This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
File:                     AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json)
Hash identifier:          xO3FuAMMrpuXsUGZsCDXHsS/rlweETN6HbCyr7FBMcs=
Subject key identifier:   AC:CE:10:B1:8C:6D:5E:A5:01:96:70:39:47:04:5A:90:43:6B:7B:26
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       79DF5C9AD415A5C4CF11EBDAACA3183499B42172
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
Manifest number:          0C
Signing time:             Mon 26 Jan 2026 04:16:02 +0000
Manifest this update:     Mon 26 Jan 2026 04:11:02 +0000
Manifest next update:     Tue 27 Jan 2026 05:59:02 +0000
Files and hashes:         1: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=)
                          2: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=)
                          3: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=)
                          4: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: ujOPuuyACI+aGO3DYGbVHWSaeTEuMxTNu6Qr8uNNSlA=)
                          5: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:df:5c:9a:d4:15:a5:c4:cf:11:eb:da:ac:a3:18:34:99:b4:21:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jan 26 04:11:02 2026 GMT
            Not After : Jan 27 05:59:02 2026 GMT
        Subject: CN=ACCE10B18C6D5EA50196703947045A90436B7B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:8e:46:8d:8e:4b:c2:be:58:b8:af:ac:88:
                    a9:8d:6e:89:59:90:b9:f4:72:6e:5c:92:84:5f:34:
                    e2:de:7b:e5:41:92:71:c3:01:ff:f1:37:5d:8c:38:
                    8b:3c:9b:db:a4:ee:54:c7:b3:fd:1a:f1:fc:78:c6:
                    f0:61:31:e8:03:82:2f:2b:f6:b9:e4:85:b4:ad:b0:
                    60:83:d2:5c:61:71:66:de:fa:e3:4c:26:94:a9:ae:
                    1c:f5:cb:d6:42:02:ff:cc:7a:95:fb:3f:19:a7:22:
                    43:f3:dd:2c:ef:41:b1:9b:6e:3a:5c:b6:70:a4:61:
                    47:4e:97:f9:5b:ff:73:29:ff:ff:04:86:f2:1d:01:
                    75:45:09:82:b5:c6:6c:a5:7a:a0:f4:65:80:d5:ab:
                    f7:5a:b4:87:a0:1b:2c:af:3a:cb:1d:08:41:4a:2b:
                    cc:06:dd:79:db:74:9e:1d:b2:c4:6b:ed:3b:dc:54:
                    cb:9b:97:9e:1a:e4:b7:57:9d:65:88:36:d8:9a:5c:
                    1b:1c:3e:f7:d2:df:39:d5:cf:6c:90:2d:9e:17:d8:
                    34:4b:bc:49:fb:69:da:9e:65:70:f8:cb:73:cc:7a:
                    8a:9e:10:00:11:a5:ea:0a:3f:3a:d1:3e:9e:73:ce:
                    00:21:c1:42:b6:2a:ec:ad:b0:b6:ce:75:31:30:49:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CE:10:B1:8C:6D:5E:A5:01:96:70:39:47:04:5A:90:43:6B:7B:26
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:d4:65:25:3a:9c:6b:bc:a3:1a:40:15:d4:28:f0:da:95:
         6f:34:04:8e:2d:8d:a7:bc:42:38:cb:7c:7e:2c:c2:40:c3:f9:
         d4:78:e3:88:92:73:0a:52:70:72:2a:a6:3e:d8:90:df:31:c3:
         12:e6:cb:de:99:17:92:70:12:42:bd:20:43:b9:fd:8b:99:11:
         6c:cf:6e:b6:ef:20:f2:ee:ef:3b:50:69:fa:3c:93:40:02:48:
         e8:28:a3:97:a2:62:39:36:31:34:1b:15:d4:45:49:29:31:cc:
         c5:e0:ea:08:be:29:b7:21:dd:29:b8:63:b8:41:54:f5:10:d5:
         38:d5:9d:3f:c9:d0:a3:dd:62:38:6c:33:5c:e5:39:52:6f:68:
         f7:56:4f:d5:39:ba:12:a5:e4:92:e5:8d:23:ef:82:14:ec:aa:
         f8:ca:58:06:ec:67:cf:78:3f:32:46:72:bd:b1:f9:70:c9:38:
         36:7d:6b:9d:4a:0c:04:ef:a3:4d:61:78:23:64:89:d5:c4:f5:
         d8:2a:0d:52:de:46:be:ad:59:0f:4b:99:14:59:41:06:b6:a8:
         0a:54:9c:26:df:cd:43:f3:61:ca:10:81:ec:ae:23:de:1d:84:
         00:59:17:90:69:62:d4:68:27:33:81:65:dd:38:e7:be:81:c6:
         7a:89:7d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:34:40 2026 by rpki-client