This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File:                     EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier:          hK3xpKT7pet8GSDw5HivbuEyNFEE43UPKo759S0F0lE=
Subject key identifier:   0A:AF:BC:FB:BB:DF:B3:D3:E3:3D:07:29:1A:CB:D9:D5:DF:81:10:D6
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer:       /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial:       7352E7ED8153B18CDABE18C1114147C576B88DEF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number:          0A
Signing time:             Mon 26 Jan 2026 03:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 02:56:02 +0000
Manifest next update:     Tue 27 Jan 2026 06:14:02 +0000
Files and hashes:         1: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
                          2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: hoeUX+aNbkQgN5nZCka3U6suzCnidQLfS0PqMTYe7xQ=)
                          3: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
                          4: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
                          5: 3130332e32342e3232382e302f32322d3234203d3e2034383337.roa (hash: OovHk1dM5SRegXrOoxHUF4YMH6s4+waRg57vn/cYkAk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:52:e7:ed:81:53:b1:8c:da:be:18:c1:11:41:47:c5:76:b8:8d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
        Validity
            Not Before: Jan 26 02:56:02 2026 GMT
            Not After : Jan 27 06:14:02 2026 GMT
        Subject: CN=0AAFBCFBBBDFB3D3E33D07291ACBD9D5DF8110D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:cd:b6:d7:de:66:fa:68:6c:60:95:07:4e:
                    8f:b8:38:fb:0c:f9:ac:09:2a:cf:28:31:05:dc:a4:
                    83:e2:c8:89:24:cb:d9:2f:55:5a:38:18:fe:98:36:
                    63:32:b4:06:33:65:41:2a:9d:75:68:b4:df:27:02:
                    fb:84:4b:c2:62:a8:3a:62:7a:a8:da:81:c1:38:ce:
                    db:69:17:f5:ae:7c:9b:32:08:76:ee:8e:36:ff:a3:
                    3e:cc:7e:1c:ab:8c:ba:86:1c:87:1e:29:7e:22:f4:
                    a2:cc:b9:a6:c8:e0:f4:c6:16:a7:8a:7f:61:1a:39:
                    1b:dc:0b:f3:2d:35:96:8d:00:13:3f:57:08:25:61:
                    96:b6:e6:4e:5a:9e:cc:43:73:11:4b:74:af:05:32:
                    cf:7d:e7:70:5d:fd:94:88:64:b0:57:c8:09:ad:65:
                    ea:bf:da:de:3f:fd:b7:ef:07:6c:1d:78:47:68:d2:
                    dd:ba:02:8b:dd:ca:75:bd:9a:e3:f8:b0:64:67:85:
                    dc:06:ab:c2:b6:2f:65:78:95:5f:f3:35:07:14:97:
                    be:83:30:49:b3:91:a6:67:e7:80:dc:59:b1:3b:08:
                    ae:72:0d:3b:b4:8e:a1:86:97:2b:4e:77:4b:1c:37:
                    b1:36:c3:e8:97:23:fb:35:28:28:ef:b7:9d:00:5e:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AF:BC:FB:BB:DF:B3:D3:E3:3D:07:29:1A:CB:D9:D5:DF:81:10:D6
            X509v3 Authority Key Identifier:
                keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:55:a6:c9:ea:f4:de:51:af:03:e1:e5:52:51:07:37:53:27:
         ee:b9:11:51:03:5a:47:f9:56:73:1f:0b:a1:c8:19:6c:d8:7e:
         50:20:bc:66:91:10:57:e1:6a:42:39:02:5d:fb:7e:86:86:33:
         e2:00:9a:1e:31:c5:ce:4c:ed:9f:4c:6e:9d:32:69:a5:f1:a5:
         b0:0d:d7:a5:2e:e7:cc:17:fe:5a:14:81:c1:a9:2f:1b:68:32:
         86:11:87:e6:b1:45:1d:ad:e8:a6:eb:9f:2d:79:38:38:8d:5c:
         9b:d0:77:25:82:f8:5a:c0:1e:53:65:5d:39:1f:09:1b:25:68:
         bd:80:1a:06:2b:f1:ce:bf:98:ec:a9:a1:89:48:50:3e:d6:7f:
         0b:ff:7c:d8:ca:2b:0e:fc:44:0a:2a:22:74:45:ab:db:30:a2:
         04:eb:34:6e:5d:0e:fc:b8:11:84:ea:a3:a2:0a:ef:21:a9:14:
         56:e7:90:bf:80:73:d8:54:89:7b:e9:09:38:13:30:60:07:72:
         68:1b:19:ec:2d:14:4a:5c:fe:50:92:08:70:a5:01:a4:f3:89:
         86:4d:84:7e:53:d4:1c:71:cc:88:52:2d:88:7d:87:e0:13:5a:
         29:46:f7:42:d0:d1:da:6b:4c:17:e6:ba:91:c7:71:1d:97:ae:
         65:c5:41:cc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUc1Ln7YFTsYzavhjBEUFHxXa4je8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE
OUIzNzM1OTAeFw0yNjAxMjYwMjU2MDJaFw0yNjAxMjcwNjE0MDJaMDMxMTAvBgNV
BAMTKDBBQUZCQ0ZCQkJERkIzRDNFMzNEMDcyOTFBQ0JEOUQ1REY4MTEwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatc22195m+mhsYJUHTo+4OPsM
+awJKs8oMQXcpIPiyIkky9kvVVo4GP6YNmMytAYzZUEqnXVotN8nAvuES8JiqDpi
eqjagcE4zttpF/WufJsyCHbujjb/oz7MfhyrjLqGHIceKX4i9KLMuabI4PTGFqeK
f2EaORvcC/MtNZaNABM/VwglYZa25k5ansxDcxFLdK8FMs9953Bd/ZSIZLBXyAmt
Zeq/2t4//bfvB2wdeEdo0t26AovdynW9muP4sGRnhdwGq8K2L2V4lV/zNQcUl76D
MEmzkaZn54DcWbE7CK5yDTu0jqGGlytOd0scN7E2w+iXI/s1KCjvt50AXvjHAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCq+8+7vfs9PjPQcpGsvZ1d+BENYwHwYDVR0j
BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3
MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB
QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlWmyer03lGv
A+HlUlEHN1Mn7rkRUQNaR/lWcx8LocgZbNh+UCC8ZpEQV+FqQjkCXft+hoYz4gCa
HjHFzkztn0xunTJppfGlsA3XpS7nzBf+WhSBwakvG2gyhhGH5rFFHa3opuufLXk4
OI1cm9B3JYL4WsAeU2VdOR8JGyVovYAaBivxzr+Y7KmhiUhQPtZ/C/982MorDvxE
CioidEWr2zCiBOs0bl0O/LgRhOqjogrvIakUVueQv4Bz2FSJe+kJOBMwYAdyaBsZ
7C0USlz+UJIIcKUBpPOJhk2EflPUHHHMiFItiH2H4BNaKUb3QtDR2mtMF+a6kcdx
HZeuZcVBzA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:20:35 2026 by rpki-client