This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: wQcXubyqkj+mzTuNayPzwVsa8PyqMA22ojU1wK4ABks= Subject key identifier: 12:5E:64:CD:69:81:88:07:9A:CE:63:34:C1:04:EF:1E:20:AF:E9:F7 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 53A3AC3C0DC7AA2080327363110750EA855A37CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 1D Signing time: Mon 09 Feb 2026 23:06:41 +0000 Manifest this update: Mon 09 Feb 2026 23:01:41 +0000 Manifest next update: Wed 11 Feb 2026 03:00:41 +0000 Files and hashes: 1: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 2: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 3: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 4: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: 08+cc2kx46hV2WBjDWJGuByYDKZAJDpMS52yRulcMrQ=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Feb 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a3:ac:3c:0d:c7:aa:20:80:32:73:63:11:07:50:ea:85:5a:37:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Feb 9 23:01:41 2026 GMT Not After : Feb 11 03:00:41 2026 GMT Subject: CN=125E64CD698188079ACE6334C104EF1E20AFE9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:a2:d9:b3:d0:7d:d8:9f:77:41:e9:0c:05: 77:25:91:fd:39:ea:ce:db:45:34:af:35:30:b3:46: 39:5c:63:6f:cd:09:01:4e:1f:4b:ee:68:3a:ed:31: f6:cf:3f:43:0f:9c:4c:0a:6d:49:48:3e:a2:20:71: e6:ee:66:c2:71:4e:a3:69:4a:f3:77:e9:27:e6:06: 8c:36:ab:82:dd:21:12:bd:54:a4:af:68:17:56:51: bf:10:89:f3:5e:81:b7:cf:f0:3a:14:f9:36:dc:4e: d1:76:d8:9b:5f:07:da:b4:88:1d:bb:7c:9f:e4:0f: ba:b3:03:ad:5b:51:48:50:b4:9e:45:f3:95:5b:0c: 50:a3:d0:1a:97:cf:4c:7d:74:78:a8:c2:64:45:2e: c1:bb:b6:45:d7:0b:7b:6a:6a:b2:9d:e3:10:97:41: e4:fb:51:8d:f0:7c:da:fd:c9:70:d6:fb:1d:4e:71: ac:46:84:88:3b:bb:ae:72:72:b3:fe:57:a7:fb:aa: a3:79:09:00:22:3d:45:5c:f6:4a:92:58:21:9a:a1: 37:10:bd:32:1e:ed:fc:60:21:4e:7f:51:d9:28:06: db:eb:94:0b:4e:2f:e0:97:c1:79:94:8a:d8:fa:48: de:60:0c:fd:c0:03:a6:a4:35:88:e5:b1:ba:c7:a3: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5E:64:CD:69:81:88:07:9A:CE:63:34:C1:04:EF:1E:20:AF:E9:F7 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:0a:87:82:01:a7:f8:15:f9:1d:f6:fa:6a:1c:74:4d:f6: 30:b8:64:81:17:33:70:2c:09:87:b8:b9:1d:a1:7f:1b:07:32: 7d:8e:11:47:b6:86:a3:7a:57:cd:3a:67:96:af:8c:a0:c4:f2: f8:9c:a1:4f:ec:69:55:f9:3e:ac:ed:41:95:c7:c8:0e:ee:1f: 25:37:43:b6:73:bb:c4:47:4f:10:36:07:ee:fd:01:ee:43:a4: 66:43:dd:17:86:58:e2:a2:04:08:a4:35:78:0a:a9:01:c4:97: bf:1d:19:d4:ad:b6:eb:4c:07:89:fc:fc:7d:77:53:1c:31:0f: 96:3d:7b:83:25:a1:8e:a2:75:da:68:42:b2:fe:1c:f9:b5:f2: 51:8a:82:f5:fb:bd:77:11:30:20:9d:c9:bf:7a:c7:6a:f9:41: 55:c0:79:3b:4c:26:8c:77:10:76:25:3a:f8:f8:d3:0e:1e:3c: 92:cc:44:f3:cc:96:05:07:06:ee:e7:24:2b:bc:49:fb:1a:c2: b6:4e:fc:1a:ab:fd:d4:bf:44:de:ef:a4:3c:9d:9b:22:d8:05: 16:a2:17:27:39:1c:f1:e5:4b:0e:be:c1:fc:7b:b7:32:bc:b9: 81:39:fb:26:61:e0:fc:50:7b:f9:7d:3a:d4:aa:10:25:c2:62: be:ef:f4:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU6OsPA3HqiCAMnNjEQdQ6oVaN8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAyMDkyMzAxNDFaFw0yNjAyMTEwMzAwNDFaMDMxMTAvBgNV BAMTKDEyNUU2NENENjk4MTg4MDc5QUNFNjMzNEMxMDRFRjFFMjBBRkU5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqaLZs9B92J93QekMBXclkf05 6s7bRTSvNTCzRjlcY2/NCQFOH0vuaDrtMfbPP0MPnEwKbUlIPqIgcebuZsJxTqNp SvN36SfmBow2q4LdIRK9VKSvaBdWUb8QifNegbfP8DoU+TbcTtF22JtfB9q0iB27 fJ/kD7qzA61bUUhQtJ5F85VbDFCj0BqXz0x9dHiowmRFLsG7tkXXC3tqarKd4xCX QeT7UY3wfNr9yXDW+x1OcaxGhIg7u65ycrP+V6f7qqN5CQAiPUVc9kqSWCGaoTcQ vTIe7fxgIU5/UdkoBtvrlAtOL+CXwXmUitj6SN5gDP3AA6akNYjlsbrHo0QPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEl5kzWmBiAeazmM0wQTvHiCv6fcwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1UKh4IBp/gV +R32+mocdE32MLhkgRczcCwJh7i5HaF/GwcyfY4RR7aGo3pXzTpnlq+MoMTy+Jyh T+xpVfk+rO1BlcfIDu4fJTdDtnO7xEdPEDYH7v0B7kOkZkPdF4ZY4qIECKQ1eAqp AcSXvx0Z1K2260wHifz8fXdTHDEPlj17gyWhjqJ12mhCsv4c+bXyUYqC9fu9dxEw IJ3Jv3rHavlBVcB5O0wmjHcQdiU6+PjTDh48ksxE88yWBQcG7uckK7xJ+xrCtk78 Gqv91L9E3u+kPJ2bItgFFqIXJzkc8eVLDr7B/Hu3Mry5gTn7JmHg/FB7+X061KoQ JcJivu/07A== -----END CERTIFICATE-----Generated at Tue Feb 10 10:09:44 2026 by rpki-client