This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft File: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft (raw, json) Hash identifier: h+TIwIA2pVOilEZq5wLAhMpL6De30+CK3IF1nNHhiUY= Subject key identifier: 89:7D:31:D2:A6:03:4D:44:A1:F5:37:87:00:0A:52:15:46:20:1C:D6 Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Certificate serial: 1C03D9BB56A4CDFD5B9115A424727DBE487818B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 22:21:02 +0000 Manifest this update: Mon 26 Jan 2026 22:16:02 +0000 Manifest next update: Tue 27 Jan 2026 22:58:02 +0000 Files and hashes: 1: 3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa (hash: cR1QC3KffhOvNISYzseljtU/thjp7UdYL89Ej+QpRLg=) 2: 34332e3235302e31322e302f32322d3234203d3e203337393633.roa (hash: Axcsdv7wuYSOx59KjF/tPBAkwJMdYEqYj5y+PZH9YcA=) 3: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl (hash: 1ZCCXMj61Z/UTsrmuyd+m6hgk6fEEmgMibv2fZ84J0w=) 4: 35392e38322e3133362e302f32312d3234203d3e203337393633.roa (hash: nvrBbCBZxiKHH4/w06YQmWfwNEM5VV1VM8cMrZ9eZm4=) 5: 34352e3131322e3232302e302f32322d3234203d3e203337393633.roa (hash: O50RoXkWuwqIp3tU4cqtQBbuC+H8D0RovNcoO+GmWt4=) 6: 3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa (hash: PVj8AKXZGpqgnyXN3N+0GWqD3qDlP6MOzJ8PFhiOdb4=) 7: 35392e38322e3133362e302f32312d3234203d3e203435313032.roa (hash: IqkUZ5luK9Yhi/2XfaVOwPeI4UW5zGTXPhH03zlIdvw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:03:d9:bb:56:a4:cd:fd:5b:91:15:a4:24:72:7d:be:48:78:18:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Validity Not Before: Jan 26 22:16:02 2026 GMT Not After : Jan 27 22:58:02 2026 GMT Subject: CN=897D31D2A6034D44A1F53787000A521546201CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:64:fc:b9:cc:6c:41:5f:5d:b3:e7:e9:0c: 91:e1:5a:f7:b4:ad:21:c8:56:40:58:52:ac:46:4e: 32:5f:22:31:e4:fa:a1:9d:c9:6b:74:e4:27:02:d9: eb:b1:34:a5:44:54:01:fb:56:ba:f2:34:a0:a2:07: e7:cf:75:de:69:89:36:cf:cc:48:c5:6d:09:49:47: 7f:c6:15:24:5c:94:41:94:d0:13:64:34:bc:6b:01: f0:23:c2:99:bd:55:15:51:d0:7d:3a:67:a9:10:69: a3:cc:f2:62:47:5b:66:b8:9e:0a:55:e0:44:98:dd: 67:ff:21:e6:3d:e4:6f:5f:9d:85:7b:05:7b:7f:df: 3a:7d:2c:44:9b:b5:37:dc:a9:6f:0a:14:61:0c:ea: 81:6b:53:eb:15:38:4b:f3:8a:81:30:dc:19:bc:89: b7:e6:de:dc:da:c4:7b:f7:8e:28:64:e2:5f:d6:95: 66:dd:1f:0f:b2:7f:ad:b8:9f:e4:28:a4:c9:0f:4f: 78:01:5b:7a:f8:4f:74:13:13:0a:fc:02:8c:94:0d: 6c:a7:a6:94:83:ad:de:e9:82:b3:60:75:5f:0b:da: e4:85:ea:0b:1d:1f:b1:4f:c9:a9:7c:cc:56:7e:46: 77:d3:33:7b:2e:fd:67:54:55:28:4b:62:f6:57:8e: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7D:31:D2:A6:03:4D:44:A1:F5:37:87:00:0A:52:15:46:20:1C:D6 X509v3 Authority Key Identifier: keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:a6:fc:e0:59:35:db:0a:48:19:7d:65:20:8e:5f:31:d0: aa:f8:5e:6d:eb:a8:1a:df:56:15:9e:17:c5:74:5d:cf:bb:33: 66:63:fe:2a:24:79:45:5e:b6:0b:07:90:fc:e9:4c:56:c5:1c: 29:a8:59:ea:50:1c:ee:c6:d6:53:c4:16:b3:56:e8:df:49:95: 49:68:ff:91:0f:bd:53:12:3c:cc:92:79:e8:8b:82:f9:7f:c5: e2:32:c4:9c:7b:5a:a8:42:5a:cd:a2:a0:a3:fe:6f:44:05:b4: 1d:16:29:07:73:a8:c8:8f:e1:db:26:c9:bb:f6:d9:98:10:79: 52:ad:2b:fb:0a:1d:fc:f3:18:ec:86:c9:e8:bd:95:99:6f:47: f1:4c:38:76:84:5f:51:47:11:d1:b3:16:e7:de:34:7f:27:63: 86:03:02:39:3a:c2:31:e5:11:48:50:41:85:c0:bf:ef:ee:ae: 27:ae:15:cc:6d:13:e7:3c:fe:ea:93:a2:a0:8a:0d:dd:2d:8f: b0:59:83:b9:d1:30:9c:af:ec:4b:9a:26:54:80:89:d1:09:ce: ee:c5:51:14:8b:07:79:ea:64:08:dc:64:66:f0:3a:c9:eb:88: 97:50:81:96:5a:47:1f:b6:78:3a:56:ec:53:aa:7d:1c:af:1a: df:7b:e4:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHAPZu1akzf1bkRWkJHJ9vkh4GLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD MENGMTU3RjAeFw0yNjAxMjYyMjE2MDJaFw0yNjAxMjcyMjU4MDJaMDMxMTAvBgNV BAMTKDg5N0QzMUQyQTYwMzRENDRBMUY1Mzc4NzAwMEE1MjE1NDYyMDFDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCGT8ucxsQV9ds+fpDJHhWve0 rSHIVkBYUqxGTjJfIjHk+qGdyWt05CcC2euxNKVEVAH7VrryNKCiB+fPdd5piTbP zEjFbQlJR3/GFSRclEGU0BNkNLxrAfAjwpm9VRVR0H06Z6kQaaPM8mJHW2a4ngpV 4ESY3Wf/IeY95G9fnYV7BXt/3zp9LESbtTfcqW8KFGEM6oFrU+sVOEvzioEw3Bm8 ibfm3tzaxHv3jihk4l/WlWbdHw+yf624n+QopMkPT3gBW3r4T3QTEwr8AoyUDWyn ppSDrd7pgrNgdV8L2uSF6gsdH7FPyal8zFZ+RnfTM3su/WdUVShLYvZXjrLrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiX0x0qYDTUSh9TeHAApSFUYgHNYwHwYDVR0j BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgzMzcxNTUvMC8wNTZGN0Y5RTAzNTg3 RERGRUM2QTA0OUVBMEYyMEZBMUMwQ0YxNTdGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmam/OBZNdsK SBl9ZSCOXzHQqvhebeuoGt9WFZ4XxXRdz7szZmP+KiR5RV62CweQ/OlMVsUcKahZ 6lAc7sbWU8QWs1bo30mVSWj/kQ+9UxI8zJJ56IuC+X/F4jLEnHtaqEJazaKgo/5v RAW0HRYpB3OoyI/h2ybJu/bZmBB5Uq0r+wod/PMY7IbJ6L2VmW9H8Uw4doRfUUcR 0bMW5940fydjhgMCOTrCMeURSFBBhcC/7+6uJ64VzG0T5zz+6pOioIoN3S2PsFmD udEwnK/sS5omVICJ0QnO7sVRFIsHeepkCNxkZvA6yeuIl1CBllpHH7Z4OlbsU6p9 HK8a33vkJQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:40:47 2026 by rpki-client