This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
File:                     18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json)
Hash identifier:          xrzdJqK/YLgDVsJFGP9lXpdxeI3gv97z0DGb7Tplffg=
Subject key identifier:   27:A0:F5:01:DF:68:62:08:47:6F:3E:21:A7:18:26:EC:EA:A9:A5:D8
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       40B5D04BA924363BEB0F90868C28B92304B41DF3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
Manifest number:          16
Signing time:             Tue 03 Feb 2026 19:41:30 +0000
Manifest this update:     Tue 03 Feb 2026 19:36:30 +0000
Manifest next update:     Wed 04 Feb 2026 20:48:30 +0000
Files and hashes:         1: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=)
                          2: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=)
                          3: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=)
                          4: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=)
                          5: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=)
                          6: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: 2SYojAUawSqZnTOzF18r9hHuD7RsJ4ZPMdnlWfCbjqo=)
                          7: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 13:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b5:d0:4b:a9:24:36:3b:eb:0f:90:86:8c:28:b9:23:04:b4:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Feb  3 19:36:30 2026 GMT
            Not After : Feb  4 20:48:30 2026 GMT
        Subject: CN=27A0F501DF686208476F3E21A71826ECEAA9A5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:39:67:6a:5d:d4:b5:5a:04:a4:6d:16:29:
                    4e:21:19:56:b6:7c:17:53:7e:2b:61:22:e0:7a:0a:
                    1c:b4:39:63:50:cd:ce:1f:59:56:e7:ef:b7:9e:b1:
                    7c:d2:fb:e7:b3:cb:c1:15:0a:d9:86:d9:be:16:13:
                    7d:4f:c6:b7:98:53:aa:52:ae:d2:7a:8d:39:f3:fd:
                    27:68:2c:6b:f7:d6:92:c4:47:1d:26:7c:7b:c5:e5:
                    f2:4d:cb:47:44:21:14:59:2f:1e:e7:a7:dc:83:51:
                    6c:c2:58:e9:ef:a4:42:06:2a:12:62:f2:1f:df:d7:
                    d8:13:6d:7e:b8:ad:23:bc:92:14:3d:2c:3d:e5:e6:
                    79:f0:7a:63:98:6a:57:9f:6b:dd:2a:2c:62:ee:0a:
                    29:4c:09:f0:2a:8c:80:5d:c8:50:21:0f:cb:52:b2:
                    49:8c:b7:52:ac:df:a1:9e:24:b8:03:ad:84:73:d0:
                    75:76:a0:0b:d6:52:4f:3d:ef:ac:95:d0:85:fb:97:
                    40:bd:9c:68:5e:cb:45:bc:ba:5c:8e:27:a6:6a:26:
                    3d:35:c9:39:8c:32:5c:d0:1c:88:6a:a2:c0:d1:f3:
                    ef:6a:f1:cf:2e:87:d9:ef:b3:8c:a3:bc:47:a2:55:
                    e3:e0:95:43:82:0c:1d:b0:e3:72:ab:c1:54:44:02:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:F5:01:DF:68:62:08:47:6F:3E:21:A7:18:26:EC:EA:A9:A5:D8
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:be:36:e7:b9:c1:db:cd:d2:85:4f:3f:93:6a:36:16:d0:bf:
         0b:56:28:12:4f:f8:06:31:de:cf:29:82:7d:b3:2e:63:98:7b:
         ce:da:86:0d:d4:a2:3c:38:30:a3:18:af:33:8f:2e:95:dc:99:
         49:73:d6:1a:60:ea:4b:a6:b7:65:da:29:48:93:c3:dd:3b:a3:
         de:94:fe:61:62:c1:58:f2:c4:d8:9d:a2:33:ee:cd:59:90:09:
         73:38:5b:77:2d:c5:58:6c:09:68:09:df:a1:14:88:0f:90:29:
         82:26:51:a4:4f:be:27:2b:a4:24:78:3a:43:37:64:d3:a8:84:
         3b:b4:7f:b5:c0:a1:6d:ce:d4:cd:1f:ec:3b:f0:72:85:5a:a7:
         fa:66:0e:9a:7a:dd:1e:02:e2:a8:33:6b:64:7d:00:36:da:24:
         59:f9:11:fa:34:89:4a:2e:70:2e:cc:95:f4:d5:18:04:cc:4f:
         06:76:f3:8d:16:00:28:fe:56:8c:82:cf:31:4d:dd:f4:ae:44:
         0e:87:1f:06:95:69:dc:2b:b2:de:02:8f:8e:da:cc:94:ae:d4:
         9a:a4:44:d8:01:a4:d5:33:77:4b:1f:94:7b:7b:c7:91:15:8c:
         96:a9:5e:1f:f4:d2:bf:1a:7b:23:c0:28:78:e7:e4:05:24:6e:
         4c:e2:2a:3e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUQLXQS6kkNjvrD5CGjCi5IwS0HfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjAyMDMxOTM2MzBaFw0yNjAyMDQyMDQ4MzBaMDMxMTAvBgNV
BAMTKDI3QTBGNTAxREY2ODYyMDg0NzZGM0UyMUE3MTgyNkVDRUFBOUE1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/Dlnal3UtVoEpG0WKU4hGVa2
fBdTfithIuB6Chy0OWNQzc4fWVbn77eesXzS++ezy8EVCtmG2b4WE31PxreYU6pS
rtJ6jTnz/SdoLGv31pLERx0mfHvF5fJNy0dEIRRZLx7np9yDUWzCWOnvpEIGKhJi
8h/f19gTbX64rSO8khQ9LD3l5nnwemOYalefa90qLGLuCilMCfAqjIBdyFAhD8tS
skmMt1Ks36GeJLgDrYRz0HV2oAvWUk8976yV0IX7l0C9nGhey0W8ulyOJ6ZqJj01
yTmMMlzQHIhqosDR8+9q8c8uh9nvs4yjvEeiVePglUOCDB2w43KrwVREAoy9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUJ6D1Ad9oYghHbz4hpxgm7OqppdgwHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz
ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr74257nB283S
hU8/k2o2FtC/C1YoEk/4BjHezymCfbMuY5h7ztqGDdSiPDgwoxivM48uldyZSXPW
GmDqS6a3ZdopSJPD3Tuj3pT+YWLBWPLE2J2iM+7NWZAJczhbdy3FWGwJaAnfoRSI
D5ApgiZRpE++JyukJHg6Qzdk06iEO7R/tcChbc7UzR/sO/ByhVqn+mYOmnrdHgLi
qDNrZH0ANtokWfkR+jSJSi5wLsyV9NUYBMxPBnbzjRYAKP5WjILPMU3d9K5EDocf
BpVp3Cuy3gKPjtrMlK7UmqRE2AGk1TN3Sx+Ue3vHkRWMlqleH/TSvxp7I8AoeOfk
BSRuTOIqPg==
-----END CERTIFICATE-----
Generated at Wed Feb 4 07:49:38 2026 by rpki-client