This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          8b81bnw45e60zMN9mkOOpiEZGXVjowusSVffAfRqeqk=
Subject key identifier:   34:45:1A:8C:31:2C:C7:3A:9D:23:13:F3:8F:C1:50:98:41:9C:AD:DA
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       5867B51291546498DD478948263B15220BE663E2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          0A
Signing time:             Mon 26 Jan 2026 02:06:02 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 04:36:02 +0000
Files and hashes:         1: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          2: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: zBM3K70LZgF0Vtn3KhRjwrmTOLR29U3QnRr3zxqcbfo=)
                          3: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          4: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          5: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          6: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          7: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          8: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          9: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          10: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 04:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:67:b5:12:91:54:64:98:dd:47:89:48:26:3b:15:22:0b:e6:63:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 26 02:01:02 2026 GMT
            Not After : Jan 27 04:36:02 2026 GMT
        Subject: CN=34451A8C312CC73A9D2313F38FC15098419CADDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:cb:c5:b4:a9:f0:75:3f:f9:33:73:2d:ec:
                    c3:44:62:84:4d:91:69:59:18:f2:e6:72:35:8e:e7:
                    fb:6d:4b:6f:4f:28:a1:79:0e:5c:9a:5c:f0:f9:c6:
                    53:a0:1f:ed:e0:17:7c:22:15:ee:ea:a7:80:c5:d8:
                    56:38:7f:3b:a3:37:53:37:04:7f:fd:77:e5:18:d2:
                    5e:b6:28:be:49:05:fc:d3:37:cb:11:38:a1:e4:b8:
                    54:06:07:7a:25:1f:c1:b3:78:0e:2e:1d:ee:bf:0a:
                    28:8a:0d:cc:ef:1c:96:d0:67:21:33:c2:de:8c:fd:
                    7d:14:85:5d:56:50:49:08:4b:f2:76:2d:87:53:e5:
                    04:cc:85:ea:0e:8b:e3:6f:4a:66:da:30:a3:43:9b:
                    ec:b3:4a:ff:b9:81:fb:27:23:ee:ee:a1:f1:eb:8a:
                    08:a7:3a:60:f6:75:19:0f:fd:1f:23:5d:98:20:55:
                    4e:63:d5:f2:a0:be:77:ad:02:99:8e:e6:91:8e:fe:
                    2a:3c:9e:03:2d:07:bd:04:32:20:b9:f5:97:92:8b:
                    43:c9:5c:05:2c:a6:8d:55:ac:78:88:25:3a:cb:d5:
                    01:46:fd:b4:3e:0b:59:b5:ed:14:f1:9b:c7:e8:8b:
                    e5:63:02:8c:09:07:fa:73:37:61:ef:77:71:9b:0f:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:1A:8C:31:2C:C7:3A:9D:23:13:F3:8F:C1:50:98:41:9C:AD:DA
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f9:94:49:44:f1:d1:61:84:d4:80:2b:e4:45:94:5d:f2:16:
         b8:0d:ac:04:e7:8e:8a:a8:ab:e9:eb:4f:18:ec:9a:f1:6d:b9:
         39:de:14:d0:43:7b:9d:87:9a:a5:70:ac:0b:63:25:f9:44:ef:
         bc:fc:35:69:96:12:a0:af:00:fc:32:95:88:60:63:a2:36:26:
         99:56:ca:ba:ee:6e:c2:c7:1b:83:0c:5b:fb:16:42:d6:3a:33:
         e6:52:b2:30:cd:c2:8d:c3:8a:d5:03:ec:a8:42:2e:cb:df:51:
         a0:d1:f0:cf:2b:bb:c3:b1:8f:a7:f0:65:f2:4c:30:a4:e0:23:
         0e:a9:5d:39:45:ed:11:e2:6b:fb:2d:29:cc:bf:ff:16:ad:60:
         2e:94:dd:95:18:69:e9:e4:2a:0a:4f:a2:7b:83:0c:7a:29:c8:
         ec:5d:3a:cc:dd:62:df:b0:70:55:44:36:89:a9:ca:6f:be:1a:
         b2:a3:fc:72:71:2a:0b:3c:57:04:1f:4b:f2:e5:a7:76:1b:ec:
         98:58:02:55:5b:bf:74:69:96:0e:92:f0:5a:27:db:96:47:dd:
         38:d4:9a:2f:1d:ff:4c:1b:53:d7:6a:f8:c0:0c:33:82:5b:f8:
         58:29:17:e0:1c:36:b1:3b:aa:ba:0b:e6:58:15:ae:e3:41:76:
         0e:58:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:53 2026 by rpki-client