This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
File:                     EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json)
Hash identifier:          FmCMOS9Td4V2elq1AGbVHY3B76rwZKLPhPslMYrZW2o=
Subject key identifier:   B8:CC:D1:16:34:19:36:D1:6A:C0:EB:00:87:9F:C6:61:FC:04:3B:C2
Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
Certificate issuer:       /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
Certificate serial:       463C62CD87BEBD34841A99251F4B89338910F9EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
Manifest number:          05
Signing time:             Sun 25 Jan 2026 11:56:02 +0000
Manifest this update:     Sun 25 Jan 2026 11:51:02 +0000
Manifest next update:     Mon 26 Jan 2026 13:04:02 +0000
Files and hashes:         1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: 0E1JMyt+5B5ag5p0AeRDzx+EMZ896bcUS/YsmhJ58xU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 13:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3c:62:cd:87:be:bd:34:84:1a:99:25:1f:4b:89:33:89:10:f9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
        Validity
            Not Before: Jan 25 11:51:02 2026 GMT
            Not After : Jan 26 13:04:02 2026 GMT
        Subject: CN=B8CCD116341936D16AC0EB00879FC661FC043BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:d5:38:ff:3e:38:31:c6:4b:e3:83:9e:38:
                    f9:29:bc:fe:69:39:bf:ae:f3:8a:be:a8:cc:c0:05:
                    c2:c6:e0:6c:29:cb:01:ce:02:c8:5a:6b:a6:04:eb:
                    93:52:49:e5:27:f0:17:5e:d4:73:8f:26:ce:d9:02:
                    dc:9f:d9:5d:7c:c1:02:1d:6d:3a:4d:8b:d7:cd:f8:
                    fd:92:03:77:92:0a:38:a9:9b:7c:4f:a7:a5:4f:c3:
                    40:90:ad:cd:15:03:ff:96:56:36:f9:79:5a:fd:91:
                    7b:4e:61:ce:30:28:2f:5d:81:66:76:84:62:fc:ea:
                    b2:24:b1:b3:79:f0:94:37:1e:04:86:d9:65:1e:d6:
                    17:38:32:0f:99:8d:8b:98:08:56:50:34:a9:22:a9:
                    d1:c5:27:46:bf:c2:cc:1e:19:82:ad:4a:e4:5a:8a:
                    1f:83:d9:2d:72:5a:35:99:f1:06:73:6e:f9:3b:f8:
                    5a:1f:2e:55:f2:e9:15:4a:08:9f:76:5c:5f:62:ae:
                    e4:81:1d:9c:23:2c:ef:54:37:82:74:7e:66:5e:3e:
                    26:72:e3:c6:de:82:0c:6f:f3:f0:70:45:88:01:ef:
                    db:9f:57:1b:14:15:c0:6c:db:5e:d6:4d:ee:ff:18:
                    d2:1e:b6:c4:9b:35:b9:40:b3:d7:c8:57:85:57:86:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CC:D1:16:34:19:36:D1:6A:C0:EB:00:87:9F:C6:61:FC:04:3B:C2
            X509v3 Authority Key Identifier:
                keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:a4:78:60:e4:f5:8f:11:f8:fb:e3:88:c6:92:80:24:86:
         11:97:52:7a:8c:79:93:90:46:16:d2:6d:2a:37:03:74:c1:89:
         3a:b9:54:b4:88:f9:b9:8f:96:f4:17:ea:49:a3:af:f7:52:da:
         0e:d8:78:e1:b0:dc:91:18:76:11:79:ed:9c:44:f0:50:bb:79:
         38:60:b9:92:7c:ac:90:da:84:f7:f8:3f:a7:83:db:40:77:d8:
         77:95:ba:72:94:00:93:28:a6:b1:03:c4:d5:f4:e7:e8:02:67:
         90:7a:f1:8b:d0:4f:45:21:4d:31:f1:da:52:d7:fe:a3:ec:ef:
         da:bc:b8:e0:b8:0f:d4:a4:b5:f1:f4:de:1c:4f:ec:a5:4f:77:
         5a:b2:13:94:d8:58:69:97:83:0e:b1:e8:ec:d9:e7:62:13:63:
         2f:eb:67:4f:84:7d:40:22:f0:fe:a8:af:e3:93:fc:e2:0c:c3:
         51:56:ae:06:ec:c4:eb:94:29:3d:e5:1f:1c:3e:ec:e5:1b:5f:
         55:06:bb:0f:1a:8d:2d:36:5f:19:7c:29:12:e1:a7:80:88:67:
         f4:64:05:65:c1:58:ed:40:0f:34:c3:ca:c9:aa:cb:43:13:cc:
         35:d8:4c:4e:53:95:4c:eb:28:9e:3d:16:09:73:fd:33:a9:23:
         ad:1c:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:47 2026 by rpki-client