This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          HLbPpNtoPzBkg8MZ0PPp9LZKAfPIRpxpa7jKm35vzuM=
Subject key identifier:   37:47:DB:4A:5F:B9:BD:97:D8:27:8B:0C:7B:65:E8:AA:44:15:AC:EF
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       0E8457DD64180D6CDFFBB9E2B1B4EE3857B75ED8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          0A
Signing time:             Sun 25 Jan 2026 23:21:02 +0000
Manifest this update:     Sun 25 Jan 2026 23:16:02 +0000
Manifest next update:     Tue 27 Jan 2026 01:13:02 +0000
Files and hashes:         1: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          2: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          3: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          4: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: Wgir7/l/5sjFIv1nYau9fn8ICSb40FcELQKtU8Vctf4=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          6: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          7: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          8: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          9: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          10: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:84:57:dd:64:18:0d:6c:df:fb:b9:e2:b1:b4:ee:38:57:b7:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jan 25 23:16:02 2026 GMT
            Not After : Jan 27 01:13:02 2026 GMT
        Subject: CN=3747DB4A5FB9BD97D8278B0C7B65E8AA4415ACEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:fe:e3:c4:f6:db:6c:e8:6d:20:a7:84:f7:
                    78:1f:dd:64:95:7e:f5:63:a7:67:7e:f4:1e:8b:3d:
                    fe:a6:79:2c:cc:84:7c:1c:ac:16:71:59:e7:d4:97:
                    35:99:d5:a5:30:4e:ad:a8:11:f8:ac:13:75:b6:57:
                    5a:b7:3e:ba:8e:2a:9b:04:90:55:bf:9d:27:e1:9d:
                    e6:c2:51:d4:6c:d7:ad:92:1d:8e:c7:b2:7b:9f:1b:
                    9f:2f:85:44:4a:fc:ba:48:4b:f6:fc:99:af:19:fd:
                    54:80:96:c4:d8:7c:96:80:90:7c:54:54:ff:c3:9c:
                    c5:05:7c:44:96:d0:72:d5:64:bd:61:f7:75:bd:66:
                    2c:64:27:76:f5:ff:59:54:d1:66:a4:a5:77:bb:d3:
                    be:a4:15:dd:3c:bd:a3:e5:d6:1f:82:5a:23:ee:6d:
                    9b:51:f1:cd:18:71:3b:21:2e:3e:32:81:a6:2a:5e:
                    52:06:ba:77:07:de:d7:98:21:a2:54:d7:0b:2a:33:
                    cf:e2:f0:c7:b2:01:81:0e:fc:b0:c2:16:5d:cd:ad:
                    2a:47:c6:78:09:82:82:de:f9:15:fe:09:7b:92:20:
                    b4:88:c4:8c:7c:25:48:1c:f0:57:bd:8e:be:fb:65:
                    10:47:5f:5d:4e:30:5a:05:42:45:85:06:79:15:7a:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:47:DB:4A:5F:B9:BD:97:D8:27:8B:0C:7B:65:E8:AA:44:15:AC:EF
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:46:46:e8:53:cf:f3:c6:e2:34:88:50:82:24:da:91:d4:
         d8:4f:6d:06:6d:a4:c7:0a:d8:ac:e7:6f:d5:7f:28:77:8b:4b:
         62:32:35:9d:7f:75:1a:47:e3:8b:64:ea:66:b9:dc:1f:a1:12:
         f8:26:64:e1:35:dd:31:a2:cc:41:10:95:f1:75:61:76:2a:6b:
         33:a1:1b:33:0d:95:25:f0:de:b0:9e:4b:a0:e9:cb:fa:54:f3:
         bd:04:cd:dd:b9:05:15:00:3e:d9:00:45:e7:11:aa:2c:ac:a5:
         de:40:19:43:34:ca:78:88:13:f8:21:a9:60:43:48:a6:5c:ce:
         7f:af:e6:c8:bc:46:c8:c4:fb:09:d9:79:86:d0:05:b7:80:c0:
         ab:37:94:cc:77:f0:5e:b5:3f:e3:41:4c:81:85:fb:77:f7:09:
         b6:ef:54:de:69:fe:6f:6b:5c:89:12:7a:a5:e4:89:5c:85:1b:
         78:42:e7:e5:ee:66:d5:f7:ed:71:c2:4f:d8:d1:94:0f:7b:be:
         3a:82:50:ac:34:d5:43:1e:a9:92:28:13:af:ec:89:d4:de:3f:
         f7:06:46:58:26:6b:58:b4:a0:d5:cc:15:53:15:d2:76:65:c0:
         d9:9c:ac:00:0b:2e:d0:3c:14:a0:93:1f:f8:5b:02:9a:68:9b:
         60:19:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:20:34 2026 by rpki-client