This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: y+BGXtBc4JDAu9kAZysl+BghYNOfB4pgMfUTO1T6gyM= Subject key identifier: F5:FC:43:0F:42:9A:97:1B:0C:01:AA:38:96:8E:70:8B:2C:BC:53:6F Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 062E95E5EA0E0BDBF66A99E5231D931B3EBE0924 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 20:06:02 +0000 Manifest this update: Mon 26 Jan 2026 20:01:02 +0000 Manifest next update: Tue 27 Jan 2026 20:47:02 +0000 Files and hashes: 1: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 2: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 3: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 4: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 5: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: Dlf6WMUe63B90lZwi31kN0CNyaxPOFgRYIv6WgrYsxQ=) 6: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 7: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 8: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2e:95:e5:ea:0e:0b:db:f6:6a:99:e5:23:1d:93:1b:3e:be:09:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Jan 26 20:01:02 2026 GMT Not After : Jan 27 20:47:02 2026 GMT Subject: CN=F5FC430F429A971B0C01AA38968E708B2CBC536F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:89:56:9a:d6:39:ab:f0:01:73:9f:f3:87:87: f4:85:10:b2:23:0b:c1:e3:21:41:e8:9d:36:5d:35: e5:eb:56:0c:88:a6:3e:c2:1c:eb:63:58:e4:e8:10: c7:79:c5:a7:e7:d7:30:e4:4b:60:75:20:a8:f1:cd: f5:0e:e2:54:ef:97:08:80:0b:c2:bb:65:02:ee:cd: ab:bf:c2:7e:5e:cd:6c:68:dd:76:21:7a:06:56:b8: ec:f6:f9:fa:43:42:f8:12:35:5d:c0:c2:33:d1:11: d6:ff:c2:fd:3f:5c:c2:94:c5:24:45:b5:b4:83:9b: 30:b4:69:b3:2d:79:0e:4a:63:b2:f2:53:46:82:d9: 1c:ea:23:99:07:10:24:1d:6b:a9:b9:43:2f:62:8e: 22:12:ba:9a:7d:98:f9:fb:95:68:2c:99:76:d8:5b: 9a:cf:3d:1b:4c:91:f7:98:35:6d:33:a8:da:48:b5: 80:1e:b3:0e:ac:4c:7d:88:ca:41:e5:02:88:19:fd: 74:63:a3:cb:90:eb:6a:37:44:36:e8:9c:5d:4d:71: 3e:bb:e3:ab:e6:ad:06:36:c8:9f:64:8b:64:49:90: 1d:7f:6e:fe:31:6a:5c:a0:e1:b1:92:32:ff:d0:9c: 19:b1:25:42:be:1b:f2:ff:f0:81:ac:0a:b3:a6:d1: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FC:43:0F:42:9A:97:1B:0C:01:AA:38:96:8E:70:8B:2C:BC:53:6F X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0a:5a:eb:1a:8e:5f:60:81:19:07:5f:61:8b:c5:cd:cd:33: be:e2:1e:b5:35:aa:34:6d:2c:e2:83:31:14:26:00:b1:a1:47: a1:3c:2a:15:ca:71:3d:16:35:76:b8:90:d4:ae:01:6a:3d:0d: 0c:03:b2:62:0e:4b:c6:cc:fe:18:75:2c:0f:07:90:0f:cd:8d: 89:f4:0f:de:fd:31:fd:7b:aa:67:7f:18:a4:f3:ca:88:8d:67: 19:f4:f8:9c:37:3e:32:50:34:4e:f0:0e:dd:6a:e8:24:a4:23: 32:0f:66:52:d0:55:83:be:4e:1d:63:52:03:71:2d:19:38:9e: 34:b3:1f:a7:14:f7:01:54:b0:f8:22:43:f6:8a:b4:ca:c4:66: 4a:09:9e:7e:3d:c0:4f:ba:3e:7e:b8:8f:4c:2b:46:9f:ee:99: 89:6d:1e:43:70:2b:0d:67:4e:43:e9:34:ea:35:4a:eb:15:ee: 03:29:b8:89:0b:7e:7b:04:5a:2d:c2:97:9f:58:45:5d:ff:02: 5c:3f:05:2a:fe:4b:d4:1c:4c:c0:29:bc:4e:ec:2a:5d:7f:fb: 00:9f:b8:ef:de:46:aa:c3:97:d2:66:4f:29:f0:92:0d:34:3a: 82:b8:64:f2:68:d6:48:56:0f:3a:67:53:92:8a:e2:3c:1f:2d: 47:10:d7:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBi6V5eoOC9v2apnlIx2TGz6+CSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjAxMjYyMDAxMDJaFw0yNjAxMjcyMDQ3MDJaMDMxMTAvBgNV BAMTKEY1RkM0MzBGNDI5QTk3MUIwQzAxQUEzODk2OEU3MDhCMkNCQzUzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDniVaa1jmr8AFzn/OHh/SFELIj C8HjIUHonTZdNeXrVgyIpj7CHOtjWOToEMd5xafn1zDkS2B1IKjxzfUO4lTvlwiA C8K7ZQLuzau/wn5ezWxo3XYhegZWuOz2+fpDQvgSNV3AwjPREdb/wv0/XMKUxSRF tbSDmzC0abMteQ5KY7LyU0aC2RzqI5kHECQda6m5Qy9ijiISupp9mPn7lWgsmXbY W5rPPRtMkfeYNW0zqNpItYAesw6sTH2IykHlAogZ/XRjo8uQ62o3RDbonF1NcT67 46vmrQY2yJ9ki2RJkB1/bv4xalyg4bGSMv/QnBmxJUK+G/L/8IGsCrOm0YghAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9fxDD0KalxsMAao4lo5wiyy8U28wHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgpa6xqOX2CB GQdfYYvFzc0zvuIetTWqNG0s4oMxFCYAsaFHoTwqFcpxPRY1driQ1K4Baj0NDAOy Yg5Lxsz+GHUsDweQD82NifQP3v0x/XuqZ38YpPPKiI1nGfT4nDc+MlA0TvAO3Wro JKQjMg9mUtBVg75OHWNSA3EtGTieNLMfpxT3AVSw+CJD9oq0ysRmSgmefj3AT7o+ friPTCtGn+6ZiW0eQ3ArDWdOQ+k06jVK6xXuAym4iQt+ewRaLcKXn1hFXf8CXD8F Kv5L1BxMwCm8TuwqXX/7AJ+4795GqsOX0mZPKfCSDTQ6grhk8mjWSFYPOmdTkori PB8tRxDXvw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:10 2026 by rpki-client