This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json) Hash identifier: O8KgK72TgxxZusmhIzVPBEBvru+RTqKDQODeYxssZsw= Subject key identifier: 6A:DC:4D:07:9B:75:9B:D6:B5:01:6A:FF:F1:2C:FE:13:B3:D8:08:28 Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Certificate serial: 7C276E65EBFAA1394A2D3B5863770F5636DF2B10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 19:16:02 +0000 Manifest this update: Mon 26 Jan 2026 19:11:02 +0000 Manifest next update: Tue 27 Jan 2026 22:10:02 +0000 Files and hashes: 1: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: 0lTdrEUifdDdUUvSTQ2uDXbZfLu91wRvtWx9Luq8H/g=) 2: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=) 3: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=) 4: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=) 5: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:27:6e:65:eb:fa:a1:39:4a:2d:3b:58:63:77:0f:56:36:df:2b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Validity Not Before: Jan 26 19:11:02 2026 GMT Not After : Jan 27 22:10:02 2026 GMT Subject: CN=6ADC4D079B759BD6B5016AFFF12CFE13B3D80828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:ed:cb:74:26:47:cd:b1:22:82:07:9f:0e: 63:05:0d:42:eb:bc:b5:49:a0:55:95:1a:96:6f:56: 37:70:51:dd:eb:74:b2:82:31:ed:65:b7:b8:7a:2c: f0:81:64:d7:1f:e6:75:0b:d6:e0:cd:e6:38:28:21: 0d:cd:80:ec:4c:65:b4:bc:2e:06:61:7f:c6:8b:cb: c9:ff:f3:5c:25:c1:46:3d:6b:21:3d:e3:cd:cf:bc: c3:3a:6f:7b:d7:ed:0a:b9:2e:8d:6c:43:68:29:5a: 3a:e1:60:ce:f3:89:d6:2a:fb:20:fc:ac:e4:b3:a2: 52:aa:45:60:c1:d6:cb:d4:35:e7:29:94:41:f4:9f: 3a:a6:a5:87:86:7f:10:a9:ec:a8:21:58:25:81:7c: 05:8a:09:f8:65:6b:f4:13:00:50:0c:a2:f9:aa:13: 6e:20:4c:bc:ce:30:10:80:af:51:1e:b5:3a:8f:0d: 24:56:cd:b9:2e:d8:90:3a:1c:26:a6:75:83:94:07: 8e:34:b2:4b:fd:8d:2f:42:d5:00:c8:a2:aa:e9:25: 42:56:d3:6d:be:79:14:84:87:31:14:e9:0a:1e:72: 10:8d:da:b8:80:41:0c:c8:01:32:5a:3d:21:94:e6: fa:df:d6:a8:5a:e5:5b:47:4e:be:d0:eb:c4:72:78: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DC:4D:07:9B:75:9B:D6:B5:01:6A:FF:F1:2C:FE:13:B3:D8:08:28 X509v3 Authority Key Identifier: keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ce:d1:99:55:d1:ac:52:5c:f6:f9:98:91:1b:7e:e4:35:85: 1b:f7:fd:df:c5:46:99:26:26:af:ad:e9:0c:31:fd:71:b5:2f: 4c:67:af:44:9a:30:e9:82:3b:7f:07:4f:cb:61:c2:42:03:bf: 23:3e:1d:49:57:0d:6e:bf:14:32:fd:30:73:99:77:1e:2b:e6: f9:34:e7:88:33:74:a9:a6:4c:1a:ab:66:a0:00:68:eb:11:59: 46:20:3a:df:60:c9:82:70:99:b6:e5:0f:1f:6d:72:1d:ab:78: d3:33:fd:22:04:91:dd:6b:57:f4:ad:f8:79:69:2a:94:f5:8e: 3f:6e:15:ce:ed:5c:78:96:4b:11:f4:bb:7a:be:31:46:95:53: ef:20:a4:16:02:c9:18:85:77:4b:4e:fe:27:08:40:c9:19:62: 30:73:c7:3c:d7:68:39:0e:75:80:9a:9f:9d:f1:14:a2:55:83: ae:49:a0:a0:49:98:06:42:a6:6b:bd:ba:90:ac:53:07:2d:b2: 4d:88:50:9b:91:92:95:1e:37:b0:f3:d2:7a:72:49:3b:91:5c: 12:43:ad:15:66:30:a0:3b:ab:79:f5:e0:71:8e:14:5f:dc:2d: 43:c0:fe:29:86:f7:57:bc:63:17:5c:4a:fb:21:e4:6f:54:08: 87:90:84:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfCduZev6oTlKLTtYY3cPVjbfKxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw NEZENjlERDAeFw0yNjAxMjYxOTExMDJaFw0yNjAxMjcyMjEwMDJaMDMxMTAvBgNV BAMTKDZBREM0RDA3OUI3NTlCRDZCNTAxNkFGRkYxMkNGRTEzQjNEODA4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUu3LdCZHzbEiggefDmMFDULr vLVJoFWVGpZvVjdwUd3rdLKCMe1lt7h6LPCBZNcf5nUL1uDN5jgoIQ3NgOxMZbS8 LgZhf8aLy8n/81wlwUY9ayE9483PvMM6b3vX7Qq5Lo1sQ2gpWjrhYM7zidYq+yD8 rOSzolKqRWDB1svUNecplEH0nzqmpYeGfxCp7KghWCWBfAWKCfhla/QTAFAMovmq E24gTLzOMBCAr1EetTqPDSRWzbku2JA6HCamdYOUB440skv9jS9C1QDIoqrpJUJW 022+eRSEhzEU6QoechCN2riAQQzIATJaPSGU5vrf1qha5VtHTr7Q68RyeCotAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUatxNB5t1m9a1AWr/8Sz+E7PYCCgwHwYDVR0j BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMC81MDQ3MDgzQjQ2MzdB M0YwMkRGOURFRUJBNjdCRUREQzA0RkQ2OURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs7RmVXRrFJc 9vmYkRt+5DWFG/f938VGmSYmr63pDDH9cbUvTGevRJow6YI7fwdPy2HCQgO/Iz4d SVcNbr8UMv0wc5l3Hivm+TTniDN0qaZMGqtmoABo6xFZRiA632DJgnCZtuUPH21y Hat40zP9IgSR3WtX9K34eWkqlPWOP24Vzu1ceJZLEfS7er4xRpVT7yCkFgLJGIV3 S07+JwhAyRliMHPHPNdoOQ51gJqfnfEUolWDrkmgoEmYBkKma726kKxTBy2yTYhQ m5GSlR43sPPSenJJO5FcEkOtFWYwoDurefXgcY4UX9wtQ8D+KYb3V7xjF1xK+yHk b1QIh5CEHg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:33 2026 by rpki-client