This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          8lJ2pHtnUeaw1Z5O8KhArc2KpFe72eKYnRSPHXHymXs=
Subject key identifier:   58:26:4A:F3:04:1A:5C:63:B0:39:D9:26:0E:63:AB:3A:0F:05:6D:90
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       25D21C89FE0D8C642D59E0510CEF53EB65631AB9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          0B
Signing time:             Mon 26 Jan 2026 18:16:02 +0000
Manifest this update:     Mon 26 Jan 2026 18:11:02 +0000
Manifest next update:     Tue 27 Jan 2026 19:10:02 +0000
Files and hashes:         1: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          2: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
                          3: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          4: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
                          5: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
                          6: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
                          7: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: 6Z+JObTKtc1Irw6OubtzPJYYlkIfl9wugZfhINOxkEA=)
                          8: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          9: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:1c:89:fe:0d:8c:64:2d:59:e0:51:0c:ef:53:eb:65:63:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Jan 26 18:11:02 2026 GMT
            Not After : Jan 27 19:10:02 2026 GMT
        Subject: CN=58264AF3041A5C63B039D9260E63AB3A0F056D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:6a:40:f8:c5:d9:dd:6f:1c:f0:57:6f:13:
                    55:dd:37:f0:2a:ae:2f:cf:86:4f:c8:e8:0b:c4:41:
                    0d:2f:be:86:9d:f4:8b:2c:83:ed:56:01:90:3c:52:
                    eb:48:ee:ff:16:d7:86:2e:c8:eb:02:c9:62:aa:d3:
                    aa:b8:35:c6:b5:98:18:42:0e:73:4a:5a:6f:94:bb:
                    e5:ad:d7:ae:67:10:c1:09:18:3c:b6:52:ff:68:65:
                    38:bf:5a:46:61:40:40:8b:7a:26:f5:58:bf:33:5e:
                    31:a7:12:e7:8b:f0:ed:0a:b5:8f:ea:6d:00:00:fa:
                    c9:5d:0f:06:31:1c:9c:09:d3:3b:fa:a0:33:86:e4:
                    e0:98:3d:b0:aa:29:60:95:d3:29:40:91:c4:13:f5:
                    d9:d3:8d:f7:7f:a5:df:5b:51:1a:a8:4d:14:a3:0d:
                    8f:31:e9:e5:cc:32:a3:8a:8b:bb:d0:2c:cc:a4:8e:
                    a6:12:0c:54:7a:8a:c5:15:9b:c4:c6:6c:5b:50:56:
                    22:5a:54:74:53:a0:68:1a:ed:a0:c1:34:53:d9:7c:
                    24:37:36:43:bc:b9:c8:9e:17:29:c2:13:5f:85:42:
                    85:1b:cc:dd:2c:f4:91:83:1b:e0:a8:a9:5b:92:e1:
                    04:04:4a:94:61:63:29:f7:fa:d1:47:e1:b8:70:b0:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:26:4A:F3:04:1A:5C:63:B0:39:D9:26:0E:63:AB:3A:0F:05:6D:90
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:8e:d0:7f:4b:36:26:0a:4f:b3:48:83:c8:da:90:1e:88:
         ea:17:20:a3:87:6d:22:bc:ef:e7:f6:b8:fd:b7:1a:22:d3:33:
         8e:65:5d:22:2e:7d:18:a8:18:47:a2:ac:10:64:69:44:34:81:
         14:4a:cb:86:dc:52:f3:ca:5a:6b:41:b8:e0:c9:9d:7a:e4:8d:
         cb:0f:88:4e:e1:a1:4e:f4:9d:a1:09:78:de:2a:66:3f:c8:1e:
         97:53:9e:33:c8:7d:e6:d6:97:c7:99:cc:68:2a:13:07:df:20:
         95:14:04:54:6c:c9:61:97:10:92:1b:aa:5a:5c:28:fd:bb:2f:
         c9:a0:a9:23:38:b8:65:86:55:7b:40:a5:5a:26:a0:dc:b5:7a:
         d5:d8:06:c0:b4:2c:d2:93:e3:2f:a0:ea:e0:ff:6f:e6:30:dd:
         ff:8a:0d:8f:3c:00:83:90:4f:5d:6d:49:33:f7:b7:e8:8f:03:
         0c:8b:ce:26:0d:87:2d:34:bf:06:a8:47:d9:c0:e6:83:09:90:
         8b:49:2b:99:45:59:f4:dd:3b:58:7d:7f:49:dd:04:f8:a0:02:
         03:8f:cc:cc:aa:61:9c:1b:e4:da:b3:5e:76:5e:f3:12:af:f8:
         24:93:61:52:78:bb:c8:0a:43:0d:dd:64:36:19:2c:49:6e:82:
         69:cd:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:26:12 2026 by rpki-client