This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json) Hash identifier: EJ5Ec8TECABhB0x+kc1cNSLQvfonYXJeSKV8Ze5OWVY= Subject key identifier: BA:86:46:22:28:00:13:D1:4D:D6:94:61:B1:57:FD:29:8F:AE:C0:42 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 31903C43F078CBB0B8FF0A4481EE21A674D170FA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 14:36:02 +0000 Manifest this update: Mon 26 Jan 2026 14:31:02 +0000 Manifest next update: Tue 27 Jan 2026 18:06:02 +0000 Files and hashes: 1: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=) 2: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=) 3: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: 5YHw5XbkWmRPyzuzYj8Odx4W0lRAirof4NBRPeSWZgE=) 4: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:3c:43:f0:78:cb:b0:b8:ff:0a:44:81:ee:21:a6:74:d1:70:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jan 26 14:31:02 2026 GMT Not After : Jan 27 18:06:02 2026 GMT Subject: CN=BA864622280013D14DD69461B157FD298FAEC042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:f0:e2:7a:f6:ff:33:d0:85:15:b9:df:46: dd:3d:f2:fc:3f:cd:a4:42:9f:5f:a7:7e:3a:cc:af: f1:d7:5d:cf:16:ac:8d:77:75:37:38:95:81:92:4c: 18:aa:a3:15:3a:3f:3d:07:3b:44:f7:31:55:33:e9: dd:08:be:b3:1b:f5:92:ca:80:b1:e1:da:de:73:78: 36:dd:5e:b3:09:a4:3f:66:55:8d:21:9f:50:8f:2d: 16:15:5f:80:59:9c:c3:eb:22:7c:98:ea:dc:85:c2: 1f:8f:ea:a9:a4:fa:70:3b:55:db:09:d2:16:47:7c: dc:cf:dc:04:d4:df:14:52:5e:ce:e4:44:e7:59:14: 07:77:7c:34:c3:f5:0d:4b:e7:21:fd:1c:dc:84:e2: f6:59:08:99:08:e1:2b:52:93:8d:b3:16:58:e7:72: 20:c2:6a:ce:82:96:19:65:f9:62:30:1e:28:8f:6c: 0d:26:ac:4c:42:0b:85:ff:b8:a5:58:5b:5e:aa:b9: 50:4b:3c:82:92:77:7f:bc:23:96:f1:be:b5:69:ac: c6:a0:28:9c:26:d4:5e:7b:17:e1:58:80:a0:15:66: 0f:e8:0e:19:1b:34:85:83:6d:19:b7:87:a2:4e:26: 31:2d:78:fa:0f:d0:62:3e:cb:c1:65:5c:c3:04:91: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:86:46:22:28:00:13:D1:4D:D6:94:61:B1:57:FD:29:8F:AE:C0:42 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:a8:15:f9:f8:28:9a:f4:c8:06:a9:c3:6f:9a:fd:9e:d1: 07:a4:54:45:9d:32:ba:0b:13:a8:f4:50:24:2d:4b:82:ba:a2: fb:31:88:fb:5b:6c:b4:1a:5f:96:7b:fc:c1:1a:f4:15:8c:d9: fb:83:cf:54:1f:74:a7:89:92:23:1e:28:12:6c:e6:b0:52:19: 16:af:e2:14:57:fc:0b:32:77:14:85:de:0a:17:bc:80:1f:e3: e3:ca:4a:63:fd:37:69:a1:8b:ca:e2:9d:03:a8:60:73:4e:b3: 27:8c:71:29:03:54:9a:25:3c:26:86:99:6d:51:e0:3c:ce:a8: 0b:83:fe:ab:22:c0:df:71:e7:3e:ae:08:88:42:1c:6c:37:89: 56:ba:18:23:07:fb:cc:62:51:8d:5c:3a:13:7d:01:6c:88:51: 16:db:29:09:a2:72:9b:0c:8c:22:7b:d3:a5:4e:cf:a5:4c:e0: 7c:5d:b3:6f:1a:7e:cf:0d:14:a1:fd:49:36:59:a1:ed:45:e5: ff:c5:d0:5e:fc:27:e0:7e:80:a6:c5:b0:b6:39:e4:65:78:46: 17:10:ba:6e:3c:0c:b0:4e:06:df:da:e2:48:61:04:bf:84:62: b6:87:55:b1:d7:15:1f:02:4e:5a:c6:2d:68:67:3c:a8:0f:10: 36:ce:b9:d6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMZA8Q/B4y7C4/wpEge4hpnTRcPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAxMjYxNDMxMDJaFw0yNjAxMjcxODA2MDJaMDMxMTAvBgNV BAMTKEJBODY0NjIyMjgwMDEzRDE0REQ2OTQ2MUIxNTdGRDI5OEZBRUMwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyfDievb/M9CFFbnfRt098vw/ zaRCn1+nfjrMr/HXXc8WrI13dTc4lYGSTBiqoxU6Pz0HO0T3MVUz6d0IvrMb9ZLK gLHh2t5zeDbdXrMJpD9mVY0hn1CPLRYVX4BZnMPrInyY6tyFwh+P6qmk+nA7VdsJ 0hZHfNzP3ATU3xRSXs7kROdZFAd3fDTD9Q1L5yH9HNyE4vZZCJkI4StSk42zFljn ciDCas6Clhll+WIwHiiPbA0mrExCC4X/uKVYW16quVBLPIKSd3+8I5bxvrVprMag KJwm1F57F+FYgKAVZg/oDhkbNIWDbRm3h6JOJjEtePoP0GI+y8FlXMMEkeU/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuoZGIigAE9FN1pRhsVf9KY+uwEIwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4 RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAKoFfn4KJr0 yAapw2+a/Z7RB6RURZ0yugsTqPRQJC1Lgrqi+zGI+1tstBpflnv8wRr0FYzZ+4PP VB90p4mSIx4oEmzmsFIZFq/iFFf8CzJ3FIXeChe8gB/j48pKY/03aaGLyuKdA6hg c06zJ4xxKQNUmiU8JoaZbVHgPM6oC4P+qyLA33HnPq4IiEIcbDeJVroYIwf7zGJR jVw6E30BbIhRFtspCaJymwyMInvTpU7PpUzgfF2zbxp+zw0Uof1JNlmh7UXl/8XQ Xvwn4H6ApsWwtjnkZXhGFxC6bjwMsE4G39riSGEEv4RitodVsdcVHwJOWsYtaGc8 qA8QNs651g== -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:46 2026 by rpki-client