This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File:                     845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier:          WP4VFlisMURPJ6d3/T4nKotk4jKgw7Hb5Y3Gpov6NqA=
Subject key identifier:   98:95:C6:AD:D4:00:B6:7F:CA:EC:F2:C0:75:87:C4:DB:15:93:14:8B
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       5AC6F7BDBF3DEC1213E98DD34EC90A6D020DC759
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number:          0C
Signing time:             Sun 25 Jan 2026 07:50:57 +0000
Manifest this update:     Sun 25 Jan 2026 07:45:57 +0000
Manifest next update:     Mon 26 Jan 2026 11:23:57 +0000
Files and hashes:         1: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: qkwBROJ6D65yQV0DuldP1haPRfoLPTK6JdzgaA9fJcs=)
                          2: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
                          3: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
                          4: AS244400.roa (hash: bhI1UKxrm3GLN+fc8qGvC+xkunPjqFis517LeIEdzh8=)
                          5: AS24400.roa (hash: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s=)
                          6: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
                          7: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
                          8: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
                          9: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
                          10: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
                          11: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
                          12: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
                          13: AS9808.roa (hash: E/6QOHAzgXf03QFXs8qc4cA7hdE0GEiziY0xLK1ClFM=)
                          14: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
                          15: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
                          16: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
                          17: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
                          18: AS146788.roa (hash: zpRF+orMm1cXnAI2EXsq1WNqOE/Y017y0m/dOiaCEbE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 11:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:f7:bd:bf:3d:ec:12:13:e9:8d:d3:4e:c9:0a:6d:02:0d:c7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Jan 25 07:45:57 2026 GMT
            Not After : Jan 26 11:23:57 2026 GMT
        Subject: CN=9895C6ADD400B67FCAECF2C07587C4DB1593148B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:db:f2:cd:c5:4a:06:e2:b7:62:d4:0d:70:
                    91:9a:bd:30:e2:ee:da:90:44:76:1a:21:f9:7e:39:
                    2b:e3:a2:0f:fa:40:91:be:61:e1:27:be:9b:ed:fa:
                    94:58:2a:dc:3d:2b:27:71:d4:94:e2:9d:24:cb:77:
                    9b:12:4b:f7:fe:3e:c2:2a:2c:70:bf:16:af:b9:2f:
                    33:aa:0c:da:d1:19:d3:36:82:33:fb:45:26:b5:57:
                    1e:99:4c:03:4e:73:5e:b8:94:23:9c:5c:c4:b9:91:
                    45:92:f3:46:a4:23:55:12:5f:c6:5f:72:d7:66:05:
                    ce:f7:10:8b:3b:b2:2c:e4:3f:23:eb:68:3b:54:fd:
                    be:5c:fe:12:2e:32:c4:6e:d9:9a:7d:c0:46:27:c2:
                    62:53:1a:c0:a4:91:f2:94:b6:c5:be:4b:45:6d:29:
                    52:3b:81:c0:15:a2:d1:f8:da:12:87:c3:ac:15:a2:
                    3c:02:08:8a:a7:c3:e8:97:b0:24:02:b6:73:4c:9c:
                    9c:1d:d6:a0:fa:d3:0b:64:ea:60:21:39:d7:2c:b9:
                    bd:89:ee:bf:f9:3e:0f:f3:ee:bc:32:2b:ce:fb:41:
                    ba:fb:37:de:42:f2:bb:46:7e:25:64:11:40:60:ec:
                    02:28:f8:4d:4f:82:ea:7c:9d:fc:d2:99:eb:5c:6e:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:95:C6:AD:D4:00:B6:7F:CA:EC:F2:C0:75:87:C4:DB:15:93:14:8B
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:e8:26:52:38:ac:22:d3:30:22:25:ec:cf:0d:f5:c2:4f:
         19:be:6b:5b:0a:b2:b7:d1:cf:9f:73:61:25:6b:c2:e8:d4:02:
         4f:b5:62:9c:13:02:dc:81:85:b8:2b:25:cb:35:e6:c8:d8:e5:
         9c:c0:65:8d:2b:c7:50:06:26:7f:2d:25:c2:3e:3b:8a:c8:79:
         e4:80:17:78:6c:5f:a2:9d:3a:23:a7:3c:d9:46:3b:a7:14:9e:
         70:44:85:0d:87:69:a0:1b:89:a3:b9:bd:7c:2b:a5:29:2b:a3:
         15:ef:9e:91:91:a6:00:29:ee:9d:3e:14:2a:a3:5c:09:95:fc:
         97:a4:cd:df:95:9b:5b:8b:f8:d0:fe:1a:d0:d3:cb:df:17:dc:
         17:34:ba:68:38:d2:64:5e:4c:b4:d0:0c:44:4e:43:48:bc:c9:
         d1:57:aa:c6:fc:a6:42:21:12:bb:ea:6c:cc:f2:12:e1:b3:57:
         e7:70:d8:08:1e:36:0b:4e:19:c3:ce:f0:c6:4f:a8:7d:60:13:
         99:8a:8d:6e:9b:2a:5c:f8:0f:3c:ed:8d:14:f6:c5:17:ea:f1:
         e3:7e:52:c5:dc:50:27:bf:09:b4:25:c7:7e:f3:2c:46:12:43:
         5f:f1:e7:53:db:2d:7f:cc:4e:b6:cf:66:6f:49:b6:00:ba:30:
         af:80:14:61
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWsb3vb897BIT6Y3TTskKbQINx1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2
Nzk2RjBGNjAeFw0yNjAxMjUwNzQ1NTdaFw0yNjAxMjYxMTIzNTdaMDMxMTAvBgNV
BAMTKDk4OTVDNkFERDQwMEI2N0ZDQUVDRjJDMDc1ODdDNERCMTU5MzE0OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBNvyzcVKBuK3YtQNcJGavTDi
7tqQRHYaIfl+OSvjog/6QJG+YeEnvpvt+pRYKtw9Kydx1JTinSTLd5sSS/f+PsIq
LHC/Fq+5LzOqDNrRGdM2gjP7RSa1Vx6ZTANOc164lCOcXMS5kUWS80akI1USX8Zf
ctdmBc73EIs7sizkPyPraDtU/b5c/hIuMsRu2Zp9wEYnwmJTGsCkkfKUtsW+S0Vt
KVI7gcAVotH42hKHw6wVojwCCIqnw+iXsCQCtnNMnJwd1qD60wtk6mAhOdcsub2J
7r/5Pg/z7rwyK877Qbr7N95C8rtGfiVkEUBg7AIo+E1Pgup8nfzSmetcbgrJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUmJXGrdQAtn/K7PLAdYfE2xWTFIswHwYDVR0j
BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4
OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC84NDVCQjMwN0UyQTEx
MDBFODlGQTBDOTM5QTkzODk2ODY3OTZGMEY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeHoJlI4rCLT
MCIl7M8N9cJPGb5rWwqyt9HPn3NhJWvC6NQCT7VinBMC3IGFuCslyzXmyNjlnMBl
jSvHUAYmfy0lwj47ish55IAXeGxfop06I6c82UY7pxSecESFDYdpoBuJo7m9fCul
KSujFe+ekZGmACnunT4UKqNcCZX8l6TN35WbW4v40P4a0NPL3xfcFzS6aDjSZF5M
tNAMRE5DSLzJ0VeqxvymQiESu+pszPIS4bNX53DYCB42C04Zw87wxk+ofWATmYqN
bpsqXPgPPO2NFPbFF+rx435SxdxQJ78JtCXHfvMsRhJDX/HnU9stf8xOts9mb0m2
ALowr4AUYQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:53 2026 by rpki-client