This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: joEG6oIdL7hG0OBuQQKrf6sYd3a4faQ/xgUQvKe/2Sk= Subject key identifier: 63:C5:97:BC:B7:FE:D7:8D:D6:9E:B7:8A:42:F5:5D:8D:23:C8:F7:CD Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 7B3571D8764659F654D2CCF07736885131E3AF6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 18:06:02 +0000 Manifest this update: Mon 26 Jan 2026 18:01:02 +0000 Manifest next update: Tue 27 Jan 2026 20:07:02 +0000 Files and hashes: 1: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 2: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: wDHyM9ArtxxMK5GL8XsMkdouQ3hjLFS1s5zZV1mAhvM=) 3: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:35:71:d8:76:46:59:f6:54:d2:cc:f0:77:36:88:51:31:e3:af:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jan 26 18:01:02 2026 GMT Not After : Jan 27 20:07:02 2026 GMT Subject: CN=63C597BCB7FED78DD69EB78A42F55D8D23C8F7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:be:80:c2:bb:be:42:15:fc:c9:16:94:34: 28:c1:9d:2c:61:76:9d:63:45:b5:52:7f:51:a2:a7: 84:51:25:9e:15:99:bf:59:7a:1c:d6:4c:05:60:93: 38:0e:d9:94:d4:e3:bb:e3:90:8a:24:a2:99:0c:dc: f1:44:1f:5d:89:f9:a1:4f:3f:bb:36:6d:53:a1:0d: 5b:d0:aa:31:4d:59:08:7b:bb:f6:d0:61:00:b6:80: 9e:44:cb:52:ec:d2:d3:31:72:de:18:04:05:87:e9: d7:ab:1b:bf:13:81:03:2d:81:a1:5b:a6:06:f8:04: de:c1:53:04:02:a0:ab:65:60:f5:0c:c9:c4:bc:be: c9:dc:97:23:64:88:98:ac:bb:78:1a:3a:2e:4d:de: f0:c0:d8:e3:a5:07:80:c6:a3:9c:81:e0:1d:b7:9f: 34:9d:cb:07:2e:d8:7c:69:cc:5d:15:4f:e1:40:4b: 0e:cd:56:20:9b:cd:75:08:bb:6d:97:69:eb:28:7c: f7:05:96:78:c6:8a:26:e5:37:c2:81:f1:28:67:62: 78:20:4d:7b:4b:14:dc:e2:c3:7f:d6:11:69:94:75: ad:7a:8f:58:ac:f9:a9:91:93:e5:ad:72:bb:eb:74: b8:a4:39:6a:fc:09:5d:d8:f7:72:f1:d5:dc:0f:e5: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C5:97:BC:B7:FE:D7:8D:D6:9E:B7:8A:42:F5:5D:8D:23:C8:F7:CD X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3e:e0:c1:14:ed:ea:68:07:38:d8:52:56:61:59:0f:a4:29: f1:13:bb:59:08:f2:3e:dd:d8:04:4b:d8:8c:e0:1f:fa:90:8e: 99:b7:09:2e:cd:9c:76:6e:52:31:d9:cd:ec:9e:ef:3e:17:3d: 1c:22:3c:c6:13:ad:79:e9:73:e9:fb:39:68:41:29:55:bf:31: ed:6e:ce:43:47:79:87:8f:7b:12:c2:3b:d6:a5:16:8d:19:80: ae:ae:f9:8e:5f:6c:63:f0:82:9d:68:dd:49:72:bc:76:cc:9d: fb:d8:7c:10:38:12:7e:7b:30:72:d1:80:23:65:0a:58:24:f7: fc:85:11:57:e5:17:62:d5:ed:ca:55:51:8c:d2:ed:89:fb:bd: ee:49:4f:3d:2e:34:22:8e:aa:20:00:d6:30:f3:68:50:bc:7a: 3c:0e:78:10:2c:5a:69:48:62:1e:24:9a:c7:32:86:3a:31:af: 6c:73:83:5a:44:01:5f:c1:71:44:c8:62:87:55:71:e7:ba:a0: a6:f8:95:b9:12:bc:7d:bb:8b:67:6d:1d:13:56:bc:8a:73:2b: 65:81:56:50:79:a3:e5:f6:62:a6:14:9d:39:3f:93:d6:08:15: f7:1f:d8:cd:a8:1c:7d:81:f6:13:6e:88:95:16:d1:5a:1c:44: 50:9d:15:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUezVx2HZGWfZU0szwdzaIUTHjr2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAxMjYxODAxMDJaFw0yNjAxMjcyMDA3MDJaMDMxMTAvBgNV BAMTKDYzQzU5N0JDQjdGRUQ3OERENjlFQjc4QTQyRjU1RDhEMjNDOEY3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROb6Awru+QhX8yRaUNCjBnSxh dp1jRbVSf1Gip4RRJZ4Vmb9ZehzWTAVgkzgO2ZTU47vjkIokopkM3PFEH12J+aFP P7s2bVOhDVvQqjFNWQh7u/bQYQC2gJ5Ey1Ls0tMxct4YBAWH6derG78TgQMtgaFb pgb4BN7BUwQCoKtlYPUMycS8vsnclyNkiJisu3gaOi5N3vDA2OOlB4DGo5yB4B23 nzSdywcu2HxpzF0VT+FASw7NViCbzXUIu22XaesofPcFlnjGiiblN8KB8ShnYngg TXtLFNziw3/WEWmUda16j1is+amRk+WtcrvrdLikOWr8CV3Y93Lx1dwP5Ye3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY8WXvLf+143WnreKQvVdjSPI980wHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAz7gwRTt6mgH ONhSVmFZD6Qp8RO7WQjyPt3YBEvYjOAf+pCOmbcJLs2cdm5SMdnN7J7vPhc9HCI8 xhOteelz6fs5aEEpVb8x7W7OQ0d5h497EsI71qUWjRmArq75jl9sY/CCnWjdSXK8 dsyd+9h8EDgSfnswctGAI2UKWCT3/IURV+UXYtXtylVRjNLtifu97klPPS40Io6q IADWMPNoULx6PA54ECxaaUhiHiSaxzKGOjGvbHODWkQBX8FxRMhih1Vx57qgpviV uRK8fbuLZ20dE1a8inMrZYFWUHmj5fZiphSdOT+T1ggV9x/YzagcfYH2E26IlRbR WhxEUJ0VoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:39 2026 by rpki-client