This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json) Hash identifier: fQj7xmftG/vOnfTZwKgYgMtTaOwfymXoEMtpwpwmNZg= Subject key identifier: 52:61:E9:ED:6F:FF:97:43:A1:D9:D1:79:04:1C:4A:E4:CE:AD:08:64 Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 0626EB7909FF20981C3F6140AE77CA2CA4B5FFDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 02:11:02 +0000 Manifest this update: Mon 26 Jan 2026 02:06:02 +0000 Manifest next update: Tue 27 Jan 2026 05:58:02 +0000 Files and hashes: 1: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=) 2: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: qVxJR4kGWICF9KD95LOHi2Kuj1VVj+mMwAqie7445yA=) 3: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=) 4: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=) 5: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=) 6: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=) 7: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=) 8: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=) 9: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=) 10: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=) 11: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=) 12: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:26:eb:79:09:ff:20:98:1c:3f:61:40:ae:77:ca:2c:a4:b5:ff:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Jan 26 02:06:02 2026 GMT Not After : Jan 27 05:58:02 2026 GMT Subject: CN=5261E9ED6FFF9743A1D9D179041C4AE4CEAD0864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:41:69:4f:c5:a6:32:f8:88:c8:15:f2:a1: ec:14:cc:57:d1:be:69:cf:56:aa:7a:e9:04:25:30: 34:59:43:a7:1c:03:61:7b:66:71:1f:e6:81:9c:00: 8c:d5:eb:45:38:d8:81:ef:26:f8:8f:c4:91:7f:03: 68:b9:47:79:3c:02:fa:ee:16:9a:54:78:20:1d:ca: d2:e5:83:8b:e9:ad:2d:7a:17:96:40:32:f8:89:65: 2d:a3:0d:44:51:0d:39:71:48:19:57:a2:c9:4d:4a: 9c:3c:a7:2d:d2:eb:86:cb:a5:57:43:fc:3c:95:c5: df:51:ef:3f:f9:79:e8:3f:89:bc:2c:ff:54:b8:f6: 28:61:cc:dc:d3:87:05:44:d1:4b:c3:21:ca:db:76: b1:cd:83:43:95:3b:d6:23:7c:44:28:b8:b6:55:e3: 56:20:4d:60:f0:07:28:d3:ac:f3:d2:ad:73:8c:e3: cb:ef:87:b0:06:9c:90:6b:0d:e9:18:48:25:be:a7: f5:b5:f3:60:e9:cc:2d:95:3c:ef:92:c4:34:68:e2: 9c:10:6e:da:6f:af:65:ea:17:e9:4c:c7:a2:d4:eb: e4:ee:0b:5a:36:9d:ca:16:3a:4d:74:79:d2:36:be: c1:50:00:bf:d8:9a:ec:fd:df:9f:de:fe:b6:42:43: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:61:E9:ED:6F:FF:97:43:A1:D9:D1:79:04:1C:4A:E4:CE:AD:08:64 X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e5:8b:47:7d:9d:3e:41:52:1c:1f:3f:f3:1a:a8:4d:fc:b8: 24:ac:fa:5c:92:67:2f:aa:a5:96:68:77:19:12:6d:43:93:02: 01:8d:ac:b2:85:63:cb:1c:2f:7c:0e:2a:63:0b:e0:e3:f4:28: 45:bb:94:03:c8:40:cc:e0:48:27:96:bc:86:98:68:a4:9d:26: 04:0f:15:db:4a:c4:c9:4b:90:3d:6a:29:7d:0c:e2:9c:20:b5: 63:6a:2c:0d:b9:6a:c4:00:e0:61:fe:ce:43:b1:ce:9b:c2:e6: 84:f8:d4:54:c0:19:6f:9c:31:fd:dd:42:92:bb:33:00:ee:95: 0c:f8:cc:cd:98:73:69:61:d3:52:5e:77:1a:a0:d7:e8:b7:c3: b4:0f:c6:70:63:ff:16:06:23:1f:6f:c6:20:d7:08:d9:a8:d7: ec:d6:21:1b:ea:da:26:93:3b:3b:7e:a6:16:5e:d4:dc:78:3e: 82:9b:e8:bc:f6:9d:06:50:ac:78:33:56:2c:11:88:50:75:5c: 95:f6:04:04:f7:cb:53:7b:b6:f6:b9:c4:b0:69:6a:11:3f:8b: 7c:9e:af:54:59:f1:c3:87:3d:df:2c:9e:be:38:0e:bf:ac:ce: af:f1:da:1c:97:04:55:81:aa:3f:32:34:0c:24:d4:a6:92:1f: 5b:12:8f:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBibreQn/IJgcP2FArnfKLKS1/9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAxMjYwMjA2MDJaFw0yNjAxMjcwNTU4MDJaMDMxMTAvBgNV BAMTKDUyNjFFOUVENkZGRjk3NDNBMUQ5RDE3OTA0MUM0QUU0Q0VBRDA4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7UFpT8WmMviIyBXyoewUzFfR vmnPVqp66QQlMDRZQ6ccA2F7ZnEf5oGcAIzV60U42IHvJviPxJF/A2i5R3k8Avru FppUeCAdytLlg4vprS16F5ZAMviJZS2jDURRDTlxSBlXoslNSpw8py3S64bLpVdD /DyVxd9R7z/5eeg/ibws/1S49ihhzNzThwVE0UvDIcrbdrHNg0OVO9YjfEQouLZV 41YgTWDwByjTrPPSrXOM48vvh7AGnJBrDekYSCW+p/W182DpzC2VPO+SxDRo4pwQ btpvr2XqF+lMx6LU6+TuC1o2ncoWOk10edI2vsFQAL/Ymuz935/e/rZCQ10LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUmHp7W//l0Oh2dF5BBxK5M6tCGQwHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluWLR32dPkFS HB8/8xqoTfy4JKz6XJJnL6qllmh3GRJtQ5MCAY2ssoVjyxwvfA4qYwvg4/QoRbuU A8hAzOBIJ5a8hphopJ0mBA8V20rEyUuQPWopfQzinCC1Y2osDblqxADgYf7OQ7HO m8LmhPjUVMAZb5wx/d1CkrszAO6VDPjMzZhzaWHTUl53GqDX6LfDtA/GcGP/FgYj H2/GINcI2ajX7NYhG+raJpM7O36mFl7U3Hg+gpvovPadBlCseDNWLBGIUHVclfYE BPfLU3u29rnEsGlqET+LfJ6vVFnxw4c93yyevjgOv6zOr/HaHJcEVYGqPzI0DCTU ppIfWxKPCw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:49 2026 by rpki-client