This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
File:                     5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json)
Hash identifier:          NX6/zTf2hqLZbc/N0491ElmXQg7UeMohPdqI2hyFskw=
Subject key identifier:   01:D6:A5:46:24:59:83:53:33:92:23:EE:48:26:DA:96:DE:FB:A4:9F
Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
Certificate issuer:       /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Certificate serial:       1F61C75FD1F2EF461B5FB08A765384C728FAE27B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
Manifest number:          16
Signing time:             Wed 04 Feb 2026 04:16:31 +0000
Manifest this update:     Wed 04 Feb 2026 04:11:31 +0000
Manifest next update:     Thu 05 Feb 2026 04:38:31 +0000
Files and hashes:         1: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=)
                          2: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=)
                          3: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: Wba+kdX0U+J7eCPAxPBYEB6NL6tMmsMcr/BqMO23xRQ=)
                          4: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=)
                          5: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=)
                          6: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:61:c7:5f:d1:f2:ef:46:1b:5f:b0:8a:76:53:84:c7:28:fa:e2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
        Validity
            Not Before: Feb  4 04:11:31 2026 GMT
            Not After : Feb  5 04:38:31 2026 GMT
        Subject: CN=01D6A54624598353339223EE4826DA96DEFBA49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:7c:6b:4f:87:76:ed:93:14:68:6c:40:88:
                    79:ea:97:84:19:3f:2b:17:62:6f:33:40:ba:e4:32:
                    e1:55:55:d1:f6:a7:cf:1a:69:5e:0c:1c:5e:ca:cc:
                    7a:92:ec:6a:a1:1d:5c:9b:d2:7a:1c:ac:4d:2e:8d:
                    c4:15:b2:eb:2a:01:18:4b:f1:83:c8:10:af:8e:ca:
                    75:e8:4a:af:1b:a2:fb:f1:39:2d:95:6d:3e:38:34:
                    b7:ea:68:30:f1:81:a1:67:f5:02:a5:d5:da:09:31:
                    66:f1:4b:3e:9e:93:e2:97:dd:0c:c7:d7:3e:56:dc:
                    42:c4:e5:a4:37:69:9f:e8:cf:6b:0e:db:9c:a6:be:
                    eb:d1:90:3f:0e:89:e5:2f:b9:4b:4a:ba:8b:59:63:
                    54:75:7b:d4:20:ed:a5:e3:21:c8:09:8e:ab:44:19:
                    46:e7:a6:b3:ee:72:48:d0:16:5a:1a:34:39:ec:ac:
                    cd:c0:f2:33:d6:af:47:71:cd:f3:f1:a1:cb:1b:2c:
                    a0:93:96:d7:ae:dd:0a:11:1a:48:38:e2:8a:ca:22:
                    a7:08:ec:2b:8f:e4:90:26:2c:11:5a:21:22:59:2d:
                    58:c1:a6:91:48:ef:7c:84:f0:ef:76:58:ef:55:bd:
                    30:ef:b8:ea:e5:d9:70:4c:b7:97:29:6e:f0:f1:e3:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D6:A5:46:24:59:83:53:33:92:23:EE:48:26:DA:96:DE:FB:A4:9F
            X509v3 Authority Key Identifier:
                keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:95:e5:19:d7:bb:9e:ab:79:96:81:b1:61:9c:9b:e1:69:41:
         2b:c5:85:13:a7:54:e0:b7:e6:c9:dc:72:65:52:bd:33:7a:d1:
         7c:52:8f:3f:b8:ed:ae:14:ba:11:47:0c:b6:10:e4:f3:2a:be:
         44:a5:a2:fb:d8:ad:d9:5f:14:fd:99:b0:f2:eb:3b:1e:ca:9d:
         d1:3c:cf:da:bc:40:67:5c:29:36:30:ab:c5:98:07:d3:4d:da:
         06:3a:c0:99:87:7e:0b:5a:3f:98:d9:57:70:45:fd:34:8a:b5:
         a9:fc:e4:93:f7:7d:da:10:52:fc:8c:d0:d6:51:ba:96:0d:0c:
         46:be:1e:27:43:7a:e1:e8:f5:6a:69:ac:ab:21:3e:f2:10:5e:
         62:0d:9e:bc:2b:ee:bd:46:a3:1d:32:8c:1f:18:d0:01:d3:7c:
         b3:ab:12:f2:65:e1:b8:fe:c9:50:95:c1:f1:f4:34:94:e4:dd:
         c1:a2:6a:e7:44:e0:0e:d2:4d:48:e5:d4:bd:71:c1:f7:39:1c:
         90:94:d5:81:83:a3:aa:a7:66:a3:4c:99:64:80:69:15:ef:a1:
         4f:8d:c5:92:8b:16:60:62:b8:23:83:e0:1d:f7:06:4d:c5:83:
         9d:19:43:ce:e7:c3:bd:4b:33:87:2a:27:99:fa:bc:d8:90:c9:
         78:b9:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 14:13:19 2026 by rpki-client