This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: zdqPIhoe6d/ssVUyBW9Wk5ofgEcpgDPqaiRs/AIHeCw= Subject key identifier: CC:D1:DC:3F:9A:B0:98:08:58:A6:0C:78:7F:25:40:83:F6:4F:86:33 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 30ECC8FBC7BF35606299DF7C60214716D8C00B06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 17:01:02 +0000 Manifest this update: Mon 26 Jan 2026 16:56:02 +0000 Manifest next update: Tue 27 Jan 2026 18:46:02 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 2: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 3: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 4: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 5: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 6: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: 3BCgovrxHj21Dv9UwaE0Hre6E56KDuqtkiIk7vIGQk8=) 7: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 8: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 9: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 10: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 11: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 12: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ec:c8:fb:c7:bf:35:60:62:99:df:7c:60:21:47:16:d8:c0:0b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 26 16:56:02 2026 GMT Not After : Jan 27 18:46:02 2026 GMT Subject: CN=CCD1DC3F9AB0980858A60C787F254083F64F8633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:1f:c1:c7:35:6f:54:2f:c8:b8:61:86:51: dd:ca:82:7f:f6:e9:8d:9c:74:26:3f:d9:2a:28:f5: a6:d7:98:a9:d3:3a:b5:8c:b5:f8:5c:68:8e:77:6f: 25:ef:b4:d3:c2:aa:e5:5b:bf:7a:6a:d8:9a:4b:22: f1:7f:5a:93:7f:f9:b3:3a:36:7e:71:3c:e5:75:e5: e8:ec:c0:8b:e2:60:4e:d4:95:d4:0c:e8:43:3c:cb: 5b:51:6c:d1:97:69:0d:f5:8f:1b:e6:f6:ef:ae:7e: 2b:07:a3:15:00:c1:30:1e:26:41:ef:52:22:97:5d: 58:d3:a1:ca:9e:98:1d:bc:53:0b:28:da:61:2e:5a: 0f:a0:4d:4d:bd:73:c4:bf:30:bb:37:92:05:8d:8b: 99:c1:aa:c6:52:b9:3d:ef:fa:bb:87:5a:21:ae:fc: 3e:b4:89:ce:24:2f:a7:c0:ac:39:b9:a1:cc:7e:1c: ca:68:c8:8c:1d:a8:1d:ea:54:af:fe:70:10:c7:38: a7:0e:28:cf:b9:54:12:05:25:d8:b4:b9:24:62:6b: 59:83:33:93:8d:03:c7:b7:ec:2e:e1:3e:64:1e:82: c0:a0:50:be:f7:65:1e:45:20:d0:ed:91:e3:01:2b: 8c:6b:39:4a:5c:34:1c:68:b5:39:8e:82:49:62:44: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D1:DC:3F:9A:B0:98:08:58:A6:0C:78:7F:25:40:83:F6:4F:86:33 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8a:6b:51:ec:32:ac:76:92:22:56:2c:53:0d:67:00:b6:00: 07:c4:fd:5f:bf:da:09:ec:41:91:7a:e9:64:1f:63:f3:0a:40: 59:f3:a8:4f:77:04:e7:be:9d:16:49:3c:f9:3a:f3:4d:b3:9b: e6:62:d7:09:65:53:61:95:d8:b9:05:bb:55:e8:7e:07:a5:3c: 99:38:34:a3:0e:da:ed:85:a7:e5:c8:37:11:82:74:05:31:13: ae:85:64:91:b6:1f:cc:d6:60:a3:16:9a:cd:75:20:6f:41:02: 98:f8:98:2c:06:86:7b:a8:1b:8c:cc:e3:bb:c4:2a:95:a6:62: 7a:b8:c4:f6:3c:e4:ec:db:98:92:81:25:17:ed:58:51:eb:43: 03:9d:2f:82:9c:ce:3c:36:f0:c8:a2:88:1b:3f:cd:b3:21:94: 3c:e2:00:81:58:1a:07:69:15:d2:a3:61:a9:bb:69:ea:6f:42: 24:db:93:1e:3b:be:15:7d:5a:2a:de:76:47:18:b2:3a:5b:80: 64:a0:fb:a7:7b:d4:42:a3:82:9c:d1:9a:0e:22:fa:6e:40:a8: b9:a5:a1:71:42:e7:e6:8d:f6:65:81:7e:e1:10:89:f9:92:10: 24:85:40:4a:a5:26:27:98:bd:42:1e:e4:3f:4d:4b:15:77:53: a4:46:0d:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMOzI+8e/NWBimd98YCFHFtjACwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjYxNjU2MDJaFw0yNjAxMjcxODQ2MDJaMDMxMTAvBgNV BAMTKENDRDFEQzNGOUFCMDk4MDg1OEE2MEM3ODdGMjU0MDgzRjY0Rjg2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfh/BxzVvVC/IuGGGUd3Kgn/2 6Y2cdCY/2Soo9abXmKnTOrWMtfhcaI53byXvtNPCquVbv3pq2JpLIvF/WpN/+bM6 Nn5xPOV15ejswIviYE7UldQM6EM8y1tRbNGXaQ31jxvm9u+ufisHoxUAwTAeJkHv UiKXXVjTocqemB28Uwso2mEuWg+gTU29c8S/MLs3kgWNi5nBqsZSuT3v+ruHWiGu /D60ic4kL6fArDm5ocx+HMpoyIwdqB3qVK/+cBDHOKcOKM+5VBIFJdi0uSRia1mD M5ONA8e37C7hPmQegsCgUL73ZR5FINDtkeMBK4xrOUpcNBxotTmOgkliRCkZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzNHcP5qwmAhYpgx4fyVAg/ZPhjMwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4prUewyrHaS IlYsUw1nALYAB8T9X7/aCexBkXrpZB9j8wpAWfOoT3cE576dFkk8+TrzTbOb5mLX CWVTYZXYuQW7Veh+B6U8mTg0ow7a7YWn5cg3EYJ0BTETroVkkbYfzNZgoxaazXUg b0ECmPiYLAaGe6gbjMzju8QqlaZierjE9jzk7NuYkoElF+1YUetDA50vgpzOPDbw yKKIGz/NsyGUPOIAgVgaB2kV0qNhqbtp6m9CJNuTHju+FX1aKt52RxiyOluAZKD7 p3vUQqOCnNGaDiL6bkCouaWhcULn5o32ZYF+4RCJ+ZIQJIVASqUmJ5i9Qh7kP01L FXdTpEYN5A== -----END CERTIFICATE-----Generated at Tue Jan 27 00:06:22 2026 by rpki-client