This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: k2owAm9Irueb2lbw+q3hS03pzaFUS0fWP7FKCSkvb3E= Subject key identifier: 52:82:EC:E8:37:38:EC:DE:ED:E5:A1:FC:7A:08:B3:39:55:14:E9:95 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 6E8A008B398BF2688255420F2AFD5D97DA88421F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 08:36:02 +0000 Manifest this update: Mon 26 Jan 2026 08:31:02 +0000 Manifest next update: Tue 27 Jan 2026 11:29:02 +0000 Files and hashes: 1: 35322e38322e3137312e302f32342d3234203d3e20313335363239.roa (hash: V2IsTTD+YBLjIpGCWch8npi5V+LVGlQ6eiiuQMfl+0A=) 2: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: qbwIVxsJldJbvEfAsjsbYHZFzHESlsILZa+MllG6Axk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:8a:00:8b:39:8b:f2:68:82:55:42:0f:2a:fd:5d:97:da:88:42:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Jan 26 08:31:02 2026 GMT Not After : Jan 27 11:29:02 2026 GMT Subject: CN=5282ECE83738ECDEEDE5A1FC7A08B3395514E995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:e3:9f:f8:18:da:a6:db:2d:d6:da:9f:27: bf:01:29:7c:69:9f:95:79:d4:67:da:00:82:96:ef: bb:5b:7d:6e:3c:43:e5:0d:08:2c:7f:9e:89:af:17: ce:aa:c8:5e:d2:32:9b:01:ab:ea:37:cb:97:7b:34: 61:94:f7:0e:fc:0b:0b:a6:62:24:93:cd:a5:f1:c0: ab:4a:0d:7f:1b:b0:6c:aa:14:c0:c2:b1:a3:89:a1: 2f:e8:e1:fe:f9:35:e9:a1:5c:87:b2:4a:58:44:68: 3e:45:8f:34:34:84:e2:8c:a5:f1:cc:3f:7c:4f:81: a9:74:7b:48:0e:9e:c9:2e:2b:98:34:20:98:40:39: f7:82:67:ed:2f:1a:f9:4f:ec:32:4a:d1:4a:02:7e: a6:50:d0:93:84:8c:d2:ca:10:56:d2:43:cb:f7:95: 8a:5e:9f:f0:2f:aa:c1:b4:c4:75:83:8f:18:95:79: a6:f3:34:08:ec:14:cd:0a:5e:b6:b9:47:dc:f7:c8: b7:7b:57:d0:ec:e5:20:c7:e2:f4:ce:b0:8a:b7:0d: a7:5f:d1:e1:99:38:b1:9b:46:31:bd:3e:2a:88:18: f6:57:4f:aa:44:83:a6:05:2e:ce:81:ad:0b:3a:d6: 6c:e3:5d:af:46:35:54:51:6f:4a:7a:29:c6:24:77: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:82:EC:E8:37:38:EC:DE:ED:E5:A1:FC:7A:08:B3:39:55:14:E9:95 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5e:c3:b8:76:89:0a:43:4f:19:49:1e:74:b1:33:d7:00:64: 40:05:06:ca:87:d0:d0:e9:b7:4f:20:25:95:6f:5c:97:ef:07: 60:3e:60:6a:fa:dd:db:c1:12:f2:79:64:31:d0:e4:4b:f4:34: 9e:7b:92:8e:f5:cd:b1:36:1a:9e:71:df:ac:98:10:d7:06:e5: c3:0e:f1:68:e9:b6:7f:14:7e:6a:30:46:20:2e:51:53:26:48: 3f:57:89:e4:4b:2f:ae:32:80:ff:a0:3c:23:3e:06:ff:45:61: d0:62:af:a0:42:a0:d6:eb:25:1a:c0:a6:9e:4d:57:0e:7a:d4: e2:4a:78:95:51:8e:05:4a:c9:14:8c:72:cc:14:74:b6:79:86: df:86:79:5f:6c:c4:c5:ec:a0:69:8b:61:a6:cd:e6:4a:91:e5: 1f:e0:5c:05:c3:d2:c8:26:5d:70:ef:4a:a9:09:bd:16:51:ee: c4:89:54:49:6c:b6:7f:f5:be:4d:4d:24:c2:76:59:3c:22:34: 0d:df:da:b3:2d:ed:fa:32:66:fd:1a:cc:49:be:68:cc:9a:9a: 91:07:01:98:5c:d1:4c:03:28:67:1b:90:d6:c1:e1:bc:e7:d5: c2:14:93:b6:97:2b:e7:fc:d2:1c:d5:0c:52:ed:ae:1f:7f:a3: 6e:fd:6c:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbooAizmL8miCVUIPKv1dl9qIQh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjAxMjYwODMxMDJaFw0yNjAxMjcxMTI5MDJaMDMxMTAvBgNV BAMTKDUyODJFQ0U4MzczOEVDREVFREU1QTFGQzdBMDhCMzM5NTUxNEU5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRrOOf+Bjaptst1tqfJ78BKXxp n5V51GfaAIKW77tbfW48Q+UNCCx/nomvF86qyF7SMpsBq+o3y5d7NGGU9w78Cwum YiSTzaXxwKtKDX8bsGyqFMDCsaOJoS/o4f75NemhXIeySlhEaD5FjzQ0hOKMpfHM P3xPgal0e0gOnskuK5g0IJhAOfeCZ+0vGvlP7DJK0UoCfqZQ0JOEjNLKEFbSQ8v3 lYpen/AvqsG0xHWDjxiVeabzNAjsFM0KXra5R9z3yLd7V9Ds5SDH4vTOsIq3Dadf 0eGZOLGbRjG9PiqIGPZXT6pEg6YFLs6BrQs61mzjXa9GNVRRb0p6KcYkd1XXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUoLs6Dc47N7t5aH8egizOVUU6ZUwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAml7DuHaJCkNP GUkedLEz1wBkQAUGyofQ0Om3TyAllW9cl+8HYD5gavrd28ES8nlkMdDkS/Q0nnuS jvXNsTYannHfrJgQ1wblww7xaOm2fxR+ajBGIC5RUyZIP1eJ5EsvrjKA/6A8Iz4G /0Vh0GKvoEKg1uslGsCmnk1XDnrU4kp4lVGOBUrJFIxyzBR0tnmG34Z5X2zExeyg aYthps3mSpHlH+BcBcPSyCZdcO9KqQm9FlHuxIlUSWy2f/W+TU0kwnZZPCI0Dd/a sy3t+jJm/RrMSb5ozJqakQcBmFzRTAMoZxuQ1sHhvOfVwhSTtpcr5/zSHNUMUu2u H3+jbv1siQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:58:33 2026 by rpki-client