This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File:                     7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier:          5NDTmlFbwnkHD0sVCNryZId3agqlGwikFwNe7oven+I=
Subject key identifier:   09:88:F7:DB:D4:54:EC:29:87:5A:69:45:1E:9A:38:83:B1:25:35:D1
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       6EF78F0DC5203D0FD8E057E0FC1C24C3D9B0AE74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number:          1D
Signing time:             Mon 09 Feb 2026 06:56:41 +0000
Manifest this update:     Mon 09 Feb 2026 06:51:41 +0000
Manifest next update:     Tue 10 Feb 2026 08:47:41 +0000
Files and hashes:         1: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: TU7ZJNCwClYrsU1NauNV3mGyuEZ7pEPSt/hCIocHutg=)
                          2: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
                          3: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
                          4: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
                          5: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
                          6: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
                          7: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
                          8: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
                          9: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 08:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:8f:0d:c5:20:3d:0f:d8:e0:57:e0:fc:1c:24:c3:d9:b0:ae:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Feb  9 06:51:41 2026 GMT
            Not After : Feb 10 08:47:41 2026 GMT
        Subject: CN=0988F7DBD454EC29875A69451E9A3883B12535D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:10:94:a4:33:84:d2:2c:1f:bd:5c:f4:d5:
                    4d:fc:24:8f:31:f8:bd:b5:15:96:97:0e:37:50:e5:
                    e7:95:1f:42:58:61:75:63:41:89:ff:26:7d:5b:12:
                    07:c5:8a:c7:71:34:fb:91:1a:24:46:a7:bf:23:80:
                    0f:69:24:2c:ce:53:31:9d:82:da:01:ff:94:d3:d6:
                    38:28:58:bc:dd:35:09:a1:72:a5:72:ff:ec:6e:6a:
                    97:0e:23:5e:eb:a8:f7:a4:20:8f:93:fa:a7:43:e5:
                    18:ab:4c:d1:d3:48:9e:d2:c2:1d:7c:a9:68:82:d3:
                    5c:54:dc:f7:66:52:44:ef:ad:f6:44:d9:a2:ca:bc:
                    26:2a:54:90:69:a6:45:bd:1f:8e:13:cb:b5:4a:09:
                    2b:dc:a9:c6:ea:c6:77:f9:b4:0b:f6:3a:44:38:d1:
                    15:57:a0:28:e8:e2:8d:bc:fa:ab:25:1d:0e:eb:9e:
                    09:86:a3:38:60:77:c4:98:1f:39:3d:8d:76:8a:d8:
                    e1:19:ea:7e:1e:9f:7b:f1:d5:04:28:93:fd:8e:13:
                    e5:ab:f8:97:e9:11:89:be:9e:71:d0:0d:f2:70:3a:
                    8f:20:6b:f2:1d:21:eb:f9:70:cc:e5:59:bb:6f:28:
                    f2:c3:f8:08:9f:d9:eb:3f:e6:d3:3f:ca:81:c4:09:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:F7:DB:D4:54:EC:29:87:5A:69:45:1E:9A:38:83:B1:25:35:D1
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:78:1d:98:7e:be:50:45:e3:0c:bf:88:ec:d0:3a:1b:11:b1:
         7a:7e:31:12:a0:a0:9e:d8:20:0c:28:d9:8b:48:c4:63:34:86:
         d5:18:4b:74:96:e6:ba:8e:e0:3e:8b:e5:34:8b:e8:f7:4f:f2:
         37:41:0e:83:10:73:12:2e:7a:46:6c:7c:55:3c:c7:08:34:15:
         e8:fd:53:38:f1:61:e2:7b:3c:64:45:69:7a:9f:74:b5:45:1b:
         8e:5c:0b:bd:99:13:14:5c:66:45:d7:ae:65:27:8e:32:e7:d2:
         71:ca:54:8e:f9:50:0c:c6:33:52:95:c5:65:c2:e3:59:00:cf:
         5a:6c:1d:8e:87:f5:4e:85:e0:60:63:10:56:04:a4:e7:e2:e4:
         94:65:1a:af:90:10:bd:93:d5:03:6d:10:5a:7d:10:d0:36:da:
         32:8c:ad:06:4e:38:34:d6:22:4f:45:c3:7e:77:85:f1:b1:82:
         c6:f8:46:19:77:c2:00:61:2b:3f:cc:ec:35:f7:81:79:4b:ae:
         a3:c3:64:88:46:7e:d0:6d:c4:58:ae:10:12:a5:78:7b:2f:27:
         d9:ae:3e:5c:8e:2f:36:65:b2:16:b6:63:e0:bc:2f:fa:40:77:
         7d:f0:11:b6:34:ce:91:d6:75:8d:42:b9:5f:72:1b:27:87:31:
         ca:67:f8:53
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbvePDcUgPQ/Y4Ffg/Bwkw9mwrnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjAyMDkwNjUxNDFaFw0yNjAyMTAwODQ3NDFaMDMxMTAvBgNV
BAMTKDA5ODhGN0RCRDQ1NEVDMjk4NzVBNjk0NTFFOUEzODgzQjEyNTM1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfZBCUpDOE0iwfvVz01U38JI8x
+L21FZaXDjdQ5eeVH0JYYXVjQYn/Jn1bEgfFisdxNPuRGiRGp78jgA9pJCzOUzGd
gtoB/5TT1jgoWLzdNQmhcqVy/+xuapcOI17rqPekII+T+qdD5RirTNHTSJ7Swh18
qWiC01xU3PdmUkTvrfZE2aLKvCYqVJBppkW9H44Ty7VKCSvcqcbqxnf5tAv2OkQ4
0RVXoCjo4o28+qslHQ7rngmGozhgd8SYHzk9jXaK2OEZ6n4en3vx1QQok/2OE+Wr
+JfpEYm+nnHQDfJwOo8ga/IdIev5cMzlWbtvKPLD+Aif2es/5tM/yoHECf9RAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCYj329RU7CmHWmlFHpo4g7ElNdEwHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw
REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3gdmH6+UEXj
DL+I7NA6GxGxen4xEqCgntggDCjZi0jEYzSG1RhLdJbmuo7gPovlNIvo90/yN0EO
gxBzEi56Rmx8VTzHCDQV6P1TOPFh4ns8ZEVpep90tUUbjlwLvZkTFFxmRdeuZSeO
MufSccpUjvlQDMYzUpXFZcLjWQDPWmwdjof1ToXgYGMQVgSk5+LklGUar5AQvZPV
A20QWn0Q0DbaMoytBk44NNYiT0XDfneF8bGCxvhGGXfCAGErP8zsNfeBeUuuo8Nk
iEZ+0G3EWK4QEqV4ey8n2a4+XI4vNmWyFrZj4Lwv+kB3ffARtjTOkdZ1jUK5X3Ib
J4cxymf4Uw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:23:47 2026 by rpki-client