This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: fxB8E45/a4LG/QduWCPHZ1qg0FgVY12FQUAJstCJYww= Subject key identifier: 7D:42:40:0D:3F:8B:2B:67:9B:5E:9F:2B:3C:E5:6A:A8:92:E0:A5:83 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 1183598DDBDE5398D7FDA3274BC77168AACA68DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 0C Signing time: Mon 26 Jan 2026 03:46:02 +0000 Manifest this update: Mon 26 Jan 2026 03:41:02 +0000 Manifest next update: Tue 27 Jan 2026 06:35:02 +0000 Files and hashes: 1: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: qH7SsnLTRcG5IDawRHgSnSOkel73VxJ24kQnt/cZk9g=) 2: AS55990.roa (hash: a5TP6E8m+f/gSk2+LLNMHOIimgijDnDREwD1Q5AEFVc=) 3: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:83:59:8d:db:de:53:98:d7:fd:a3:27:4b:c7:71:68:aa:ca:68:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jan 26 03:41:02 2026 GMT Not After : Jan 27 06:35:02 2026 GMT Subject: CN=7D42400D3F8B2B679B5E9F2B3CE56AA892E0A583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:48:82:78:c3:ba:12:36:70:43:32:16:fc:c8: b1:a2:1d:19:24:a5:cd:df:96:21:9d:c4:6c:36:15: 6a:c5:5a:0c:6d:57:2e:c7:67:8a:d2:f6:96:41:bb: f3:fe:5d:08:16:2e:9f:81:c8:a2:0e:65:56:3c:97: 25:42:88:e8:ae:f6:37:94:26:bc:a9:86:03:a5:04: 1a:93:fe:e4:76:6c:9b:70:f1:45:46:2d:31:c5:6b: a2:ea:17:63:9d:94:da:f9:a9:98:9f:f7:e8:37:dd: fa:d3:98:54:43:98:92:a2:b7:fc:7f:38:52:56:ed: 27:36:c3:c5:3a:91:c8:42:ba:b1:cf:32:0c:f9:60: 28:59:e7:c4:8a:f1:ec:22:48:e1:a2:6f:28:8c:d3: 37:41:3b:48:28:e4:61:60:79:3d:14:22:9c:e3:1f: f8:71:3e:d5:28:3f:b2:df:1e:fc:72:0a:b0:09:e9: 2e:4f:9f:92:85:27:ed:9b:6b:d6:0d:f3:3c:55:2e: 81:f6:e7:3c:dc:13:11:f2:56:2d:d4:c8:4d:26:86: 4e:b3:52:e8:95:07:7a:e0:0a:15:5c:9e:85:08:00: 12:72:e1:ac:ca:d4:7b:d3:0f:51:a8:a9:ad:21:59: 44:e8:78:35:85:48:dc:93:b7:b6:2c:30:92:96:05: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:40:0D:3F:8B:2B:67:9B:5E:9F:2B:3C:E5:6A:A8:92:E0:A5:83 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5c:69:41:4d:de:4f:c0:c5:2b:35:0e:f5:ae:34:d2:ae:df: 03:ea:40:68:2d:63:36:e3:de:40:c4:e6:9f:f0:8a:b5:de:63: 50:0a:7d:68:8a:39:67:d8:ef:ec:0d:f2:ca:70:5b:98:ae:bd: f1:f7:da:a2:d2:2a:e4:c3:b3:29:cc:39:b3:fb:bc:5d:e3:ca: 5d:d4:35:10:11:42:03:ee:de:77:43:6b:db:a0:47:14:41:dc: b3:f5:e5:8e:da:d9:b5:e3:64:78:30:05:6c:e1:0b:9d:54:00: ae:e8:e0:02:64:17:78:d7:1b:2c:c4:a3:70:ba:f9:3b:b6:80: 55:93:15:42:0f:c9:a3:a3:79:23:39:c3:5f:a6:d2:ac:ce:c0: e0:d5:91:b1:27:bc:9c:f7:95:39:18:cb:7f:c9:53:99:86:78: 07:43:f4:1a:4c:50:a8:3f:d0:c2:73:05:71:f4:30:f7:4d:33: 33:a2:2e:72:70:7e:a8:7f:b6:df:7f:b7:bc:24:10:10:c9:52: ab:af:0c:72:27:66:b5:7e:90:2d:3d:78:f8:07:74:4f:c5:7d: 15:45:94:ba:d1:64:2c:73:54:3d:4e:94:74:c2:54:2d:17:2e: 75:da:a9:9f:05:34:4f:ac:2b:4a:3a:40:a0:36:0c:4b:fb:85: 84:68:7b:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEYNZjdveU5jX/aMnS8dxaKrKaN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjAxMjYwMzQxMDJaFw0yNjAxMjcwNjM1MDJaMDMxMTAvBgNV BAMTKDdENDI0MDBEM0Y4QjJCNjc5QjVFOUYyQjNDRTU2QUE4OTJFMEE1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpSIJ4w7oSNnBDMhb8yLGiHRkk pc3fliGdxGw2FWrFWgxtVy7HZ4rS9pZBu/P+XQgWLp+ByKIOZVY8lyVCiOiu9jeU JryphgOlBBqT/uR2bJtw8UVGLTHFa6LqF2OdlNr5qZif9+g33frTmFRDmJKit/x/ OFJW7Sc2w8U6kchCurHPMgz5YChZ58SK8ewiSOGibyiM0zdBO0go5GFgeT0UIpzj H/hxPtUoP7LfHvxyCrAJ6S5Pn5KFJ+2ba9YN8zxVLoH25zzcExHyVi3UyE0mhk6z UuiVB3rgChVcnoUIABJy4azK1HvTD1Goqa0hWUToeDWFSNyTt7YsMJKWBdynAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfUJADT+LK2ebXp8rPOVqqJLgpYMwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1xpQU3eT8DF KzUO9a400q7fA+pAaC1jNuPeQMTmn/CKtd5jUAp9aIo5Z9jv7A3yynBbmK698ffa otIq5MOzKcw5s/u8XePKXdQ1EBFCA+7ed0Nr26BHFEHcs/XljtrZteNkeDAFbOEL nVQArujgAmQXeNcbLMSjcLr5O7aAVZMVQg/Jo6N5IznDX6bSrM7A4NWRsSe8nPeV ORjLf8lTmYZ4B0P0GkxQqD/QwnMFcfQw900zM6IucnB+qH+233+3vCQQEMlSq68M cidmtX6QLT14+Ad0T8V9FUWUutFkLHNUPU6UdMJULRcuddqpnwU0T6wrSjpAoDYM S/uFhGh7XQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:27 2026 by rpki-client