This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: +YQ2MrLIoiOpX+2gfVaOeFlEChXBSoo8sNX2G2T81p4= Subject key identifier: 4D:CF:A0:76:B2:A9:76:71:3A:2C:81:8B:2C:1F:2E:0A:93:CC:85:A9 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 61CF192441A63F5AD235B1E4405861013AA63077 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 04:56:02 +0000 Manifest this update: Mon 26 Jan 2026 04:51:02 +0000 Manifest next update: Tue 27 Jan 2026 08:09:02 +0000 Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 2: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 3: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 4: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 5: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 6: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: lv+9rx+KNaAGOEMfcAq8mB/RNDSbVUmLxIoP0a3M1K4=) 7: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 8: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cf:19:24:41:a6:3f:5a:d2:35:b1:e4:40:58:61:01:3a:a6:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jan 26 04:51:02 2026 GMT Not After : Jan 27 08:09:02 2026 GMT Subject: CN=4DCFA076B2A976713A2C818B2C1F2E0A93CC85A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:94:55:26:60:b2:05:bd:c7:ab:3a:8b:12: 6b:e6:da:cc:52:43:aa:1e:4f:da:cd:56:83:3f:8f: f7:03:ed:5c:f1:3a:63:74:a1:b5:34:3d:94:26:3c: 82:13:fd:bc:a9:37:cc:d9:4e:ce:d5:9a:b3:3e:52: 67:24:72:27:ab:b6:6a:20:f2:e0:76:64:22:d3:16: fd:d9:dd:ac:ce:36:72:86:34:4b:e3:28:0f:b1:6b: 7f:d5:f2:ca:1a:ac:5b:e3:78:08:02:44:f7:c3:cc: 90:8b:15:ae:6d:80:27:07:92:4d:64:96:94:18:74: 2c:48:87:62:b0:31:f0:15:41:b0:0f:82:f7:b3:40: 3b:d7:69:cd:ac:5c:2e:de:01:55:03:30:91:10:17: 80:44:63:c7:4d:de:4e:8b:82:c8:a8:c2:04:e5:23: 46:17:49:1b:6d:b6:71:2e:31:bd:d1:17:19:88:97: 4b:a7:ac:54:78:cf:f0:8d:81:a7:ac:70:85:fb:cb: e2:db:e7:d3:a1:c3:1e:ef:d6:a6:5a:4c:36:0c:22: 5e:a3:d4:25:17:71:85:27:75:e1:f0:3d:82:c5:b7: d1:6a:52:94:e5:f0:a4:44:1b:e7:24:82:38:d2:a0: a4:d3:7f:ff:0d:59:ca:57:8a:e1:e2:4f:5f:3e:e4: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CF:A0:76:B2:A9:76:71:3A:2C:81:8B:2C:1F:2E:0A:93:CC:85:A9 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:28:ed:09:05:53:15:3f:61:2a:71:f6:70:08:4e:2d:f4:21: 4a:ba:ae:d7:ad:e7:5f:c5:64:00:cf:28:e6:c7:b7:81:f4:60: b6:5c:24:86:17:7b:11:60:59:6d:df:83:cb:e4:94:74:83:41: 37:96:81:ef:12:97:d6:46:77:28:8f:e7:98:a9:af:aa:27:2b: 41:32:44:99:d4:f2:5b:e1:31:64:bc:2d:08:96:76:c6:ee:97: 6e:2f:77:1d:fc:7e:72:9b:1d:1c:01:df:c2:f5:a8:0c:e1:7a: 7b:90:2a:2c:f0:4a:1c:fa:39:96:9c:61:76:1f:5f:31:69:93: 48:43:2c:8a:8c:0b:86:51:cf:37:91:97:27:61:4f:3d:90:ba: 4e:d4:44:c1:e1:fe:20:8c:a3:07:07:da:11:21:80:19:d9:13: 54:be:88:94:dc:f2:02:8f:0e:63:05:c4:19:bb:d4:17:d0:58: 11:d5:61:8d:4b:cd:d9:02:0c:78:c5:e4:9b:37:3f:1b:02:b4: ad:27:5c:39:bc:af:fc:b3:bd:15:d4:ca:b8:50:3b:b6:2a:7d: c0:aa:0c:24:66:a6:ea:60:43:5a:57:11:c0:c3:3d:90:11:08: ff:6d:82:ee:fa:93:d0:ed:fb:f1:6f:6f:d4:c4:fd:df:80:6c: 4d:ce:ab:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYc8ZJEGmP1rSNbHkQFhhATqmMHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAxMjYwNDUxMDJaFw0yNjAxMjcwODA5MDJaMDMxMTAvBgNV BAMTKDREQ0ZBMDc2QjJBOTc2NzEzQTJDODE4QjJDMUYyRTBBOTNDQzg1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9R5RVJmCyBb3HqzqLEmvm2sxS Q6oeT9rNVoM/j/cD7VzxOmN0obU0PZQmPIIT/bypN8zZTs7VmrM+Umckciertmog 8uB2ZCLTFv3Z3azONnKGNEvjKA+xa3/V8soarFvjeAgCRPfDzJCLFa5tgCcHkk1k lpQYdCxIh2KwMfAVQbAPgvezQDvXac2sXC7eAVUDMJEQF4BEY8dN3k6LgsiowgTl I0YXSRtttnEuMb3RFxmIl0unrFR4z/CNgaescIX7y+Lb59Ohwx7v1qZaTDYMIl6j 1CUXcYUndeHwPYLFt9FqUpTl8KREG+ckgjjSoKTTf/8NWcpXiuHiT18+5BGPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTc+gdrKpdnE6LIGLLB8uCpPMhakwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCjtCQVTFT9h KnH2cAhOLfQhSrqu163nX8VkAM8o5se3gfRgtlwkhhd7EWBZbd+Dy+SUdINBN5aB 7xKX1kZ3KI/nmKmvqicrQTJEmdTyW+ExZLwtCJZ2xu6Xbi93Hfx+cpsdHAHfwvWo DOF6e5AqLPBKHPo5lpxhdh9fMWmTSEMsiowLhlHPN5GXJ2FPPZC6TtREweH+IIyj BwfaESGAGdkTVL6IlNzyAo8OYwXEGbvUF9BYEdVhjUvN2QIMeMXkmzc/GwK0rSdc Obyv/LO9FdTKuFA7tip9wKoMJGam6mBDWlcRwMM9kBEI/22C7vqT0O378W9v1MT9 34BsTc6rWw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:35 2026 by rpki-client