This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
File:                     909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json)
Hash identifier:          iTz5a1VFa8pM0Bain8k6UctE2bfz/eL1i771tS7ZL7Q=
Subject key identifier:   4F:CD:6D:53:4C:C5:26:52:11:B0:89:96:C8:4F:11:B2:5A:1C:B6:AC
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       27E8BFABBE00999D38895838762F6601251F7E21
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
Manifest number:          0A
Signing time:             Sun 25 Jan 2026 23:16:02 +0000
Manifest this update:     Sun 25 Jan 2026 23:11:02 +0000
Manifest next update:     Tue 27 Jan 2026 01:46:02 +0000
Files and hashes:         1: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=)
                          2: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=)
                          3: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=)
                          4: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=)
                          5: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=)
                          6: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=)
                          7: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=)
                          8: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=)
                          9: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=)
                          10: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: Gpj+03bdrjqUMpmsXMWAsIkjkWkdi0w4CSF0I089DQs=)
                          11: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=)
                          12: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=)
                          13: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=)
                          14: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=)
                          15: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=)
                          16: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 01:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e8:bf:ab:be:00:99:9d:38:89:58:38:76:2f:66:01:25:1f:7e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Jan 25 23:11:02 2026 GMT
            Not After : Jan 27 01:46:02 2026 GMT
        Subject: CN=4FCD6D534CC5265211B08996C84F11B25A1CB6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:1f:b6:85:59:99:72:91:da:f1:70:8d:fd:
                    71:ef:fd:bb:98:41:0a:0c:0f:c5:45:4d:87:ed:9f:
                    17:54:53:12:00:7a:38:45:d1:dc:9a:2e:b8:08:74:
                    09:6e:dd:94:f5:59:37:17:77:1c:5c:99:05:8e:19:
                    63:45:ef:39:bf:bf:a8:da:9a:82:86:d5:1e:02:41:
                    5a:5f:6f:f8:e6:84:6f:19:fe:a2:26:87:ba:f7:8c:
                    bb:26:e5:9f:52:8f:46:57:cf:2f:9d:17:a3:e1:64:
                    b3:5a:1b:e7:4e:d0:fc:7b:65:01:b5:d5:cf:af:18:
                    aa:27:84:f3:0b:40:41:f6:67:c4:89:17:fe:1e:1e:
                    8c:e7:a7:8a:f1:f2:e1:17:3e:90:8e:d4:01:be:17:
                    ed:64:82:2d:2c:01:1b:4e:7b:a6:2a:12:14:f8:db:
                    37:68:e5:bc:93:19:97:c4:f1:30:9b:cf:49:76:e2:
                    85:96:05:a0:ca:22:71:02:4b:37:61:45:53:ae:f0:
                    2f:b1:fd:5d:b4:87:56:92:41:12:54:2d:8c:74:28:
                    ee:61:71:bf:b3:0c:e5:d7:96:50:11:e8:ec:66:53:
                    e4:61:e5:f1:cb:c4:64:f5:03:3a:a5:d4:5a:ab:8f:
                    00:51:df:fb:30:08:7e:3e:f2:90:e4:fd:4a:ad:28:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CD:6D:53:4C:C5:26:52:11:B0:89:96:C8:4F:11:B2:5A:1C:B6:AC
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:ae:d3:64:82:cc:d9:88:f5:d9:00:52:2d:60:11:86:ad:23:
         e5:f9:96:b0:8d:b5:3d:7c:6e:81:b2:1d:5e:80:64:c4:bc:6b:
         cd:c1:ea:9e:64:ed:89:63:8c:c8:aa:09:0e:01:a1:c4:85:01:
         2f:8d:d5:43:83:32:55:e6:64:76:5c:34:74:74:43:62:7a:2c:
         90:83:ee:cd:3f:17:e5:ff:1a:a7:40:d9:89:26:11:51:ec:6e:
         ba:37:75:7a:5b:7a:ce:00:bf:07:1b:e0:37:56:f1:82:8a:19:
         bc:7b:a8:19:bc:8d:20:15:64:f7:50:35:ae:53:c5:95:ac:c5:
         37:c9:f0:eb:52:ef:52:3c:38:81:c0:82:c8:15:51:b8:00:ef:
         e0:e0:46:03:e5:ea:66:af:84:03:2b:70:38:ee:f7:4c:d6:db:
         f4:6c:e8:bd:05:f7:14:da:65:96:95:44:06:d8:cd:44:de:e3:
         b2:50:cf:3f:c7:8f:54:1b:67:bc:b8:38:de:c0:1d:18:64:49:
         9c:71:97:bc:39:f7:b1:0d:24:8c:b3:ee:29:2a:2c:d8:26:5a:
         7d:8a:05:3b:49:1e:ca:0f:72:1d:12:81:8d:07:fc:97:8c:3b:
         24:29:81:ee:85:9c:b8:80:dc:c6:e8:67:c3:94:d0:ec:71:e3:
         b4:8f:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:01:58 2026 by rpki-client