This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: mTJVjCpPsP0SZjIQeJ/IHfxMjOwOb7zfpoF4SKbXChg= Subject key identifier: D2:88:D3:D3:C5:CD:BD:A8:C9:26:F1:F0:A1:E5:77:14:FA:59:07:B7 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 50FFEDD2AEFE4F40B4C404BC0744AA3C11BAFB7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: 02 Signing time: Mon 19 Jan 2026 10:08:31 +0000 Manifest this update: Mon 19 Jan 2026 10:03:31 +0000 Manifest next update: Tue 20 Jan 2026 11:05:31 +0000 Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: qdMBpTFtNZQOOo13IHyqfZckuEqPzSBqpd2i/tUeOFo=) 2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 11:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ff:ed:d2:ae:fe:4f:40:b4:c4:04:bc:07:44:aa:3c:11:ba:fb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Jan 19 10:03:31 2026 GMT Not After : Jan 20 11:05:31 2026 GMT Subject: CN=D288D3D3C5CDBDA8C926F1F0A1E57714FA5907B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:2f:3f:45:ab:12:f8:87:f2:34:b5:ea:6b: 1c:c1:94:02:3a:92:2a:70:73:59:ec:8e:6f:04:ca: 23:a2:54:7a:ec:eb:fa:f4:b5:0f:16:26:66:7a:1b: 5b:f1:cc:46:56:17:6a:df:3a:01:77:76:e5:6d:92: d8:9a:aa:2c:ac:94:18:2e:5a:d8:cd:f2:5a:9c:e7: 34:dd:43:f4:10:46:07:0d:fe:0b:c2:bf:cd:23:f1: f3:39:63:85:7b:d2:74:52:db:cd:b6:a1:33:60:b4: 2a:0c:37:22:64:be:90:70:c5:0d:4d:8d:f9:d6:71: 22:53:83:2e:77:0e:5e:2e:bf:f2:e4:9a:e0:57:b1: f4:dc:9b:ec:ff:86:7e:40:17:67:c3:7f:df:e9:44: 0a:37:74:28:06:cd:67:2e:ac:6d:3b:4e:94:83:b4: 07:66:4e:4e:01:99:25:56:56:91:d0:02:3c:55:bb: ed:14:94:9b:f2:52:98:4b:70:3f:5f:f7:66:a0:f3: 54:99:a7:f6:a8:da:ec:e1:d5:4f:62:c6:48:f4:61: 06:94:a7:fe:81:33:54:6d:66:ad:69:cb:2e:5e:ae: b1:1a:2e:77:37:a8:33:7b:cc:28:b2:c3:75:3d:2c: 46:92:6a:e8:41:32:da:ff:a2:ad:ae:fd:a6:96:c5: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:88:D3:D3:C5:CD:BD:A8:C9:26:F1:F0:A1:E5:77:14:FA:59:07:B7 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2f:29:a4:9a:38:c1:7f:03:8d:e9:ef:ea:c8:f7:cf:fa:57: 5d:f3:49:8b:72:e5:9c:dc:df:01:b5:59:38:07:22:28:15:61: 74:fc:26:09:0c:e3:78:93:52:19:c5:73:2b:da:41:e5:56:06: 63:56:a8:da:49:96:24:df:ce:5a:fe:29:6a:aa:63:64:31:d4: cf:72:67:22:3c:96:7b:b1:0f:98:b6:bd:f0:3d:c0:cc:27:83: f7:7b:6a:5d:02:5c:00:b9:79:84:eb:03:67:74:1d:1c:38:d5: 2d:b1:00:8c:c4:b3:58:38:8e:3f:2a:27:f9:0d:69:4b:be:4e: 84:b8:0e:d9:d2:0e:46:97:de:bb:d7:3b:72:2b:16:8f:a5:1e: 29:05:40:a4:7f:68:61:c2:cd:c9:94:45:36:1e:23:06:d0:8c: a3:e0:ce:9a:72:39:b6:59:39:e0:8b:33:7e:48:64:2d:3a:83: 81:52:e2:bc:fd:8a:3b:4e:99:f2:7b:c9:21:f1:6f:33:56:95: cf:52:33:28:38:9d:31:f2:63:26:90:c5:c5:e0:c5:5a:01:c5: e9:3a:16:56:d1:b4:87:d9:8b:85:88:3e:c4:1e:46:aa:06:a8: 5b:12:4b:62:cd:7d:6d:7c:27:78:42:93:36:58:0a:9e:4d:79: 9a:16:d0:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUP/t0q7+T0C0xAS8B0SqPBG6+3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjAxMTkxMDAzMzFaFw0yNjAxMjAxMTA1MzFaMDMxMTAvBgNV BAMTKEQyODhEM0QzQzVDREJEQThDOTI2RjFGMEExRTU3NzE0RkE1OTA3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhS8/RasS+IfyNLXqaxzBlAI6 kipwc1nsjm8EyiOiVHrs6/r0tQ8WJmZ6G1vxzEZWF2rfOgF3duVtktiaqiyslBgu WtjN8lqc5zTdQ/QQRgcN/gvCv80j8fM5Y4V70nRS2822oTNgtCoMNyJkvpBwxQ1N jfnWcSJTgy53Dl4uv/LkmuBXsfTcm+z/hn5AF2fDf9/pRAo3dCgGzWcurG07TpSD tAdmTk4BmSVWVpHQAjxVu+0UlJvyUphLcD9f92ag81SZp/ao2uzh1U9ixkj0YQaU p/6BM1RtZq1pyy5errEaLnc3qDN7zCiyw3U9LEaSauhBMtr/oq2u/aaWxWV9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0ojT08XNvajJJvHwoeV3FPpZB7cwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC8ppJo4wX8D jenv6sj3z/pXXfNJi3LlnNzfAbVZOAciKBVhdPwmCQzjeJNSGcVzK9pB5VYGY1ao 2kmWJN/OWv4paqpjZDHUz3JnIjyWe7EPmLa98D3AzCeD93tqXQJcALl5hOsDZ3Qd HDjVLbEAjMSzWDiOPyon+Q1pS75OhLgO2dIORpfeu9c7cisWj6UeKQVApH9oYcLN yZRFNh4jBtCMo+DOmnI5tlk54IszfkhkLTqDgVLivP2KO06Z8nvJIfFvM1aVz1Iz KDidMfJjJpDFxeDFWgHF6ToWVtG0h9mLhYg+xB5GqgaoWxJLYs19bXwneEKTNlgK nk15mhbQ5w== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:25 2026 by rpki-client