This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft File: E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json) Hash identifier: 42C03ZzZTPVSOhfA4V0ltXnsilQQk/PP0aJWCSZh2LI= Subject key identifier: CB:4C:65:90:33:43:1F:BF:E4:26:7D:5A:85:5D:31:28:33:E5:2E:71 Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64 Certificate issuer: /CN=E9EED0187DAE9147812C7B516912D58FD976B964 Certificate serial: 50B6088EB956F0385858D26BF56DE8039B8824FF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 02:31:02 +0000 Manifest this update: Mon 26 Jan 2026 02:26:02 +0000 Manifest next update: Tue 27 Jan 2026 04:35:02 +0000 Files and hashes: 1: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: S0Ti7odGtnx0VzdLD/GBczLRDyhIWYKPS1PsYm89/+o=) 2: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b6:08:8e:b9:56:f0:38:58:58:d2:6b:f5:6d:e8:03:9b:88:24:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964 Validity Not Before: Jan 26 02:26:02 2026 GMT Not After : Jan 27 04:35:02 2026 GMT Subject: CN=CB4C659033431FBFE4267D5A855D312833E52E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:7d:22:da:6b:9e:53:6c:b1:30:c9:3d:a9: 79:25:54:8d:db:56:95:fd:e5:c8:61:8e:ec:9a:1f: e0:15:8c:1f:e8:f2:08:9a:60:c6:6f:bd:aa:21:04: 7c:48:85:40:20:22:2b:0a:43:56:ab:56:34:4a:c8: 81:72:bf:1a:aa:76:6c:e4:bf:16:93:87:8b:0c:d9: a0:78:72:74:47:2d:ad:7a:c6:d9:6c:a2:d0:31:56: 4c:50:96:97:07:0f:8f:4e:13:f5:6d:83:f9:3c:34: 29:dd:ac:cb:f4:6d:34:23:44:6b:8d:ef:3f:30:b9: 1d:df:51:e4:35:85:73:df:ce:46:39:54:b0:84:fa: 00:b1:d7:b3:57:67:45:47:50:aa:25:a1:d1:7d:3d: 19:03:07:f2:34:85:15:6e:4d:23:24:55:8e:d5:dd: 34:55:b7:a2:fe:25:e2:48:e8:54:9a:7b:19:d4:88: 1b:2c:fe:26:32:a3:e7:39:5b:c3:91:fd:c5:29:1e: 6b:d1:89:7b:ac:60:13:78:5f:32:a6:29:67:6e:db: cf:9a:35:96:0f:4a:50:52:ec:4a:31:8a:0e:09:f1: a4:17:b1:9e:a7:bc:fb:9a:f2:50:84:f3:fd:1e:3c: b4:0d:87:e1:af:75:32:c2:a7:7f:b6:97:9e:eb:a7: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4C:65:90:33:43:1F:BF:E4:26:7D:5A:85:5D:31:28:33:E5:2E:71 X509v3 Authority Key Identifier: keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7b:46:f7:41:7b:92:25:1c:14:d3:4a:8f:4a:58:30:f1:e9: c8:6b:67:c1:d0:fe:29:fd:98:1a:9c:ec:7e:7f:39:12:c4:1b: a1:0a:57:9a:f0:97:1d:fe:06:de:b2:9f:87:c6:fe:de:f8:96: 9a:f0:c7:e8:cb:07:5a:16:46:72:0e:fa:4c:31:35:bf:a3:78: 7d:71:03:97:a9:b8:13:83:d7:9e:87:ad:fa:64:ff:42:8d:f3: 81:a7:27:a1:89:fb:42:75:dd:e6:4f:40:67:1c:42:b8:9a:5c: b4:83:0c:e9:61:8d:5c:6a:bd:0a:14:a2:43:bb:32:38:95:5b: 15:ac:a6:09:05:99:b3:d5:88:d5:0b:6b:ba:a0:f8:a2:7d:9b: 25:d6:e1:a7:44:c2:15:33:ae:21:20:28:48:e7:bf:f5:19:d7: ee:82:5d:9b:31:97:f4:40:3a:b1:34:de:09:06:09:16:44:3c: 32:80:19:66:46:fd:15:72:c0:5e:58:82:7d:db:b1:20:a0:4f: 51:dd:db:d1:5b:f9:ae:a9:b0:42:b9:e1:bd:7e:e4:a2:79:ed: 10:89:4d:79:99:91:e1:bc:cc:0a:61:5f:17:71:0a:67:01:65: 7c:5c:14:07:03:b9:2e:39:41:16:5e:ca:ae:9f:58:c8:4b:1f: 18:89:0e:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUULYIjrlW8DhYWNJr9W3oA5uIJP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRUQwMTg3REFFOTE0NzgxMkM3QjUxNjkxMkQ1OEZE OTc2Qjk2NDAeFw0yNjAxMjYwMjI2MDJaFw0yNjAxMjcwNDM1MDJaMDMxMTAvBgNV BAMTKENCNEM2NTkwMzM0MzFGQkZFNDI2N0Q1QTg1NUQzMTI4MzNFNTJFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PH0i2mueU2yxMMk9qXklVI3b VpX95chhjuyaH+AVjB/o8giaYMZvvaohBHxIhUAgIisKQ1arVjRKyIFyvxqqdmzk vxaTh4sM2aB4cnRHLa16xtlsotAxVkxQlpcHD49OE/Vtg/k8NCndrMv0bTQjRGuN 7z8wuR3fUeQ1hXPfzkY5VLCE+gCx17NXZ0VHUKolodF9PRkDB/I0hRVuTSMkVY7V 3TRVt6L+JeJI6FSaexnUiBss/iYyo+c5W8OR/cUpHmvRiXusYBN4XzKmKWdu28+a NZYPSlBS7Eoxig4J8aQXsZ6nvPua8lCE8/0ePLQNh+GvdTLCp3+2l57rp9b/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy0xlkDNDH7/kJn1ahV0xKDPlLnEwHwYDVR0j BBgwFoAU6e7QGH2ukUeBLHtRaRLVj9l2uWQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8xL0U5RUVEMDE4N0RBRTkxNDc4MTJDN0I1MTY5MTJE NThGRDk3NkI5NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTlFRUQwMTg3REFFOTE0NzgxMkM3QjUxNjkxMkQ1OEZEOTc2Qjk2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMS9FOUVFRDAxODdEQUU5 MTQ3ODEyQzdCNTE2OTEyRDU4RkQ5NzZCOTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHtG90F7kiUc FNNKj0pYMPHpyGtnwdD+Kf2YGpzsfn85EsQboQpXmvCXHf4G3rKfh8b+3viWmvDH 6MsHWhZGcg76TDE1v6N4fXEDl6m4E4PXnoet+mT/Qo3zgacnoYn7QnXd5k9AZxxC uJpctIMM6WGNXGq9ChSiQ7syOJVbFaymCQWZs9WI1QtruqD4on2bJdbhp0TCFTOu ISAoSOe/9RnX7oJdmzGX9EA6sTTeCQYJFkQ8MoAZZkb9FXLAXliCfduxIKBPUd3b 0Vv5rqmwQrnhvX7konntEIlNeZmR4bzMCmFfF3EKZwFlfFwUBwO5LjlBFl7Krp9Y yEsfGIkONg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:33 2026 by rpki-client