This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: 6A+wFZglZ6wLMuQ1LCGkjipHP7+WRYeGFOMG7OqHc9o= Subject key identifier: 5A:E3:18:AD:0D:EB:22:15:9E:E7:0C:22:D0:C8:E1:B6:F3:0D:62:3B Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 2C96114EF588B68EB6C04C4015F5B022A0BEFDEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 1D Signing time: Mon 09 Feb 2026 11:36:41 +0000 Manifest this update: Mon 09 Feb 2026 11:31:41 +0000 Manifest next update: Tue 10 Feb 2026 13:39:41 +0000 Files and hashes: 1: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 2: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 3: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: XuvyCs6h8QGA4ex4dGSfYGvthE+KAGpnGyp/Ufp6qqE=) 4: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 5: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Feb 2026 13:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:11:4e:f5:88:b6:8e:b6:c0:4c:40:15:f5:b0:22:a0:be:fd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Feb 9 11:31:41 2026 GMT Not After : Feb 10 13:39:41 2026 GMT Subject: CN=5AE318AD0DEB22159EE70C22D0C8E1B6F30D623B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:49:ff:ed:d7:44:41:76:e8:1d:f8:5c:a7: 6d:e6:43:1c:0e:40:61:d1:c6:66:11:58:01:67:cf: 42:b9:66:bf:18:86:6d:ea:be:97:db:3c:0a:d5:e5: e5:2c:9d:df:59:23:84:68:58:1c:0e:05:d8:ac:3c: 63:e7:a7:7e:a4:3c:e0:14:ab:7a:61:4d:44:49:67: 2b:64:40:8f:d5:26:af:e6:c4:58:1b:59:f8:b4:7a: 15:11:00:40:4f:a4:59:20:e7:67:01:ca:bc:20:64: 50:66:48:e1:9d:0d:d7:55:fe:13:a4:b3:7d:29:d3: 87:41:86:e2:b4:0f:a5:a6:37:70:05:48:2c:d7:ce: 19:2d:49:c1:51:55:4c:8d:61:fc:cb:89:ef:1c:bf: 8b:9b:72:d0:e3:ec:7f:7d:50:ce:f8:b8:1d:71:2a: 96:a4:48:11:89:aa:13:93:df:8d:1b:f5:62:ea:e2: 7a:45:39:88:de:b4:18:0d:fc:41:cf:50:2e:be:56: 65:c9:c9:43:df:22:b7:00:38:c0:78:11:d2:71:5a: cb:db:ef:2c:3d:04:92:54:8b:b0:6a:88:28:2a:d4: 84:c8:5b:af:f6:96:81:92:07:d7:c1:29:44:e2:c9: 2d:30:5e:cf:d0:c7:4c:af:ca:15:c8:6c:20:44:9e: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:18:AD:0D:EB:22:15:9E:E7:0C:22:D0:C8:E1:B6:F3:0D:62:3B X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c0:6d:2b:75:3c:7a:97:65:b3:93:87:d3:a7:92:9e:ab:aa: 77:3f:f0:86:c4:22:2f:42:c4:be:02:78:0a:68:48:33:43:61: 01:a2:a6:09:0f:de:3d:f7:72:47:b6:2b:b7:fa:af:8c:dd:3b: 05:49:95:7c:ec:65:23:9b:5c:fe:39:a2:fe:45:cb:f0:de:5f: e3:57:f8:c2:ee:f2:85:32:7b:fe:6b:1c:12:f4:11:c9:16:46: 1e:17:dc:12:26:5b:f3:0e:2c:2d:d6:7b:d8:2a:e0:30:69:61: c6:a3:67:8e:59:cf:c1:bc:2e:de:e4:ca:2a:b6:92:25:9e:c2: d8:c0:00:e3:ef:8e:50:6b:2d:d0:04:3a:61:d1:71:89:1f:a0: 91:18:8e:de:4f:b6:25:1e:51:cf:38:c0:70:7d:1f:31:fb:9a: ed:56:80:e1:2f:76:1e:77:bf:fc:37:dd:84:4d:0f:63:a2:cc: a7:6f:79:27:1f:58:2f:fc:69:62:0f:f3:06:2f:41:a6:43:98: 36:d3:0d:09:48:a9:d7:85:d6:87:69:b5:36:bc:7c:fd:b9:84: b3:b9:32:0b:26:9a:ab:88:4b:55:07:4b:91:f6:bc:60:3a:e3: 52:4d:dd:da:56:9c:ba:e3:d0:31:c5:a4:8b:c1:95:c0:bb:e7: 72:c8:ae:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULJYRTvWIto62wExAFfWwIqC+/e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAyMDkxMTMxNDFaFw0yNjAyMTAxMzM5NDFaMDMxMTAvBgNV BAMTKDVBRTMxOEFEMERFQjIyMTU5RUU3MEMyMkQwQzhFMUI2RjMwRDYyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOUn/7ddEQXboHfhcp23mQxwO QGHRxmYRWAFnz0K5Zr8Yhm3qvpfbPArV5eUsnd9ZI4RoWBwOBdisPGPnp36kPOAU q3phTURJZytkQI/VJq/mxFgbWfi0ehURAEBPpFkg52cByrwgZFBmSOGdDddV/hOk s30p04dBhuK0D6WmN3AFSCzXzhktScFRVUyNYfzLie8cv4ubctDj7H99UM74uB1x KpakSBGJqhOT340b9WLq4npFOYjetBgN/EHPUC6+VmXJyUPfIrcAOMB4EdJxWsvb 7yw9BJJUi7BqiCgq1ITIW6/2loGSB9fBKUTiyS0wXs/Qx0yvyhXIbCBEnvDlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWuMYrQ3rIhWe5wwi0MjhtvMNYjswHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8BtK3U8epdl s5OH06eSnquqdz/whsQiL0LEvgJ4CmhIM0NhAaKmCQ/ePfdyR7Yrt/qvjN07BUmV fOxlI5tc/jmi/kXL8N5f41f4wu7yhTJ7/mscEvQRyRZGHhfcEiZb8w4sLdZ72Crg MGlhxqNnjlnPwbwu3uTKKraSJZ7C2MAA4++OUGst0AQ6YdFxiR+gkRiO3k+2JR5R zzjAcH0fMfua7VaA4S92Hne//DfdhE0PY6LMp295Jx9YL/xpYg/zBi9BpkOYNtMN CUip14XWh2m1Nrx8/bmEs7kyCyaaq4hLVQdLkfa8YDrjUk3d2lacuuPQMcWki8GV wLvncsiusw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:53 2026 by rpki-client