This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
File:                     B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json)
Hash identifier:          qEEUp3MNmWIPbV+QXAPIniT92o8hT5ERA2ON/guf3uw=
Subject key identifier:   B4:0F:C7:AC:72:FC:FA:39:38:F8:CD:D5:B0:08:4A:CA:C6:4D:A8:32
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       58FF7E85625ADE04F2874EEFE7D2DBCD29E35AF0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
Manifest number:          06
Signing time:             Thu 22 Jan 2026 22:45:52 +0000
Manifest this update:     Thu 22 Jan 2026 22:40:52 +0000
Manifest next update:     Fri 23 Jan 2026 22:51:52 +0000
Files and hashes:         1: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=)
                          2: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=)
                          3: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=)
                          4: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=)
                          5: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: L+bFNV4u+W5ImM61lZi3k3SFJLaQaODJs46cMI0ElKg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 22:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ff:7e:85:62:5a:de:04:f2:87:4e:ef:e7:d2:db:cd:29:e3:5a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Jan 22 22:40:52 2026 GMT
            Not After : Jan 23 22:51:52 2026 GMT
        Subject: CN=B40FC7AC72FCFA3938F8CDD5B0084ACAC64DA832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:84:a1:e4:17:f2:c7:5c:0f:b9:e6:52:82:
                    b8:a5:48:ee:ab:f4:73:fe:fd:3e:8f:88:fc:40:89:
                    72:bc:e1:ac:90:8a:86:ec:46:1c:b0:3e:91:a6:3f:
                    e9:69:f8:1e:02:b9:a1:dd:b1:5d:69:bf:0c:a5:4b:
                    df:9d:9a:68:f8:74:dc:8d:37:1f:4d:31:35:00:1d:
                    1c:a9:1f:35:e5:79:fa:44:67:c3:b3:9a:cf:b4:9e:
                    e1:ad:c4:3d:76:11:9c:ca:14:06:8b:1d:cb:29:2d:
                    5d:db:d9:10:26:db:e5:42:fb:a1:05:46:b2:0f:b5:
                    50:3a:7a:41:e3:3c:51:e7:de:1d:d3:56:b6:80:d2:
                    b0:50:c2:e4:d3:cd:ff:12:e1:c0:b5:08:ce:a2:89:
                    30:09:31:1c:ac:f2:95:be:d7:43:cd:0a:9c:c5:72:
                    68:1a:29:39:64:ce:fc:87:7f:62:40:81:a1:94:b8:
                    14:71:e0:0e:ad:57:65:a6:7c:0e:2e:0d:1c:68:e3:
                    67:0f:3b:26:c6:83:58:8f:90:3d:00:a2:6b:78:9f:
                    aa:b1:a3:72:88:5c:39:fc:c9:bc:e2:44:86:e4:4d:
                    50:6a:a3:6f:17:c8:ca:f9:88:6e:10:2b:1d:46:ea:
                    83:76:eb:61:bb:3c:d7:01:f3:a0:a6:89:42:88:09:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:C7:AC:72:FC:FA:39:38:F8:CD:D5:B0:08:4A:CA:C6:4D:A8:32
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:e5:6a:9e:b7:50:64:b7:de:60:c6:79:b5:78:e8:c8:0a:
         83:b6:fa:6b:e6:2a:60:c2:28:03:df:06:a4:fa:61:30:7e:aa:
         6d:a9:bc:9a:ab:c3:2a:ed:bb:a2:f5:92:7f:f5:7e:24:51:65:
         45:a6:1e:49:25:1e:74:0a:89:55:70:da:a9:18:93:57:94:fd:
         ac:36:e3:76:2e:0f:ba:e9:40:34:c6:0f:70:84:fe:67:5d:98:
         02:25:2a:65:bd:e8:20:bc:51:ff:19:b0:9f:da:80:f1:5d:3b:
         b1:17:d1:b5:d3:a7:ca:29:97:ee:0b:48:68:3a:ee:88:52:fa:
         80:30:19:c6:ae:90:f2:74:6e:05:13:6a:4c:1d:5e:fa:4a:77:
         4b:b3:4c:94:a3:c3:50:43:de:63:d5:cf:97:cc:9c:ab:0e:6c:
         59:90:d4:be:4d:c3:b6:e3:16:72:23:ee:36:8c:9b:d0:be:2b:
         36:66:d3:35:d1:2d:00:d6:cc:70:68:c0:0c:fd:d5:69:e4:54:
         27:81:af:fe:4a:e6:a9:90:27:17:67:08:8f:1f:e4:ec:e6:b9:
         77:9c:b7:3a:ea:3d:ca:8c:1d:b9:a9:0a:57:9a:3c:70:f0:e4:
         db:23:2c:2c:ca:e4:de:71:e9:f4:ae:97:34:19:2d:76:c9:55:
         05:a4:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:19:37 2026 by rpki-client