This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
File:                     727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json)
Hash identifier:          55igAU3vqHYxoh1LoqUqWDzbtXMxGy7IKKTdPUW8X9A=
Subject key identifier:   CE:EB:CA:74:39:99:93:D3:A6:9B:D0:83:82:F0:2E:08:5C:04:02:BE
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       55957A1A45E91A063F6757400538732E51B66EE6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
Manifest number:          0B
Signing time:             Tue 27 Jan 2026 00:56:04 +0000
Manifest this update:     Tue 27 Jan 2026 00:51:04 +0000
Manifest next update:     Wed 28 Jan 2026 01:59:04 +0000
Files and hashes:         1: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=)
                          2: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: mfLKo6U77CmmtkONftLHg8mou3KKM6cSrXPOnvYRzsA=)
                          3: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=)
                          4: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=)
                          5: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:95:7a:1a:45:e9:1a:06:3f:67:57:40:05:38:73:2e:51:b6:6e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Jan 27 00:51:04 2026 GMT
            Not After : Jan 28 01:59:04 2026 GMT
        Subject: CN=CEEBCA74399993D3A69BD08382F02E085C0402BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:14:28:ad:b0:c3:d5:59:93:21:ea:1d:0b:
                    e7:02:4b:4c:ef:ca:4a:d9:65:a1:b4:2d:45:cf:79:
                    72:b9:15:a5:68:06:7b:17:c1:f4:d6:7a:5c:1d:f0:
                    30:2a:3d:be:9d:7f:e4:10:de:38:1f:ba:9d:58:26:
                    f2:a5:9d:ff:d9:3c:d8:29:c1:3d:15:15:9c:41:90:
                    a9:bd:03:fb:d7:52:56:55:68:d6:d0:59:0c:18:c4:
                    fc:d3:61:7c:8f:76:e7:8b:88:00:da:27:19:d4:25:
                    84:84:b4:49:f1:c7:75:99:18:bc:d1:69:d0:57:ff:
                    4d:7d:9e:1b:81:80:19:93:fb:f3:4e:dc:a9:4c:cf:
                    8a:d7:1d:14:ee:2f:ae:e5:35:6d:08:f3:dd:ab:69:
                    7b:c5:ee:a1:4b:00:f6:93:d0:77:69:1d:2b:ce:54:
                    5e:87:e3:82:26:c6:d0:3b:4a:02:70:63:c4:4c:34:
                    50:86:10:ed:e1:37:ec:b1:80:96:cc:e4:2f:62:50:
                    58:76:5b:58:56:23:d2:12:20:61:20:b5:97:03:30:
                    ea:80:e3:e8:7b:7b:25:e0:0a:88:52:0b:47:cd:b4:
                    84:28:39:e3:bb:db:e7:dc:b6:b8:9f:c3:95:c1:af:
                    ae:af:f9:ad:48:81:e1:66:88:b2:33:f4:2c:75:c1:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:CA:74:39:99:93:D3:A6:9B:D0:83:82:F0:2E:08:5C:04:02:BE
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:46:8e:da:fa:47:f5:9f:2c:3a:37:9c:0b:7e:ab:58:fa:
         21:a8:28:ac:9c:28:3e:0e:49:92:fd:3a:6a:e7:c7:82:72:47:
         61:bd:ee:57:e9:d5:6b:35:52:cc:5b:f4:2a:2e:8f:3d:11:ed:
         02:07:fa:ff:06:f8:39:ed:fe:8c:70:9b:f7:8f:6d:b5:e1:7c:
         a0:18:08:07:4a:81:08:98:79:23:3a:1f:17:d9:fc:27:77:78:
         3f:ee:76:10:51:5a:dd:82:48:e3:b8:cc:52:47:21:08:ab:e0:
         5a:75:02:9e:0f:16:64:2b:54:dd:d4:85:43:bd:f7:6a:e3:f3:
         44:9a:11:6c:77:9e:0c:83:7b:a4:36:ea:b4:9c:7a:7a:ef:13:
         ba:53:b2:de:27:65:29:6f:dd:e2:1c:19:ad:66:d0:bb:c7:ac:
         ed:55:e4:aa:91:60:f4:d8:f0:d3:d6:0e:67:5c:68:93:d0:0b:
         de:23:e6:b6:6d:dc:89:6e:b1:1b:e8:ad:e6:1e:d8:ff:c6:ac:
         d9:57:d7:73:6d:ec:29:33:5c:c3:6f:4c:5c:6a:a6:f4:4b:01:
         0e:56:c1:dc:35:33:77:fe:c1:95:0c:0a:08:99:df:85:87:90:
         90:e7:24:fb:f2:d2:1c:0f:5b:46:67:d6:41:3f:8d:68:aa:ac:
         d7:40:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:34:06 2026 by rpki-client