This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
File:                     09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json)
Hash identifier:          yEcnW7ZkSN/e0WYW6NQ15q9iYlf+m+AH7kVhumPDBhc=
Subject key identifier:   14:64:8C:E5:3D:92:70:23:0D:09:6C:0A:58:5D:54:FF:94:84:5B:A0
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Certificate issuer:       /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial:       325AE1630F25AAF0180E3F62DDF88A3129D9D8D6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
Manifest number:          16
Signing time:             Wed 04 Feb 2026 13:26:31 +0000
Manifest this update:     Wed 04 Feb 2026 13:21:31 +0000
Manifest next update:     Thu 05 Feb 2026 17:20:31 +0000
Files and hashes:         1: 3130332e3139372e3138332e302f32342d3234203d3e20313337343433.roa (hash: k0G/J1wGW3vLozXs6GIpw7cXS7zIX2gS1KUAiSrbLNE=)
                          2: 3130332e3133392e39322e302f32332d3233203d3e20313337343433.roa (hash: M77j7VeyeEX/ETQ34IfJTNB0SF1fGqTOhIQik2Jur6A=)
                          3: 3130332e3139372e3138302e302f32342d3234203d3e20313337343433.roa (hash: CbTkb73of9yMkwZm2DCy7G40BwRZAGHBqpKVypR2kSo=)
                          4: 3130332e3139372e3138312e302f32342d3234203d3e20313337343433.roa (hash: zOxNjVfF4PHJ4W0md7ggUK41QC6HrtT7zlrQOASTAfY=)
                          5: 3130332e3231382e39322e302f32342d3234203d3e20313337343433.roa (hash: 8EKSgS0+gVnmNhEYarOr5cOeWIoBPw3M3fATI4XYr+g=)
                          6: 3130332e3231382e39352e302f32342d3234203d3e20313337343433.roa (hash: GVjEDdCubBLhiNm+dRXsd+fi4yoUTEQ/aIw8iLMLxg0=)
                          7: 3130332e3133392e39332e302f32342d3234203d3e20313337343433.roa (hash: zau23N00IR2hAGYo56Nge2Ymz5rQiM6x3QCKZyW/qEQ=)
                          8: 3130332e3231382e39332e302f32342d3234203d3e20313337343433.roa (hash: 36IjhApk+lrNSl59xepON7qOQdcWPd2A44sgRugBZfM=)
                          9: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: JUtKsjeiDmhq0HVost0Nt0YO//jJ240vZChA6ya5dQA=)
                          10: 3130332e3133392e39322e302f32342d3234203d3e20313337343433.roa (hash: wEcbJdkQT2x+fizh5eejFoR3YhFeqHidy+6FZo8/F6M=)
                          11: 3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa (hash: ml/dotA8tYURkCi9gGLb/6fH4D6/8JJeVSMbsmWUy9o=)
                          12: 3130332e3231382e39342e302f32342d3234203d3e20313337343433.roa (hash: m0yFRzPkgz00e4Cr6K/4bM0qVLURm4aMUqElN3RsHhw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5a:e1:63:0f:25:aa:f0:18:0e:3f:62:dd:f8:8a:31:29:d9:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
        Validity
            Not Before: Feb  4 13:21:31 2026 GMT
            Not After : Feb  5 17:20:31 2026 GMT
        Subject: CN=14648CE53D9270230D096C0A585D54FF94845BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:7f:ae:fb:e0:f4:6a:e2:bc:12:35:df:5d:
                    6f:19:df:f2:3b:5b:4f:f2:fb:9d:d9:78:5d:d1:3f:
                    b4:ca:f8:d8:b9:b4:6e:12:7b:55:e8:90:99:81:96:
                    10:98:bd:4c:9e:a6:d3:d4:0f:77:f0:8c:f0:07:bd:
                    7e:d1:8e:df:ce:7a:35:68:50:bd:d1:13:fa:79:76:
                    2d:c4:ab:d9:9d:dc:80:bb:68:9c:ae:39:e6:94:fb:
                    34:80:dd:41:5c:66:88:ec:d0:bd:08:36:8a:93:f1:
                    eb:ea:47:6a:7c:37:2d:14:d5:e4:a1:40:d3:92:76:
                    5a:37:48:a0:b2:52:16:ed:a1:78:2a:da:79:7e:f6:
                    51:2a:02:9f:29:cd:70:dd:9d:e1:12:5b:40:81:10:
                    71:5d:fc:18:d7:f0:96:4e:7a:b3:4c:de:71:af:40:
                    5f:31:75:a4:1e:2d:68:1e:1d:05:b8:57:5d:66:3a:
                    04:8a:09:15:5c:a1:ae:54:c4:76:67:dc:44:c8:97:
                    cd:49:ae:19:f6:db:86:a9:1c:47:1c:77:06:ff:d4:
                    27:ae:51:a4:3a:30:60:bb:32:ed:9c:1c:06:e9:4e:
                    32:fa:26:49:91:b2:fb:fd:c4:a8:0d:2d:12:cf:cb:
                    4a:ef:8d:32:ad:66:ef:7f:8f:c9:25:a5:ee:bc:5a:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:8C:E5:3D:92:70:23:0D:09:6C:0A:58:5D:54:FF:94:84:5B:A0
            X509v3 Authority Key Identifier:
                keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:55:61:9e:18:8d:0e:9e:b1:99:f1:22:82:e6:a0:a8:18:a6:
         55:12:64:f3:43:d0:dc:1b:30:16:3f:1d:24:03:05:ce:81:fe:
         a6:f0:9a:a2:e8:5c:91:7f:e9:42:da:73:9d:fe:e0:d4:f9:18:
         db:71:ea:78:c0:7b:9c:20:6b:b7:80:fa:66:10:29:0d:80:fc:
         64:54:d5:f0:79:c9:b3:79:7a:a4:f1:c1:b7:33:5b:ee:49:e7:
         02:5f:90:cf:4a:b4:5e:bd:b8:d7:8d:db:83:fe:59:53:8b:0f:
         c1:27:88:e6:e4:ff:cf:e6:5b:f5:05:f7:4c:2f:39:f5:a2:cd:
         47:fc:af:88:87:31:07:df:f9:1a:f1:3a:01:5a:d5:1c:38:63:
         73:cb:2b:dc:9b:e3:8e:75:2a:69:eb:cd:42:fd:1f:8b:08:7b:
         30:59:10:35:52:8b:89:89:e2:63:d7:e3:91:bf:90:c4:cf:40:
         11:3b:f0:63:48:e0:a9:32:91:de:c2:14:26:42:47:26:c8:d8:
         ce:3b:ee:89:7c:02:4e:97:7c:e4:16:15:49:9c:3c:dc:94:cb:
         8e:d9:9c:a5:67:6f:28:f2:8c:01:6d:31:03:29:ed:a7:aa:94:
         40:6d:81:a5:e9:a8:db:57:07:67:0c:55:ba:4d:55:05:47:ed:
         81:2e:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 21:55:24 2026 by rpki-client