This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: IUqAOKB2b9IBt5WZ+HO2+STMA5qIIHQliUgZdmcXNGA= Subject key identifier: D6:4F:F7:42:13:AD:4C:F9:74:DD:16:B2:41:7E:9E:03:E8:60:C0:15 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 0C89F28818FA739B1486660780363B50FE131318 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0A Signing time: Sun 25 Jan 2026 21:01:02 +0000 Manifest this update: Sun 25 Jan 2026 20:56:02 +0000 Manifest next update: Mon 26 Jan 2026 23:08:02 +0000 Files and hashes: 1: 3130332e34342e3134342e302f32322d3232203d3e203535393931.roa (hash: 9QpEwcLlTSumOVyS9dHL6HMKkLj+qy0YVIHIa2L518I=) 2: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: +VWLOLh3eULPj+OwdjKb5x8Aauf5n4nqoqPi8wA14zw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:89:f2:88:18:fa:73:9b:14:86:66:07:80:36:3b:50:fe:13:13:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Jan 25 20:56:02 2026 GMT Not After : Jan 26 23:08:02 2026 GMT Subject: CN=D64FF74213AD4CF974DD16B2417E9E03E860C015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:50:d4:b5:3d:d6:f5:1e:6c:e5:bb:91:48: 71:5c:dd:03:1f:cb:b2:a1:1a:d9:cc:03:40:c1:72: 98:30:5e:aa:7e:35:67:4c:bf:1b:96:e1:05:82:62: ce:d9:ad:5b:25:f1:cb:5a:40:e3:5a:37:cb:41:65: 47:a1:fb:b3:4b:fe:53:30:44:c6:6d:af:4e:fc:62: 81:5c:91:02:c0:5e:b6:55:d4:e2:ee:08:3b:fe:15: 3c:c1:70:4d:fc:3e:ab:cb:ea:76:c4:a2:5b:bf:a1: 99:cf:56:cf:4f:5f:28:da:4a:ef:c6:79:4e:99:d9: df:da:78:be:03:bc:a2:5a:93:4d:99:c0:d2:45:eb: e8:14:38:39:75:4f:0a:b3:6b:5e:fa:a2:56:3e:51: ca:9a:18:4f:79:b3:0c:fc:30:17:33:d8:d9:c1:01: 1f:22:12:be:af:98:b0:fd:b5:1f:16:57:4f:fc:3d: d8:96:9b:e7:b6:ef:ce:c2:8a:ea:1b:1e:7d:b2:2b: 87:27:4b:17:3a:bf:23:ab:67:2d:0e:80:30:93:b0: a7:00:cb:6d:95:3d:72:2a:a9:f1:b5:65:8d:09:97: 2c:92:9e:42:15:80:97:1e:47:66:6c:78:0f:09:16: 7d:1c:ae:55:26:00:43:42:4b:05:a3:fc:70:fe:71: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4F:F7:42:13:AD:4C:F9:74:DD:16:B2:41:7E:9E:03:E8:60:C0:15 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c9:b6:ca:26:4a:ef:09:27:ff:3c:11:85:8d:4d:94:13:75: f4:23:41:83:25:98:57:19:58:a7:1d:58:22:43:84:45:e9:db: 4c:01:be:95:d5:b7:96:44:cc:57:b5:10:8b:09:bf:b3:33:5d: 20:3e:43:27:ec:0f:e7:4d:e2:a8:de:0d:e0:2b:f8:e0:15:74: 61:b8:c3:1e:82:42:7c:bd:c2:23:0b:d5:ad:e9:41:a8:ee:58: b8:85:9d:8e:0e:fd:38:de:1f:70:ac:3f:b1:53:0b:70:43:48: 63:3a:ea:1e:06:75:7b:0f:a1:06:58:76:50:f7:5f:a4:27:04: 6d:d0:26:67:de:85:27:5d:93:89:47:b7:67:32:79:f2:55:ba: 9f:8f:b9:df:b3:70:12:4d:35:21:e7:c5:c3:e8:f5:7c:4b:26: 79:f8:cb:4d:f5:41:9b:b4:58:72:d0:22:cf:b0:dc:39:98:96: 8e:23:95:c5:77:17:ee:a9:e4:8c:4f:26:cc:4e:2a:61:c4:34: 54:d9:88:ad:f2:c3:06:2e:08:62:58:9f:61:1c:63:6e:29:dd: 43:33:7f:99:00:4a:44:ec:fc:3c:2d:95:55:d9:3a:d9:49:92: 57:cb:ce:d3:89:6c:42:a9:1a:4f:a4:db:f3:90:84:bd:20:59: 2e:02:a7:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDInyiBj6c5sUhmYHgDY7UP4TExgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjAxMjUyMDU2MDJaFw0yNjAxMjYyMzA4MDJaMDMxMTAvBgNV BAMTKEQ2NEZGNzQyMTNBRDRDRjk3NEREMTZCMjQxN0U5RTAzRTg2MEMwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUFDUtT3W9R5s5buRSHFc3QMf y7KhGtnMA0DBcpgwXqp+NWdMvxuW4QWCYs7ZrVsl8ctaQONaN8tBZUeh+7NL/lMw RMZtr078YoFckQLAXrZV1OLuCDv+FTzBcE38PqvL6nbEolu/oZnPVs9PXyjaSu/G eU6Z2d/aeL4DvKJak02ZwNJF6+gUODl1Twqza176olY+UcqaGE95swz8MBcz2NnB AR8iEr6vmLD9tR8WV0/8PdiWm+e2787CiuobHn2yK4cnSxc6vyOrZy0OgDCTsKcA y22VPXIqqfG1ZY0JlyySnkIVgJceR2ZseA8JFn0crlUmAENCSwWj/HD+cStfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1k/3QhOtTPl03RayQX6eA+hgwBUwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcm2yiZK7wkn /zwRhY1NlBN19CNBgyWYVxlYpx1YIkOERenbTAG+ldW3lkTMV7UQiwm/szNdID5D J+wP503iqN4N4Cv44BV0YbjDHoJCfL3CIwvVrelBqO5YuIWdjg79ON4fcKw/sVML cENIYzrqHgZ1ew+hBlh2UPdfpCcEbdAmZ96FJ12TiUe3ZzJ58lW6n4+537NwEk01 IefFw+j1fEsmefjLTfVBm7RYctAiz7DcOZiWjiOVxXcX7qnkjE8mzE4qYcQ0VNmI rfLDBi4IYlifYRxjbindQzN/mQBKROz8PC2VVdk62UmSV8vO04lsQqkaT6Tb85CE vSBZLgKnhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:39 2026 by rpki-client