This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft File: B1F9550677201454EB206CCFD059783FCDDB44F0.mft (raw, json) Hash identifier: gcTEoo/KnuGiWxSlELbHWtBe+vNrfPZxV9tV3HE+y0Q= Subject key identifier: 85:FC:E4:92:6B:1F:4F:88:9E:D1:CB:6E:2D:DD:7D:AD:22:48:D1:64 Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 72FE06C737E465FBB18B2383E4E8D5A9DB15850C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft Manifest number: 02 Signing time: Tue 20 Jan 2026 02:20:23 +0000 Manifest this update: Tue 20 Jan 2026 02:15:23 +0000 Manifest next update: Wed 21 Jan 2026 03:02:23 +0000 Files and hashes: 1: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (hash: qsctuPBSfA+Dx7b6pLOln9nnloiMUANcbyygIqgY4OQ=) 2: 3130332e36302e3136342e302f32322d3232203d3e203632343638.roa (hash: auyuE2h/GPKANCvbz6Bw8Yi8e4eCZJDu9XTdgBKbank=) 3: 34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa (hash: r3XpPj1FYm8r25RMxCEfXoeyc9BUGQNJDYDBp+PrjQI=) 4: 3130332e31392e3233322e302f32322d3232203d3e203632343638.roa (hash: FIyKRHnh6ANBsNFHBDZY9OW6prlllmKtfsx4VFw8aRA=) 5: 34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (hash: bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=) 6: B1F9550677201454EB206CCFD059783FCDDB44F0.crl (hash: 7YU7JXT40a166/KYvf59DYt2MH3fAYHDcom9EwrmJiA=) 7: 34352e3234382e382e302f32322d3232203d3e203632343638.roa (hash: PRQJYfAdJbDuylQLPpP0OmrWCtfzAtohw68L22CpuFQ=) 8: 3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (hash: vvsbD3Qmkj+urJIzHpJtcmG8mKUbyHobxkx5+Svk+iM=) 9: 3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa (hash: 36wbu1SRDiLaujfYKA/iSyCAeDESkUTmIlUT9M35B30=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fe:06:c7:37:e4:65:fb:b1:8b:23:83:e4:e8:d5:a9:db:15:85:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Jan 20 02:15:23 2026 GMT Not After : Jan 21 03:02:23 2026 GMT Subject: CN=85FCE4926B1F4F889ED1CB6E2DDD7DAD2248D164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:44:b8:fa:a3:0b:fe:44:75:b7:f4:33:74: ae:de:01:1f:31:36:9f:99:0c:14:fe:3f:95:40:21: 75:14:83:1c:8b:ea:59:d1:e1:71:6b:52:b8:5f:cc: 58:6a:6d:a6:b3:d3:0a:3a:f3:7d:5e:a7:72:8d:55: 4c:5c:63:12:fb:d7:d5:1b:f6:47:34:f1:cb:f9:8b: f5:01:01:06:cb:05:c3:d9:ab:d2:9d:5e:09:30:9a: ab:4e:e9:d5:8b:0b:13:1f:f0:23:2f:c8:1b:b1:9e: 21:71:06:91:5b:4a:9e:75:1f:b3:bb:3d:63:62:42: 11:4b:08:02:55:53:cf:eb:f3:94:3d:c1:00:e8:31: 47:3f:19:5e:34:a4:89:00:0c:2b:b5:56:d6:d2:02: 2e:b6:a0:64:20:79:a6:da:e4:62:44:e9:98:cd:35: 71:bf:5d:3b:97:00:06:f0:e7:4f:eb:50:9b:fa:26: bd:df:37:01:da:6b:fe:92:ab:88:84:d1:3e:15:f5: f8:53:af:f9:cf:bf:79:24:23:9f:09:0e:7f:76:0a: 87:04:90:6c:6f:82:f5:fd:45:15:5e:89:a8:19:31: ff:0d:8f:53:d3:de:21:18:32:6f:58:58:c7:da:e6: 8d:51:a2:bf:aa:2e:c5:37:11:b6:57:58:1e:97:a1: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FC:E4:92:6B:1F:4F:88:9E:D1:CB:6E:2D:DD:7D:AD:22:48:D1:64 X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ec:b8:d0:bb:7f:f5:04:10:79:f8:4d:42:e5:ba:ab:a2:0e: aa:c4:44:88:d2:ad:c8:f3:e4:0d:ac:ef:80:08:8b:ea:49:25: ab:49:7d:0d:71:ec:a6:dc:1a:e6:8a:6d:42:58:eb:17:83:33: d3:6c:c0:a5:91:e8:a0:b2:1a:6c:4c:a1:26:7e:f0:9e:16:a8: 15:7f:9f:0c:81:d3:0b:55:d8:0b:40:aa:8e:f0:de:4c:f1:56: 00:3d:03:70:99:90:3f:bd:20:53:96:6d:01:60:65:0a:4e:e9: 2b:93:5b:80:78:15:32:2d:60:11:c3:04:79:f7:2f:20:bd:06: 7a:7a:90:6e:98:c3:38:f3:0a:7a:a0:85:7b:79:78:f9:b8:86: a4:5b:2d:f6:ce:07:f9:33:ac:16:57:b7:0a:89:17:a0:6a:e6: 5c:4d:37:a6:be:72:e0:1b:cd:d3:cb:2c:b1:1b:bb:52:3a:f6: 0b:ff:0d:1f:3a:3e:df:c1:c1:7c:6d:d2:cf:b3:e8:72:36:02: 59:68:ab:cf:73:4d:d6:77:9b:1d:2f:44:bb:ee:80:eb:a0:d3: 1b:11:53:fd:90:2f:02:e4:d0:06:47:56:68:7f:02:0e:19:f7: ab:30:4c:c2:cc:fb:c5:fe:7c:fe:ab:48:69:28:77:c0:8b:af: 89:3f:b8:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcv4GxzfkZfuxiyOD5OjVqdsVhQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjAxMjAwMjE1MjNaFw0yNjAxMjEwMzAyMjNaMDMxMTAvBgNV BAMTKDg1RkNFNDkyNkIxRjRGODg5RUQxQ0I2RTJEREQ3REFEMjI0OEQxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m0S4+qML/kR1t/QzdK7eAR8x Np+ZDBT+P5VAIXUUgxyL6lnR4XFrUrhfzFhqbaaz0wo6831ep3KNVUxcYxL719Ub 9kc08cv5i/UBAQbLBcPZq9KdXgkwmqtO6dWLCxMf8CMvyBuxniFxBpFbSp51H7O7 PWNiQhFLCAJVU8/r85Q9wQDoMUc/GV40pIkADCu1VtbSAi62oGQgeaba5GJE6ZjN NXG/XTuXAAbw50/rUJv6Jr3fNwHaa/6Sq4iE0T4V9fhTr/nPv3kkI58JDn92CocE kGxvgvX9RRVeiagZMf8Nj1PT3iEYMm9YWMfa5o1Ror+qLsU3EbZXWB6Xob+xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhfzkkmsfT4ie0ctuLd19rSJI0WQwHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC9CMUY5NTUwNjc3MjAx NDU0RUIyMDZDQ0ZEMDU5NzgzRkNEREI0NEYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+y40Lt/9QQQ efhNQuW6q6IOqsREiNKtyPPkDazvgAiL6kklq0l9DXHsptwa5optQljrF4Mz02zA pZHooLIabEyhJn7wnhaoFX+fDIHTC1XYC0CqjvDeTPFWAD0DcJmQP70gU5ZtAWBl Ck7pK5NbgHgVMi1gEcMEefcvIL0GenqQbpjDOPMKeqCFe3l4+biGpFst9s4H+TOs Fle3CokXoGrmXE03pr5y4BvN08sssRu7Ujr2C/8NHzo+38HBfG3Sz7PocjYCWWir z3NN1nebHS9Eu+6A66DTGxFT/ZAvAuTQBkdWaH8CDhn3qzBMwsz7xf58/qtIaSh3 wIuviT+4Yw== -----END CERTIFICATE-----Generated at Tue Jan 20 19:20:05 2026 by rpki-client