuV83oQuNvibk3w39xePxPhrXR7Upra1YdfxolWztIo=
Subject key identifier:   C5:16:71:BE:D7:4E:A4:BE:2C:13:E7:2F:0C:3E:6D:17:6D:A3:32:4D
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer:       /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial:       2B2FD81B62AA5E41AAF437C2983BAF343D0FEF94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 08:10:58 +0000
Manifest this update:     Sun 25 Jan 2026 08:05:58 +0000
Manifest next update:     Mon 26 Jan 2026 11:34:58 +0000
Files and hashes:         1: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
                          2: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
                          3: 3231392e3233342e382e302f32312d3234203d3e20313337343433.roa (hash: InSwuZSRpa1hhSgqMKbUhpIYd9PfQTeJXRw9hEub0mo=)
                          4: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
                          5: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
                          6: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
                          7: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
                          8: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
                          9: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
                          10: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=)
                          11: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: fVyOlKUXf73Qk9/7zbOQt+oREWO+fWDZN7ohNapOdGY=)
                          12: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
                          13: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=)
                          14: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
                          15: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
                          16: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
                          17: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 11:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2f:d8:1b:62:aa:5e:41:aa:f4:37:c2:98:3b:af:34:3d:0f:ef:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
        Validity
            Not Before: Jan 25 08:05:58 2026 GMT
            Not After : Jan 26 11:34:58 2026 GMT
        Subject: CN=C51671BED74EA4BE2C13E72F0C3E6D176DA3324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:87:9e:8d:d8:3c:8a:1d:1a:5f:19:03:0c:
                    60:b4:09:23:88:d8:55:d1:79:06:c9:94:b2:bf:1b:
                    09:41:4e:22:71:25:99:61:5b:f8:85:94:8a:e1:d6:
                    40:ec:72:b2:46:df:68:37:9f:87:79:de:67:0a:59:
                    65:97:c0:fb:5e:4c:2d:70:5f:b9:1d:67:ef:cf:69:
                    db:8b:5b:de:86:ff:4f:68:29:8e:f1:03:9c:51:87:
                    95:8c:c4:48:5a:43:62:3d:5a:85:cd:eb:3f:00:8c:
                    61:a4:1d:5d:1f:3b:fc:6f:e0:e3:3a:e0:12:23:9c:
                    b2:52:c7:3a:fe:af:bd:fd:76:09:7a:b8:a1:1e:42:
                    42:12:5d:bb:01:34:dc:9e:0e:6d:de:d5:79:87:59:
                    c4:d5:fa:c8:bd:69:70:ee:5b:20:3f:cd:af:1b:93:
                    9e:cc:0f:bb:7c:8e:18:2d:7b:7b:6e:0e:21:ca:18:
                    05:ea:69:a9:1e:7e:8b:df:43:b2:8b:f2:d0:dd:cc:
                    df:7b:ff:70:1c:d9:16:60:9e:61:a0:15:31:47:08:
                    af:72:53:33:57:a8:86:50:d1:3e:57:a9:72:33:23:
                    b2:fb:d1:b5:50:2b:ab:c3:96:a5:e3:09:4e:7f:70:
                    f8:f9:e9:5e:de:64:9e:39:fe:9e:54:25:7b:6c:14:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:71:BE:D7:4E:A4:BE:2C:13:E7:2F:0C:3E:6D:17:6D:A3:32:4D
            X509v3 Authority Key Identifier:
                keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:ae:d2:9b:25:be:48:56:49:fc:f3:6f:3b:49:dc:ad:cf:
         db:d7:00:ea:a0:f4:f2:8a:5c:11:88:9f:0c:51:da:1e:0f:43:
         f3:d4:e4:cd:df:01:bb:86:85:dd:7e:dc:f6:10:01:1c:e9:14:
         d1:6b:c8:fa:fa:8b:f1:f8:8b:f4:21:5c:dc:24:65:fe:d1:33:
         15:ba:78:ed:86:22:a3:36:a1:7d:69:b0:8c:82:f1:5d:0e:29:
         f5:7b:b9:fb:11:d4:40:e6:65:63:1c:a6:7d:f1:5c:bf:ba:99:
         0b:54:f0:6f:db:a2:2b:a7:4b:89:3c:23:bc:1a:6b:3b:85:fc:
         a4:9f:60:39:28:91:e9:e6:08:de:a2:60:3e:cb:ee:9e:76:aa:
         3f:52:ad:80:0a:33:8e:9e:57:0f:3c:f6:0a:b4:4c:70:a2:0f:
         c3:f9:33:5e:b5:cf:e8:e0:c8:de:cc:4a:1a:48:fa:22:12:84:
         19:45:36:e2:54:3b:5d:99:2b:0f:fb:72:84:60:69:c4:be:47:
         aa:71:c8:0c:b3:67:10:bd:41:9f:9c:67:a1:74:30:3b:c4:db:
         77:6f:40:9f:cf:1a:43:1b:b1:db:9b:42:9c:8f:d9:00:81:ec:
         68:a4:16:a5:3f:57:b2:80:ce:f6:a6:76:f8:fe:b6:e6:d2:1a:
         93:fd:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:07 2026 by rpki-client