This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: gPtl15Iczsj3D/OdWOnA0gyW/fu716RgB0nM2Trpiu4= Subject key identifier: 0C:FC:4B:BD:DC:22:7F:92:98:F6:F6:BB:CB:3F:04:0C:F1:93:6A:37 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 539138F18E443C49379B78B29F244579F5B5E9AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 03:16:02 +0000 Manifest this update: Mon 26 Jan 2026 03:11:02 +0000 Manifest next update: Tue 27 Jan 2026 06:18:02 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: B3NbbmqZFEXoGT5BDsVQ91844K3gYPPAUGwiEkCQGTs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:91:38:f1:8e:44:3c:49:37:9b:78:b2:9f:24:45:79:f5:b5:e9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Jan 26 03:11:02 2026 GMT Not After : Jan 27 06:18:02 2026 GMT Subject: CN=0CFC4BBDDC227F9298F6F6BBCB3F040CF1936A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:13:b4:92:e5:12:ba:16:43:35:25:03:a1: 77:4b:b3:10:88:60:ca:e1:c4:e8:37:0e:b6:20:12: 0d:21:ea:c4:d1:15:0b:44:2d:70:5c:eb:3e:4d:50: 75:f3:34:97:c1:52:15:a2:c4:e8:69:ef:34:a7:5b: 46:be:33:e8:8c:09:06:9c:fb:9a:1e:36:b8:70:23: 41:9e:4a:c1:ca:35:89:84:3b:98:e2:74:01:e8:50: f6:a9:03:a3:9f:5a:87:9c:90:1a:61:7c:c7:63:82: 4f:0c:6b:31:02:89:d9:c8:98:f3:d0:e9:b4:d6:6f: 39:3f:6b:99:cd:dc:8a:02:85:7a:ec:03:74:29:32: 66:77:12:df:0c:58:95:46:b7:35:b9:4d:b7:fa:95: 60:90:c1:37:fc:06:e7:dd:95:f9:88:c8:6f:b7:ad: 44:e5:7a:00:3e:ef:eb:1d:b5:6a:e0:4e:37:1e:3c: 3c:d9:dd:f5:0a:ad:a0:db:a9:f5:22:3a:66:85:34: 4c:97:0a:f1:bb:64:d5:d9:ac:87:e3:ab:43:88:8c: e9:57:26:d3:52:10:f7:ed:95:76:69:f4:38:7a:8e: 4d:58:c5:ed:bd:9a:ea:fe:54:64:15:91:58:0b:6e: 3f:b0:d1:d8:ff:d4:f7:48:30:a6:8a:39:ca:90:a3: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FC:4B:BD:DC:22:7F:92:98:F6:F6:BB:CB:3F:04:0C:F1:93:6A:37 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b3:0b:76:6e:32:d4:de:c5:c3:06:ec:8d:09:2f:67:24:44: 00:bc:e5:26:e7:fe:71:89:de:5f:f1:4c:00:ab:a0:18:50:ba: 2d:39:f1:f0:1c:51:03:e1:32:41:bb:3f:6c:0b:4a:40:6a:77: 73:51:ef:ae:03:0e:d9:e8:dd:2e:e2:07:83:ec:9c:f4:d9:b5: 78:1f:fc:67:89:f3:c1:2a:10:e5:fa:1c:6a:50:30:c8:58:47: 10:c5:17:58:a1:9f:e0:0b:e4:ef:55:a1:e4:52:14:70:ec:0b: 4d:7d:31:e4:21:11:6c:28:69:47:78:b4:10:7e:a3:8c:81:b8: f1:56:07:56:a4:87:1f:15:82:17:cb:67:38:32:d5:75:16:30: ef:a6:13:5d:26:f6:90:ef:dd:ef:68:bd:53:25:3f:76:57:59: ac:e5:cb:d8:3c:5b:d8:fc:d1:5e:c2:db:72:0a:14:61:3c:1f: d7:15:c8:08:1f:45:2a:68:b4:b6:47:2d:bb:9c:7e:d1:f4:92: 6c:e0:47:09:1c:da:bd:f7:81:f7:33:39:18:03:6f:b0:35:25: ae:6f:a2:0c:af:c0:b7:ea:10:5f:a3:23:57:24:fa:b9:25:e2: 37:7b:a9:c9:85:02:9c:e4:d2:68:26:9e:9b:14:73:b8:de:77: 24:45:aa:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU5E48Y5EPEk3m3iynyRFefW16aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjAxMjYwMzExMDJaFw0yNjAxMjcwNjE4MDJaMDMxMTAvBgNV BAMTKDBDRkM0QkJEREMyMjdGOTI5OEY2RjZCQkNCM0YwNDBDRjE5MzZBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApBO0kuUSuhZDNSUDoXdLsxCI YMrhxOg3DrYgEg0h6sTRFQtELXBc6z5NUHXzNJfBUhWixOhp7zSnW0a+M+iMCQac +5oeNrhwI0GeSsHKNYmEO5jidAHoUPapA6OfWoeckBphfMdjgk8MazECidnImPPQ 6bTWbzk/a5nN3IoChXrsA3QpMmZ3Et8MWJVGtzW5Tbf6lWCQwTf8BufdlfmIyG+3 rUTlegA+7+sdtWrgTjcePDzZ3fUKraDbqfUiOmaFNEyXCvG7ZNXZrIfjq0OIjOlX JtNSEPftlXZp9Dh6jk1Yxe29mur+VGQVkVgLbj+w0dj/1PdIMKaKOcqQowY1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDPxLvdwif5KY9va7yz8EDPGTajcwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbMLdm4y1N7F wwbsjQkvZyREALzlJuf+cYneX/FMAKugGFC6LTnx8BxRA+EyQbs/bAtKQGp3c1Hv rgMO2ejdLuIHg+yc9Nm1eB/8Z4nzwSoQ5focalAwyFhHEMUXWKGf4Avk71Wh5FIU cOwLTX0x5CERbChpR3i0EH6jjIG48VYHVqSHHxWCF8tnODLVdRYw76YTXSb2kO/d 72i9UyU/dldZrOXL2Dxb2PzRXsLbcgoUYTwf1xXICB9FKmi0tkctu5x+0fSSbOBH CRzavfeB9zM5GANvsDUlrm+iDK/At+oQX6MjVyT6uSXiN3upyYUCnOTSaCaemxRz uN53JEWqKg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:36 2026 by rpki-client