This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          01x0pDRVa43lTgEnCmzmqAR3HbOY5bor0B4n1cm82GI=
Subject key identifier:   A5:3C:1F:86:2C:5E:D9:FF:BE:1A:F0:32:CD:1D:0B:28:FF:F4:76:EC
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       2B13B5EDB08CA2BC037F2728D7DC5723B3F27125
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          0A
Signing time:             Mon 26 Jan 2026 05:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 04:56:02 +0000
Manifest next update:     Tue 27 Jan 2026 05:48:02 +0000
Files and hashes:         1: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          2: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          3: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          4: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          5: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          6: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          7: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          8: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          9: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          10: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          11: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          12: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          13: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          14: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          15: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          16: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          17: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          18: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          19: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          20: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          21: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          22: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          23: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          24: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          25: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          26: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: EtzvoTuViVWifMcp9if+6kLCkwfIDMGth8pNnEvGB6I=)
                          27: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          28: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          29: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          30: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          31: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          32: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 05:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:13:b5:ed:b0:8c:a2:bc:03:7f:27:28:d7:dc:57:23:b3:f2:71:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Jan 26 04:56:02 2026 GMT
            Not After : Jan 27 05:48:02 2026 GMT
        Subject: CN=A53C1F862C5ED9FFBE1AF032CD1D0B28FFF476EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:63:9a:36:17:10:a4:c7:b3:4a:81:7e:80:
                    a7:96:5f:65:25:d2:12:af:34:e8:c7:cf:29:d8:d8:
                    29:c6:a9:6e:55:ea:c9:f0:65:3c:bc:dd:df:42:fc:
                    6b:75:0e:d5:b5:58:c0:d1:f3:b3:3b:82:4b:dc:d4:
                    3d:1b:e8:17:eb:35:cc:4d:e3:83:c9:6a:b8:65:f8:
                    31:be:4c:af:e7:2f:2d:de:92:02:4d:03:5b:2a:59:
                    ea:8d:f3:42:65:fd:da:e5:91:2b:0d:a5:02:5a:f3:
                    e2:88:a9:3c:a3:3a:69:04:0c:7d:6d:5b:4b:d0:21:
                    5b:cd:6c:7c:f5:59:69:db:47:4c:13:bd:84:d4:11:
                    a8:7f:71:ee:0f:23:4e:d1:48:d7:e5:b1:69:4b:89:
                    92:44:2a:ab:52:59:aa:0e:45:e7:68:14:3c:4b:38:
                    f9:c7:21:02:39:2f:eb:9f:ef:db:80:24:cb:a3:f3:
                    1b:28:73:d4:37:e6:99:23:8f:0d:c7:d7:b4:4a:d2:
                    e9:ce:47:be:f2:25:0c:8d:bf:b7:19:93:1e:85:02:
                    0f:e5:e9:af:1d:b3:77:ef:29:6e:e5:bf:d3:0a:16:
                    65:ad:da:0f:9c:cb:28:b8:37:43:cc:d9:47:0b:68:
                    06:ff:37:8b:8e:29:86:6b:4c:bb:e0:5d:4d:b0:de:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:1F:86:2C:5E:D9:FF:BE:1A:F0:32:CD:1D:0B:28:FF:F4:76:EC
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:34:43:b4:b6:9f:33:a8:8e:6f:7a:b5:d7:12:75:1b:30:c8:
         4a:48:53:5b:fa:d4:0c:3f:07:24:38:95:f5:bd:e4:b8:88:e4:
         ee:85:4c:4b:a1:3c:23:ff:18:06:b7:68:e5:89:e9:13:c5:ab:
         7f:34:f3:aa:f6:1b:55:40:28:6f:14:36:11:52:af:23:2e:a1:
         07:73:5b:4e:9d:f1:50:b0:5b:73:99:f0:c2:04:ca:34:71:e7:
         9a:6a:0f:91:89:b7:60:58:b9:09:35:c3:6f:22:6f:cd:54:52:
         2a:d5:28:30:cb:7b:47:fd:17:42:bf:20:48:6c:4f:ea:ee:a0:
         87:09:04:94:6f:8e:8a:e0:3b:45:99:19:e9:eb:00:f9:25:f5:
         bd:86:c4:06:b1:74:23:96:f5:dc:c0:d7:67:eb:a6:98:cd:49:
         60:60:0c:3b:38:c4:44:54:8b:73:fe:83:fc:16:ee:38:05:42:
         3a:aa:d0:42:0b:f2:7c:20:7a:bd:59:c5:03:05:71:b7:3f:8c:
         76:6f:66:2d:b6:4a:ae:0b:6c:38:bc:5c:9e:34:66:b2:b9:13:
         64:7a:62:83:78:d4:c6:8a:ec:47:e6:cc:0f:8d:49:02:26:f7:
         2d:cb:74:d1:6e:1a:80:54:ca:8a:81:7c:61:4c:14:02:e3:0a:
         62:ca:3c:ae
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKxO17bCMorwDfyco19xXI7PycSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz
Rjc0NzQzNDAeFw0yNjAxMjYwNDU2MDJaFw0yNjAxMjcwNTQ4MDJaMDMxMTAvBgNV
BAMTKEE1M0MxRjg2MkM1RUQ5RkZCRTFBRjAzMkNEMUQwQjI4RkZGNDc2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1GOaNhcQpMezSoF+gKeWX2Ul
0hKvNOjHzynY2CnGqW5V6snwZTy83d9C/Gt1DtW1WMDR87M7gkvc1D0b6BfrNcxN
44PJarhl+DG+TK/nLy3ekgJNA1sqWeqN80Jl/drlkSsNpQJa8+KIqTyjOmkEDH1t
W0vQIVvNbHz1WWnbR0wTvYTUEah/ce4PI07RSNflsWlLiZJEKqtSWaoORedoFDxL
OPnHIQI5L+uf79uAJMuj8xsoc9Q35pkjjw3H17RK0unOR77yJQyNv7cZkx6FAg/l
6a8ds3fvKW7lv9MKFmWt2g+cyyi4N0PM2UcLaAb/N4uOKYZrTLvgXU2w3iNjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUpTwfhixe2f++GvAyzR0LKP/0duwwHwYDVR0j
BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2
NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zRUMyRDg4NEE1NEU4
NzhEODQ4RURFNDI1MTc0NjYxNTNGNzQ3NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzRDtLafM6iO
b3q11xJ1GzDISkhTW/rUDD8HJDiV9b3kuIjk7oVMS6E8I/8YBrdo5YnpE8WrfzTz
qvYbVUAobxQ2EVKvIy6hB3NbTp3xULBbc5nwwgTKNHHnmmoPkYm3YFi5CTXDbyJv
zVRSKtUoMMt7R/0XQr8gSGxP6u6ghwkElG+OiuA7RZkZ6esA+SX1vYbEBrF0I5b1
3MDXZ+ummM1JYGAMOzjERFSLc/6D/BbuOAVCOqrQQgvyfCB6vVnFAwVxtz+Mdm9m
LbZKrgtsOLxcnjRmsrkTZHpig3jUxorsR+bMD41JAib3Lct00W4agFTKioF8YUwU
AuMKYso8rg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:18:30 2026 by rpki-client