This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: CN5+nuOvtCv0crfDSFkO8bBdJdkbJ6DVwAjWnpufTVs= Subject key identifier: 42:E5:4C:64:69:09:D4:88:61:5C:6C:64:89:FD:6F:18:33:07:CF:4F Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 6514190FA58D8B507282771F4C0F5E5D87EEE534 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 01:21:02 +0000 Manifest this update: Mon 26 Jan 2026 01:16:02 +0000 Manifest next update: Tue 27 Jan 2026 04:21:02 +0000 Files and hashes: 1: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: L1i7tMk0hdW4/zavzsqyM4cQVAcEpl0EzoZakS4heis=) 2: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 3: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 4: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:14:19:0f:a5:8d:8b:50:72:82:77:1f:4c:0f:5e:5d:87:ee:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jan 26 01:16:02 2026 GMT Not After : Jan 27 04:21:02 2026 GMT Subject: CN=42E54C646909D488615C6C6489FD6F183307CF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:fb:54:d0:25:7a:48:70:12:8e:e5:2c:48: ff:b5:87:b5:3c:74:0a:89:e0:28:e9:2e:a5:7b:1c: 90:c2:c3:4b:b7:97:07:fc:0e:3d:df:ab:9c:6f:10: cf:e4:12:b7:69:5b:31:82:f2:82:1b:4e:73:32:69: 1e:98:23:c2:e3:12:e6:33:73:4c:74:03:c1:90:3b: 61:fd:bc:80:7a:6b:ac:4a:b3:2d:76:36:51:99:6d: 58:79:be:ec:dd:65:09:fc:f4:46:45:9f:d5:e4:1a: 8b:1e:3c:44:fc:a8:31:f0:2c:61:20:86:d0:a8:8a: 3c:6e:24:70:47:e7:17:0f:ca:64:ad:a6:40:18:54: 55:7f:c8:5c:3d:96:36:1d:c9:34:f6:6b:ea:0d:6b: b3:4e:15:28:2d:b1:cf:af:ed:b9:1e:bf:50:c0:c9: fa:5a:e7:ee:16:01:5f:a1:56:c5:37:b6:36:58:17: 7a:f8:ef:c6:81:c7:a9:ce:ea:4a:2f:06:c5:dd:8b: 24:fb:19:0d:c6:ee:ec:7f:6a:30:dd:3a:0c:ec:67: f3:20:7d:dd:20:c3:58:0c:97:b1:23:b5:16:fc:55: ba:2a:54:05:0d:d1:52:5e:49:d8:93:bc:ab:13:dc: 06:c5:a7:1c:b2:a4:9e:be:04:44:ef:5a:74:bf:45: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E5:4C:64:69:09:D4:88:61:5C:6C:64:89:FD:6F:18:33:07:CF:4F X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c0:3a:00:de:41:0b:c3:55:75:9d:68:dd:6f:77:b7:60:4f: ce:4d:18:93:36:9c:a1:6d:de:72:e4:8e:b3:25:25:41:4e:13: ab:df:6e:db:8a:29:74:83:b4:b0:0c:2d:e6:ea:ee:14:a3:10: 80:c1:0e:54:8c:29:e6:b8:e9:4b:cd:c8:41:db:52:c2:4d:c6: 83:37:fe:6a:d8:12:71:95:64:85:7d:96:ea:97:a8:64:fb:2f: 91:46:8c:91:b2:39:86:b0:7f:72:b0:db:25:c5:45:fb:4c:c9: db:db:a9:f3:8b:25:ce:9a:e9:e6:41:a8:a5:c9:6f:be:80:03: 08:75:37:ff:66:82:af:bc:e8:b3:c6:e5:69:00:3b:ad:98:33: 6e:8b:32:9c:ce:61:3e:18:ac:56:f0:8c:52:77:75:2f:52:75: 0e:8d:cc:6e:46:aa:b3:29:41:9c:c1:22:bd:2d:62:8e:f9:43: 1a:2a:51:49:8f:ea:50:1f:e6:1e:18:41:8c:21:00:45:90:d9: 5f:b0:ad:50:61:53:c3:17:24:64:47:0f:0b:c3:3f:4a:cf:f3: 48:d4:f3:e7:c6:f5:1d:8c:d1:19:14:83:4b:3f:04:86:de:2c: 37:73:88:83:d8:47:02:4b:b9:0c:22:7b:15:ca:b2:10:b3:00: fc:11:ce:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZRQZD6WNi1BygncfTA9eXYfu5TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjAxMjYwMTE2MDJaFw0yNjAxMjcwNDIxMDJaMDMxMTAvBgNV BAMTKDQyRTU0QzY0NjkwOUQ0ODg2MTVDNkM2NDg5RkQ2RjE4MzMwN0NGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CvtU0CV6SHASjuUsSP+1h7U8 dAqJ4CjpLqV7HJDCw0u3lwf8Dj3fq5xvEM/kErdpWzGC8oIbTnMyaR6YI8LjEuYz c0x0A8GQO2H9vIB6a6xKsy12NlGZbVh5vuzdZQn89EZFn9XkGosePET8qDHwLGEg htCoijxuJHBH5xcPymStpkAYVFV/yFw9ljYdyTT2a+oNa7NOFSgtsc+v7bkev1DA yfpa5+4WAV+hVsU3tjZYF3r478aBx6nO6kovBsXdiyT7GQ3G7ux/ajDdOgzsZ/Mg fd0gw1gMl7EjtRb8VboqVAUN0VJeSdiTvKsT3AbFpxyypJ6+BETvWnS/RZytAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQuVMZGkJ1IhhXGxkif1vGDMHz08wHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMA6AN5BC8NV dZ1o3W93t2BPzk0YkzacoW3ecuSOsyUlQU4Tq99u24opdIO0sAwt5uruFKMQgMEO VIwp5rjpS83IQdtSwk3Ggzf+atgScZVkhX2W6peoZPsvkUaMkbI5hrB/crDbJcVF +0zJ29up84slzprp5kGopclvvoADCHU3/2aCr7zos8blaQA7rZgzbosynM5hPhis VvCMUnd1L1J1Do3MbkaqsylBnMEivS1ijvlDGipRSY/qUB/mHhhBjCEARZDZX7Ct UGFTwxckZEcPC8M/Ss/zSNTz58b1HYzRGRSDSz8Eht4sN3OIg9hHAku5DCJ7Fcqy ELMA/BHOvA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:37:17 2026 by rpki-client