This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: C48wo7XWLLi1WHzYc3DWUXjg3NzuVahhDFveRV87X5g= Subject key identifier: C0:78:FC:B1:75:67:3C:B9:93:FD:07:8E:CB:07:CA:4E:5F:AE:9F:03 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 591656610D6381AA556E3E663ECE063A4FE7D376 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 12:21:02 +0000 Manifest this update: Mon 26 Jan 2026 12:16:02 +0000 Manifest next update: Tue 27 Jan 2026 15:52:02 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: cGRISKteHUf0Sy9FPZs3hkStJwN+k/03eFoi4Ip7IG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:16:56:61:0d:63:81:aa:55:6e:3e:66:3e:ce:06:3a:4f:e7:d3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Jan 26 12:16:02 2026 GMT Not After : Jan 27 15:52:02 2026 GMT Subject: CN=C078FCB175673CB993FD078ECB07CA4E5FAE9F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:37:3d:57:3a:dd:9a:0a:cd:1d:d6:b8:0e: ce:fd:5a:6d:57:72:40:b4:13:33:67:6e:df:8a:39: 13:4f:2e:98:b0:22:2c:ec:01:1e:80:9d:d4:15:af: 4d:02:1c:1e:e2:c3:f0:81:79:48:17:41:85:b5:1e: c0:20:7b:59:b0:84:1b:68:37:cd:b9:76:67:d7:49: 68:1d:ce:72:40:7b:19:01:36:b7:d2:95:48:f3:44: 3f:86:56:37:68:a5:aa:e5:d0:4d:33:02:27:bc:1b: 6a:13:83:1a:ce:d2:6c:cb:28:9a:6d:b9:1f:f4:81: 8f:f0:3d:80:6e:e3:2c:7a:d7:c9:03:43:31:7b:0f: e7:5d:95:78:07:88:00:c4:8b:4d:67:33:a3:75:97: fd:c8:ae:8a:06:77:8d:68:0a:19:f9:e3:a9:69:11: 99:88:b7:19:0d:a9:89:30:eb:46:77:e9:39:9f:c7: c3:38:42:fe:b7:b1:7c:6e:bc:08:15:f8:58:3d:0c: ea:98:5c:4a:c9:6f:70:1b:57:bd:c0:72:75:4d:f8: 63:f4:6e:11:75:54:f1:ab:96:73:ea:68:1a:e2:2c: c9:5c:1d:21:b2:8f:dc:d3:94:80:6b:5b:e4:67:76: 98:d4:79:a1:07:29:0d:ee:86:a5:c8:b8:85:a4:4e: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:78:FC:B1:75:67:3C:B9:93:FD:07:8E:CB:07:CA:4E:5F:AE:9F:03 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:52:2b:b2:49:a6:dd:7c:b3:c8:4b:53:d0:bf:41:5c:f4:9c: ea:ae:6a:e1:22:f2:5a:5a:db:8d:ec:fb:66:00:03:65:a3:ca: 59:4f:98:c0:20:dc:a4:94:3a:6f:be:f3:5a:13:b6:e8:34:8b: d1:c4:6b:c5:87:14:27:b0:f9:ea:ee:68:a6:a2:2d:dc:74:ad: f9:bc:99:91:a5:0d:4e:34:b5:91:db:1b:5c:4c:a0:f2:19:1b: 4b:d9:f3:8a:42:f5:90:f3:be:d4:35:c1:15:4a:46:28:28:1b: c3:03:43:49:54:0d:2e:f9:2e:80:ea:ba:6f:85:d7:27:38:57: 0a:9b:46:e6:f6:d4:5e:6f:c9:f7:af:c3:db:58:bd:27:81:6f: f7:ba:16:1a:83:6f:fe:b2:f6:0f:3e:75:d1:45:4f:d2:b8:29: de:fd:d2:f6:26:12:e0:5b:65:e8:e8:4f:4a:18:3a:0b:57:4a: 2a:53:35:1a:73:8a:ad:a1:6a:f8:9d:db:fe:7b:8b:a9:55:24: 01:8b:9e:66:c6:ef:22:cb:5d:57:de:c4:a4:55:30:8c:75:d3: d4:fc:b9:87:19:82:e8:ec:a6:17:b3:c3:61:f6:a7:9b:09:ff: bf:d1:ff:40:54:66:33:d7:27:ce:43:4c:2e:23:b1:a6:eb:e1: 7e:d6:8c:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWRZWYQ1jgapVbj5mPs4GOk/n03YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjAxMjYxMjE2MDJaFw0yNjAxMjcxNTUyMDJaMDMxMTAvBgNV BAMTKEMwNzhGQ0IxNzU2NzNDQjk5M0ZEMDc4RUNCMDdDQTRFNUZBRTlGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXTc9VzrdmgrNHda4Ds79Wm1X ckC0EzNnbt+KORNPLpiwIizsAR6AndQVr00CHB7iw/CBeUgXQYW1HsAge1mwhBto N825dmfXSWgdznJAexkBNrfSlUjzRD+GVjdoparl0E0zAie8G2oTgxrO0mzLKJpt uR/0gY/wPYBu4yx618kDQzF7D+ddlXgHiADEi01nM6N1l/3IrooGd41oChn546lp EZmItxkNqYkw60Z36Tmfx8M4Qv63sXxuvAgV+Fg9DOqYXErJb3AbV73AcnVN+GP0 bhF1VPGrlnPqaBriLMlcHSGyj9zTlIBrW+RndpjUeaEHKQ3uhqXIuIWkTmMlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwHj8sXVnPLmT/QeOywfKTl+unwMwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1Irskmm3Xyz yEtT0L9BXPSc6q5q4SLyWlrbjez7ZgADZaPKWU+YwCDcpJQ6b77zWhO26DSL0cRr xYcUJ7D56u5opqIt3HSt+byZkaUNTjS1kdsbXEyg8hkbS9nzikL1kPO+1DXBFUpG KCgbwwNDSVQNLvkugOq6b4XXJzhXCptG5vbUXm/J96/D21i9J4Fv97oWGoNv/rL2 Dz510UVP0rgp3v3S9iYS4Ftl6OhPShg6C1dKKlM1GnOKraFq+J3b/nuLqVUkAYue ZsbvIstdV97EpFUwjHXT1Py5hxmC6OymF7PDYfanmwn/v9H/QFRmM9cnzkNMLiOx puvhftaMZw== -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:13 2026 by rpki-client