This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json) Hash identifier: JaNmEVVKVXAkVewNKS1aEWuouDIFVgw5bn3eB6rmPqg= Subject key identifier: 96:9B:96:46:52:02:B4:FE:E8:7D:5D:BD:04:90:08:D1:85:25:95:EF Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62 Certificate serial: 5DD55BDC7AA05D31EDEC3149EA926A0A0C5BCD84 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft Manifest number: 02 Signing time: Tue 20 Jan 2026 02:26:07 +0000 Manifest this update: Tue 20 Jan 2026 02:21:07 +0000 Manifest next update: Wed 21 Jan 2026 05:07:07 +0000 Files and hashes: 1: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=) 2: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=) 3: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: xeotmkH5+ZeBt46OIvi6ODOBZIBE/aXPmucyeTJuHKw=) 4: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=) 5: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=) 6: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=) 7: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=) 8: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 05:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d5:5b:dc:7a:a0:5d:31:ed:ec:31:49:ea:92:6a:0a:0c:5b:cd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62 Validity Not Before: Jan 20 02:21:07 2026 GMT Not After : Jan 21 05:07:07 2026 GMT Subject: CN=969B96465202B4FEE87D5DBD049008D1852595EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:06:99:7c:fa:31:6f:6f:49:70:c2:eb:8f: f6:2d:c8:cc:d2:03:aa:6d:8c:7b:bd:1d:25:f0:e1: cb:f1:53:94:f3:bd:25:cc:3e:0f:f8:f7:6a:51:e7: aa:b7:1a:90:f9:14:46:5b:84:11:20:2d:c6:e1:3e: be:d0:a4:66:fc:3e:45:35:07:2f:59:8e:0d:3b:81: 9a:72:5b:e4:1e:37:f4:9d:e2:7c:60:28:c4:34:c2: bf:cd:7d:45:c8:79:23:ac:c3:39:92:39:79:ce:7e: 32:e0:5f:4a:32:97:56:6b:b2:20:45:5a:02:3f:aa: 2b:7e:b4:9e:28:7d:7f:c3:90:76:50:b1:df:0e:fd: c7:6d:0b:9f:28:70:ba:7f:4d:6d:60:b4:3d:b7:40: 9c:ce:ef:00:41:53:7a:1e:dd:60:82:31:e1:fc:2d: d4:50:88:ee:15:f4:a0:4c:82:bc:66:ca:f0:91:76: 85:de:85:df:3b:9d:d7:37:c8:d3:5e:43:af:e4:62: f7:d6:7c:15:ae:86:ea:f7:94:18:26:6d:e8:6b:c0: f9:81:5c:c8:54:70:3a:c3:a1:11:c5:8d:c0:78:c3: fa:13:7e:72:a2:7c:09:88:f8:15:72:be:f0:f6:57: 84:a6:c3:e4:66:0a:5c:93:aa:21:79:9a:03:5c:7d: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:96:46:52:02:B4:FE:E8:7D:5D:BD:04:90:08:D1:85:25:95:EF X509v3 Authority Key Identifier: keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:af:f9:03:2f:b1:a0:00:54:1a:ee:a2:83:3f:23:f4:ea: c1:7d:07:d6:e2:55:72:2f:55:82:5e:e2:6b:67:78:00:ec:ed: e1:d5:d5:80:73:28:bd:94:a2:5a:49:b8:21:bc:ff:11:08:3e: 60:1d:0f:68:3a:22:4b:4a:ec:4b:80:6a:45:db:ee:91:b4:6c: d5:5f:75:4d:28:a8:d7:71:ed:a0:64:b5:ae:b8:fc:57:b1:86: 61:74:bb:63:ef:06:86:73:54:e0:f9:27:cd:4a:30:34:0a:b2: 75:14:52:7f:11:07:b8:49:58:db:07:83:e4:43:68:41:a2:7a: 8c:25:79:9b:05:28:04:cd:92:d7:9c:04:bc:d0:65:0e:24:29: 33:0c:70:37:78:a8:0f:36:5a:f8:86:9e:33:05:24:2b:d7:35: 2d:a2:58:cd:c2:94:2d:a2:76:d6:2b:4d:8c:2f:92:8c:77:1d: 2c:83:25:33:e9:04:99:5d:87:23:e4:e3:66:7d:34:95:94:8a: b6:28:b0:3e:0d:6f:af:89:4a:24:d4:99:de:07:17:b6:bc:6e: 83:42:d6:f3:fa:25:10:25:d2:ef:2f:54:01:07:66:f4:20:76: 2a:74:a8:41:a9:dc:c3:4f:12:68:3c:86:da:72:f3:22:a7:34: 7e:45:a9:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXdVb3HqgXTHt7DFJ6pJqCgxbzYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw Rjk1NkI2MjAeFw0yNjAxMjAwMjIxMDdaFw0yNjAxMjEwNTA3MDdaMDMxMTAvBgNV BAMTKDk2OUI5NjQ2NTIwMkI0RkVFODdENURCRDA0OTAwOEQxODUyNTk1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRAaZfPoxb29JcMLrj/YtyMzS A6ptjHu9HSXw4cvxU5TzvSXMPg/492pR56q3GpD5FEZbhBEgLcbhPr7QpGb8PkU1 By9Zjg07gZpyW+QeN/Sd4nxgKMQ0wr/NfUXIeSOswzmSOXnOfjLgX0oyl1ZrsiBF WgI/qit+tJ4ofX/DkHZQsd8O/cdtC58ocLp/TW1gtD23QJzO7wBBU3oe3WCCMeH8 LdRQiO4V9KBMgrxmyvCRdoXehd87ndc3yNNeQ6/kYvfWfBWuhur3lBgmbehrwPmB XMhUcDrDoRHFjcB4w/oTfnKifAmI+BVyvvD2V4Smw+RmClyTqiF5mgNcfba/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlpuWRlICtP7ofV29BJAI0YUlle8wHwYDVR0j BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMC80Rjk0QTVGMzZGODY2 RjIxMTgwNzc1REZGRjM4Mjc5OTBGOTU2QjYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaByv+QMvsaAA VBruooM/I/TqwX0H1uJVci9Vgl7ia2d4AOzt4dXVgHMovZSiWkm4Ibz/EQg+YB0P aDoiS0rsS4BqRdvukbRs1V91TSio13HtoGS1rrj8V7GGYXS7Y+8GhnNU4PknzUow NAqydRRSfxEHuElY2weD5ENoQaJ6jCV5mwUoBM2S15wEvNBlDiQpMwxwN3ioDzZa +IaeMwUkK9c1LaJYzcKULaJ21itNjC+SjHcdLIMlM+kEmV2HI+TjZn00lZSKtiiw Pg1vr4lKJNSZ3gcXtrxug0LW8/olECXS7y9UAQdm9CB2KnSoQancw08SaDyG2nLz Iqc0fkWphQ== -----END CERTIFICATE-----Generated at Tue Jan 20 16:11:46 2026 by rpki-client