This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
File:                     B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft (raw, json)
Hash identifier:          uRDpP7UWzJiOVsFRriv+7Htlxh2+TW8NLbw6Mghz//8=
Subject key identifier:   C2:F3:E0:6B:E6:91:8B:24:BB:04:20:CE:5B:3D:11:B7:56:F0:74:E7
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       6BF18DBB1DA947BA843B7B7F47339E763F9693E3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
Manifest number:          03
Signing time:             Wed 21 Jan 2026 01:55:30 +0000
Manifest this update:     Wed 21 Jan 2026 01:50:30 +0000
Manifest next update:     Thu 22 Jan 2026 03:23:30 +0000
Files and hashes:         1: 3131322e3132362e302e302f31362d3234203d3e203337393633.roa (hash: azRrezG+l+poPSWi8QrlWFGHsPHHzef6/dDX2yt64dc=)
                          2: 3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa (hash: d85GdIxTHF9Rw1pywiDP/VQLaUyACze09vZCzp1zdMw=)
                          3: 3131322e3132342e302e302f31362d3234203d3e203337393633.roa (hash: Mk/05zpZqtgnYq/+gGO7xCjBwe9RIZVxgBhE9qeWpDc=)
                          4: 323430383a343031363a3a2f33322d3332203d3e203234343239.roa (hash: JY6EyEHObFN70WtIyyCcgFcMUMI20Yh+7uSNKIo60Bg=)
                          5: 3131322e3132372e302e302f31362d3234203d3e203337393633.roa (hash: goE3v337E72XTpSyZ1GGzQZcIkJqpGaZayoHHRYCyyI=)
                          6: 3131322e3132352e302e302f31362d3234203d3e203337393633.roa (hash: aVwCtUf4CHRKNiIbNF2n4nOJkda7r3fi/o0daicqHfo=)
                          7: 3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa (hash: NvYcvgpbx6I9/r422RHq98K59aloqU/WXru2lzELV3o=)
                          8: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl (hash: BN3/r5vd5uNgN8f2pN8vjR9ja5gFJ0dFq0MoPi4At/U=)
                          9: 3131322e3132362e302e302f31352d3135203d3e203337393633.roa (hash: FdOZEfGKClBYoXB7pc6OA0OyxtCs3v7jL0QmWrkPMgg=)
                          10: 3131322e3132342e302e302f31342d3134203d3e203337393633.roa (hash: RlIzuqtLZFY/AyZ+gI2Uy7dDwcT3KJRDY+Kan/fqhVU=)
                          11: 323430363a323838303a3a2f33322d3438203d3e203337393633.roa (hash: rWCQVTBmLmXUSKc3bxnDItzi3nNjAIwB9tZw96f2FAA=)
                          12: 3131322e3132342e302e302f31352d3135203d3e203337393633.roa (hash: HrxzZSXdX7+SXiAtVFXWEaXNTmRFpOf1krlUUQGaq4Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 02:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f1:8d:bb:1d:a9:47:ba:84:3b:7b:7f:47:33:9e:76:3f:96:93:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: Jan 21 01:50:30 2026 GMT
            Not After : Jan 22 03:23:30 2026 GMT
        Subject: CN=C2F3E06BE6918B24BB0420CE5B3D11B756F074E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:47:97:4c:a8:e3:19:94:3e:ff:c9:ae:1c:
                    8f:7d:27:35:51:47:f2:50:2f:de:1f:6d:30:2e:af:
                    90:9c:3f:ff:30:ef:59:7f:ba:e7:97:f2:99:f1:fa:
                    2d:e9:5e:07:da:30:9a:73:18:1b:b0:99:b3:ec:94:
                    13:6e:51:47:7b:9f:90:3c:04:d5:0d:3c:51:0e:bd:
                    15:0d:f0:2f:e6:18:8a:f3:53:88:f9:d8:aa:e7:77:
                    de:5c:3c:ad:7f:34:7d:d7:18:c5:13:ee:75:5d:3d:
                    aa:d1:d7:17:78:37:cb:c3:5c:7f:42:3b:19:c1:8d:
                    97:22:33:f2:03:87:65:e2:13:04:26:00:d1:63:a1:
                    4a:6d:62:cb:36:71:39:d2:51:af:12:0b:97:e8:0e:
                    ae:d0:d5:bd:18:e3:92:24:f1:1f:82:67:4d:4a:e4:
                    ba:eb:6e:26:20:b5:78:90:c6:b5:57:05:52:fc:ef:
                    64:2e:84:6c:32:8e:54:ad:60:b7:b0:54:f3:61:aa:
                    8f:41:96:2b:57:e2:15:1a:68:70:1a:7c:c3:c3:9b:
                    f2:18:6b:40:bc:b7:f3:99:a6:cb:a8:a5:78:6f:27:
                    c5:aa:4a:fc:a3:67:05:24:0a:36:3d:a2:ec:66:26:
                    58:68:95:a3:c7:6b:cc:90:0a:4f:73:e2:7f:8a:cf:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:E0:6B:E6:91:8B:24:BB:04:20:CE:5B:3D:11:B7:56:F0:74:E7
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:5f:9f:6e:8e:2b:72:a3:de:7a:89:b0:a4:83:87:a9:ca:
         e2:9e:d5:13:5a:d0:3c:d3:14:c9:59:b0:02:a1:e9:c3:46:45:
         fe:16:a8:10:52:0d:26:dc:52:a6:36:73:e3:4a:b0:c5:94:e5:
         62:c4:e6:00:86:c6:d5:a5:70:13:28:d6:db:23:76:6b:0d:af:
         b4:a1:e6:ef:e4:c1:d7:b3:10:37:6a:e7:84:f1:4f:79:f9:5b:
         d4:a5:4d:c3:b3:d1:8d:aa:47:a8:9d:13:85:c3:87:59:4f:23:
         29:a6:bc:5c:24:16:7b:24:d4:9e:3f:a6:99:b2:ac:16:72:e0:
         0f:ae:db:e5:5a:64:93:19:39:5c:b0:0c:ec:ae:85:21:65:be:
         71:97:a8:d6:52:6c:2b:48:7c:e2:8d:ad:c5:a6:97:cd:36:45:
         1f:2a:51:a4:3f:c3:58:3f:2d:1f:bb:31:f1:21:22:7a:ed:24:
         4a:ba:d8:3d:a8:7d:cd:e9:68:e2:09:ae:b8:7a:c6:a5:28:07:
         35:fd:79:f4:69:85:40:1d:ec:51:aa:49:e1:ac:48:03:6a:46:
         ec:ed:95:ce:3c:64:cc:bc:8d:5d:61:8f:74:ad:17:ad:74:a5:
         5c:22:95:6b:0b:5b:9e:e3:6c:6b:35:fe:dd:ee:b4:3c:15:d0:
         c2:1f:ab:0d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUa/GNux2pR7qEO3t/RzOedj+Wk+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjAxMjEwMTUwMzBaFw0yNjAxMjIwMzIzMzBaMDMxMTAvBgNV
BAMTKEMyRjNFMDZCRTY5MThCMjRCQjA0MjBDRTVCM0QxMUI3NTZGMDc0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvn0eXTKjjGZQ+/8muHI99JzVR
R/JQL94fbTAur5CcP/8w71l/uueX8pnx+i3pXgfaMJpzGBuwmbPslBNuUUd7n5A8
BNUNPFEOvRUN8C/mGIrzU4j52Krnd95cPK1/NH3XGMUT7nVdParR1xd4N8vDXH9C
OxnBjZciM/IDh2XiEwQmANFjoUptYss2cTnSUa8SC5foDq7Q1b0Y45Ik8R+CZ01K
5LrrbiYgtXiQxrVXBVL872QuhGwyjlStYLewVPNhqo9BlitX4hUaaHAafMPDm/IY
a0C8t/OZpsuopXhvJ8WqSvyjZwUkCjY9ouxmJlholaPHa8yQCk9z4n+Kz03FAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUwvPga+aRiyS7BCDOWz0Rt1bwdOcwHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC9CM0NBRkI1OUYxMEIw
M0FEMjEwNkU4MjE1REJCOTAzRjE1N0QwQzhFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkftfn26OK3Kj
3nqJsKSDh6nK4p7VE1rQPNMUyVmwAqHpw0ZF/haoEFINJtxSpjZz40qwxZTlYsTm
AIbG1aVwEyjW2yN2aw2vtKHm7+TB17MQN2rnhPFPeflb1KVNw7PRjapHqJ0ThcOH
WU8jKaa8XCQWeyTUnj+mmbKsFnLgD67b5Vpkkxk5XLAM7K6FIWW+cZeo1lJsK0h8
4o2txaaXzTZFHypRpD/DWD8tH7sx8SEieu0kSrrYPah9zelo4gmuuHrGpSgHNf15
9GmFQB3sUapJ4axIA2pG7O2VzjxkzLyNXWGPdK0XrXSlXCKVawtbnuNsazX+3e60
PBXQwh+rDQ==
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:20 2026 by rpki-client