This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          Hps3aWK/mobCgODmr/xadPetwQ5DlSM4HHVP02ZvzuE=
Subject key identifier:   85:ED:18:B2:FA:29:02:CD:83:06:87:81:8C:97:79:52:1B:D0:65:D1
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       35A45E22B74B978F7764E209EA9F9BB581393CCB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          0A
Signing time:             Mon 26 Jan 2026 02:56:02 +0000
Manifest this update:     Mon 26 Jan 2026 02:51:02 +0000
Manifest next update:     Tue 27 Jan 2026 06:09:02 +0000
Files and hashes:         1: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          2: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          3: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          4: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          5: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          6: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          7: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          8: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          9: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          10: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          11: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: f1HcpK1DKZrjVdRQoV5eWsW3b8IF4EPKDdPUolkRhA4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:5e:22:b7:4b:97:8f:77:64:e2:09:ea:9f:9b:b5:81:39:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jan 26 02:51:02 2026 GMT
            Not After : Jan 27 06:09:02 2026 GMT
        Subject: CN=85ED18B2FA2902CD830687818C9779521BD065D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:95:8b:44:da:f9:79:2c:83:4b:d7:ff:64:87:
                    eb:e0:56:c4:38:c9:c3:14:ec:ef:83:ac:88:e2:e5:
                    68:1f:11:72:52:21:19:28:9f:ab:8c:74:cc:c1:a1:
                    85:47:63:c5:65:cd:25:bc:06:bb:5e:87:cb:55:bc:
                    44:10:db:49:ae:d6:90:2a:5b:14:b5:bb:1d:af:29:
                    87:a7:ac:18:0e:06:2d:51:1c:50:8a:11:1f:81:cf:
                    fc:ed:ed:0c:29:54:8d:9e:f0:8d:23:01:85:5a:3a:
                    aa:92:27:e5:12:8f:67:4d:0a:d4:26:f2:65:e9:dd:
                    b9:cf:e7:0d:e2:af:27:a0:ad:82:26:83:7f:10:01:
                    73:fd:08:9d:75:a1:fe:aa:e9:6b:44:42:2a:c9:b2:
                    bd:93:d1:ad:b1:a8:96:af:1b:7a:e8:bd:e5:f3:06:
                    08:9e:96:66:98:c2:83:e9:79:8d:8a:b1:83:12:99:
                    a3:f9:0a:2d:7d:e5:f8:49:50:8a:15:b4:92:61:e0:
                    6c:73:04:f9:a0:cb:ad:ed:16:88:db:77:27:3e:c1:
                    49:86:c7:3e:61:c0:3d:f5:13:9b:82:4c:35:00:4a:
                    78:ce:79:33:3f:db:10:89:40:44:d2:13:52:67:2e:
                    92:5d:e6:6f:8e:96:d7:96:82:21:9f:a7:45:95:d9:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:18:B2:FA:29:02:CD:83:06:87:81:8C:97:79:52:1B:D0:65:D1
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:d2:4e:f4:7a:fa:17:c2:01:49:6e:13:2e:6f:d1:8b:2f:
         dd:6b:e1:98:5a:17:cd:82:3b:d4:05:b7:50:95:d0:24:ae:a6:
         5d:89:8e:ff:b8:58:ac:6e:64:28:f5:c7:6d:c9:da:c6:31:ab:
         f9:b0:85:ac:e2:4e:45:a6:47:0c:0f:24:4e:66:4a:9b:d0:19:
         0e:67:aa:3c:ed:aa:fc:bc:1c:9d:5f:91:be:63:e4:c5:5a:fb:
         13:c2:82:70:b2:41:0a:ab:17:37:0b:86:e1:4a:1d:d5:4a:4f:
         e1:51:1b:a5:85:80:95:26:2b:48:45:ae:8a:f7:72:e1:b3:16:
         5b:07:fc:b5:07:b6:81:60:0e:d3:7e:3c:eb:4b:d4:de:05:e9:
         1f:cf:fb:59:cb:33:b9:8a:63:9c:32:15:22:05:fb:bf:20:0e:
         3e:35:03:7e:73:bb:d1:23:0e:47:fc:7a:da:b6:d3:6b:53:ee:
         cb:9d:0a:a3:e3:2d:1d:88:f5:33:bf:e1:c7:67:d0:b8:5a:1f:
         18:ba:c0:a5:86:e5:92:85:1f:be:5e:e3:ef:3b:c2:7f:0d:97:
         0c:5f:6e:8f:32:61:a7:03:36:28:b2:2c:65:a6:d5:7f:58:0c:
         09:a6:d7:20:8e:b6:40:0d:68:3a:34:09:fd:25:af:85:a7:df:
         4f:5c:9b:06
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNaReIrdLl493ZOIJ6p+btYE5PMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjAxMjYwMjUxMDJaFw0yNjAxMjcwNjA5MDJaMDMxMTAvBgNV
BAMTKDg1RUQxOEIyRkEyOTAyQ0Q4MzA2ODc4MThDOTc3OTUyMUJEMDY1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8lYtE2vl5LINL1/9kh+vgVsQ4
ycMU7O+DrIji5WgfEXJSIRkon6uMdMzBoYVHY8VlzSW8Brteh8tVvEQQ20mu1pAq
WxS1ux2vKYenrBgOBi1RHFCKER+Bz/zt7QwpVI2e8I0jAYVaOqqSJ+USj2dNCtQm
8mXp3bnP5w3iryegrYImg38QAXP9CJ11of6q6WtEQirJsr2T0a2xqJavG3roveXz
BgielmaYwoPpeY2KsYMSmaP5Ci195fhJUIoVtJJh4GxzBPmgy63tFojbdyc+wUmG
xz5hwD31E5uCTDUASnjOeTM/2xCJQETSE1JnLpJd5m+OlteWgiGfp0WV2TErAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUhe0YsvopAs2DBoeBjJd5UhvQZdEwHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC82QTQ1RDgzMjJDMzY0
OEY5MUUyMTI0NzJGNjA0Q0FGREJBNzAxOUJCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGArSTvR6+hfC
AUluEy5v0Ysv3WvhmFoXzYI71AW3UJXQJK6mXYmO/7hYrG5kKPXHbcnaxjGr+bCF
rOJORaZHDA8kTmZKm9AZDmeqPO2q/LwcnV+RvmPkxVr7E8KCcLJBCqsXNwuG4Uod
1UpP4VEbpYWAlSYrSEWuivdy4bMWWwf8tQe2gWAO034860vU3gXpH8/7WcszuYpj
nDIVIgX7vyAOPjUDfnO70SMOR/x62rbTa1Puy50Ko+MtHYj1M7/hx2fQuFofGLrA
pYblkoUfvl7j7zvCfw2XDF9ujzJhpwM2KLIsZabVf1gMCabXII62QA1oOjQJ/SWv
haffT1ybBg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:20:29 2026 by rpki-client