This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: 57JKovLUEXU2tQ1Kt8flkk7cQlQ3rcVuFg83ltS/P8Y= Subject key identifier: C6:C7:77:1A:C2:42:07:52:9E:0E:4D:D4:14:7F:2A:7F:69:BA:F0:2D Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 27D0160649664AA22E7B77450B9759714DDCB2E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 16 Signing time: Wed 04 Feb 2026 06:21:31 +0000 Manifest this update: Wed 04 Feb 2026 06:16:31 +0000 Manifest next update: Thu 05 Feb 2026 07:17:31 +0000 Files and hashes: 1: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) 2: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 3: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: +aojdbNNRloPsmKkclLVfaeELj/BxjwBNDOQNBjSVoY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d0:16:06:49:66:4a:a2:2e:7b:77:45:0b:97:59:71:4d:dc:b2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Feb 4 06:16:31 2026 GMT Not After : Feb 5 07:17:31 2026 GMT Subject: CN=C6C7771AC24207529E0E4DD4147F2A7F69BAF02D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:4e:92:d9:dc:6a:5f:bf:08:dc:b7:02:74: f6:b6:d6:13:8f:89:9d:06:69:21:9c:1a:09:01:cc: 93:a0:e1:73:7a:d7:5b:13:bd:fa:60:2b:08:9b:79: 3b:b6:73:f8:60:46:dd:e2:f3:a0:f8:66:a2:63:fa: 28:9f:dc:56:a7:fb:23:b3:6d:44:35:13:cd:24:e8: d4:b9:42:45:03:de:29:4b:9d:af:ed:d5:0b:dc:38: 9a:a8:c4:52:3f:0f:51:ba:54:4c:b6:3a:9f:7d:bd: b5:8d:57:72:16:ee:a6:b0:46:4c:12:22:91:6e:61: 89:f1:f0:b8:ca:90:dc:24:2e:30:98:67:9e:7c:c5: 7e:2f:c2:77:f6:1a:3d:b8:54:aa:05:05:fc:6d:81: 61:66:57:29:08:65:d2:81:a9:b3:1c:90:e8:9e:0c: 49:1f:4c:7b:59:33:b1:45:dd:98:3e:01:b1:0e:6e: 63:ca:2a:06:ac:78:82:48:b0:13:7b:ce:e1:3e:53: 8d:0d:99:72:d6:a5:6a:91:4f:ee:55:5e:7c:b9:53: bf:0d:03:2b:ff:9e:7a:e2:0a:4d:98:00:57:13:a6: 64:1f:31:04:00:18:97:43:e1:e8:5a:4a:9a:e0:69: 1a:ea:67:b7:ff:68:dd:96:1d:bd:f1:8b:ca:eb:1b: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C7:77:1A:C2:42:07:52:9E:0E:4D:D4:14:7F:2A:7F:69:BA:F0:2D X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:82:fd:9b:dc:de:93:0d:93:36:38:fd:bb:ea:08:79:38:5e: 54:c8:83:c6:79:aa:65:7e:3d:16:7a:90:0b:03:d6:80:95:c2: 56:94:04:2c:63:c1:e8:7f:af:4d:49:6e:36:b1:06:f2:b4:0d: fe:59:a3:f9:37:b0:fb:b5:fa:40:e4:cb:c4:ce:e1:68:0c:e7: 9d:d2:64:d5:eb:4c:25:cf:f0:4a:7a:57:67:87:5a:fd:80:21: bd:c7:16:26:93:f2:74:b2:81:1d:e0:84:5e:55:dd:bd:31:66: 88:4d:ec:b6:94:67:a3:a6:7a:4f:47:08:ce:44:96:a1:be:08: d9:b1:cb:81:9c:26:85:fb:13:66:16:49:c4:b3:ae:67:36:3f: 5b:a3:da:6e:9d:14:57:22:e8:c0:6d:cd:78:e8:7a:ee:68:42: 78:e7:4e:61:5a:63:af:23:3b:1f:a4:d8:2b:35:04:59:7a:b8: 74:a9:34:87:ac:70:49:39:37:b7:2a:96:7c:8a:56:fa:6e:58: 07:c5:46:71:9f:82:f6:59:66:19:55:39:74:de:38:b8:4d:cb: 6c:80:e1:4a:eb:3f:7a:e7:5a:4e:24:05:c3:97:0f:3e:8e:cd: 9c:01:9f:0b:d2:5c:d3:7b:5f:49:e0:27:eb:0b:f1:ec:ea:e7: 6a:49:93:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ9AWBklmSqIue3dFC5dZcU3csucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjAyMDQwNjE2MzFaFw0yNjAyMDUwNzE3MzFaMDMxMTAvBgNV BAMTKEM2Qzc3NzFBQzI0MjA3NTI5RTBFNERENDE0N0YyQTdGNjlCQUYwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppE6S2dxqX78I3LcCdPa21hOP iZ0GaSGcGgkBzJOg4XN611sTvfpgKwibeTu2c/hgRt3i86D4ZqJj+iif3Fan+yOz bUQ1E80k6NS5QkUD3ilLna/t1QvcOJqoxFI/D1G6VEy2Op99vbWNV3IW7qawRkwS IpFuYYnx8LjKkNwkLjCYZ558xX4vwnf2Gj24VKoFBfxtgWFmVykIZdKBqbMckOie DEkfTHtZM7FF3Zg+AbEObmPKKgaseIJIsBN7zuE+U40NmXLWpWqRT+5VXny5U78N Ayv/nnriCk2YAFcTpmQfMQQAGJdD4ehaSprgaRrqZ7f/aN2WHb3xi8rrG+MZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxsd3GsJCB1KeDk3UFH8qf2m68C0wHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIL9m9zekw2T Njj9u+oIeTheVMiDxnmqZX49FnqQCwPWgJXCVpQELGPB6H+vTUluNrEG8rQN/lmj +Tew+7X6QOTLxM7haAznndJk1etMJc/wSnpXZ4da/YAhvccWJpPydLKBHeCEXlXd vTFmiE3stpRno6Z6T0cIzkSWob4I2bHLgZwmhfsTZhZJxLOuZzY/W6Pabp0UVyLo wG3NeOh67mhCeOdOYVpjryM7H6TYKzUEWXq4dKk0h6xwSTk3tyqWfIpW+m5YB8VG cZ+C9llmGVU5dN44uE3LbIDhSus/eudaTiQFw5cPPo7NnAGfC9Jc03tfSeAn6wvx 7OrnakmT7w== -----END CERTIFICATE-----Generated at Wed Feb 4 08:26:47 2026 by rpki-client