This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: BpCYTIOX4pvgpj1fuqw5j2eeikdMY0j8NSS0wM2MxRc= Subject key identifier: BC:D2:9B:55:9B:F9:64:3F:03:D2:BA:AD:7A:C6:F2:79:21:D4:86:27 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 5E4D1FE63B22E25E4D535401262EB5BA639A395E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 06 Signing time: Fri 23 Jan 2026 04:30:55 +0000 Manifest this update: Fri 23 Jan 2026 04:25:55 +0000 Manifest next update: Sat 24 Jan 2026 07:16:55 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: 1pngHD0bwLR82Im8IM+Q4vhfszZ9PHsuhJHm5PHSUlE=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:1f:e6:3b:22:e2:5e:4d:53:54:01:26:2e:b5:ba:63:9a:39:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Jan 23 04:25:55 2026 GMT Not After : Jan 24 07:16:55 2026 GMT Subject: CN=BCD29B559BF9643F03D2BAAD7AC6F27921D48627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:68:5c:22:42:d0:9b:82:4a:21:a5:ba:b1: 50:d4:0e:46:30:c0:dc:94:fb:a3:13:e8:24:1f:2b: 8a:ce:66:74:ae:77:2c:ff:b7:16:e8:3e:5e:76:1a: 28:cc:43:78:a9:aa:fc:0d:a2:74:f4:21:58:f5:76: 8f:3e:11:9f:2b:c5:2c:99:67:8b:9c:ad:6f:8d:ec: c0:34:d8:eb:4d:48:77:16:5f:86:78:30:b8:6f:26: 70:4d:1e:8f:fb:ed:ef:34:c5:e9:ac:9c:80:a6:01: c9:f9:dc:2d:f3:83:7c:46:ad:53:81:63:34:b5:6d: d0:d3:f0:d2:a7:24:38:36:f9:a2:d3:86:c6:e1:9c: c6:aa:64:ab:4b:b8:42:34:4a:e5:5e:f7:d3:6b:30: 11:37:cc:07:ea:fe:87:e8:34:22:e6:3d:b6:91:d5: b0:46:d6:28:b5:42:a2:49:63:5e:ec:c1:dd:01:48: e5:5a:ea:0a:8f:1a:04:77:c8:99:b7:2c:5c:4a:86: 5d:2b:00:fe:ee:e8:c2:75:1a:fa:cc:f0:8b:07:c2: 28:8b:c1:dc:c4:ed:4b:b8:e2:e7:c0:85:1b:fd:6f: 7d:51:1e:d5:83:ed:02:5a:9f:e3:f2:db:02:56:21: f8:a9:c8:69:8e:2c:d7:b0:72:d6:40:2e:a3:fd:98: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:9B:55:9B:F9:64:3F:03:D2:BA:AD:7A:C6:F2:79:21:D4:86:27 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:76:14:54:aa:7d:84:a9:51:09:21:7c:5b:67:ae:01:cd:6e: 4a:73:e2:59:ac:b6:2c:5c:a1:58:73:42:c5:e0:32:40:86:e3: ef:d4:d8:d1:27:9a:b7:12:95:a9:b1:37:3d:6c:97:f6:24:09: a8:15:c1:f1:b1:80:ef:45:d2:23:b2:6c:c1:78:51:c9:b5:8b: a3:b1:6e:a0:0c:da:85:9e:b1:49:01:fe:f3:31:a6:e6:88:c1: f9:41:52:a2:4a:9a:cb:87:c4:fa:51:67:09:c9:39:7a:61:cb: 17:50:ae:f4:af:35:51:4e:7f:90:c3:18:4f:22:33:bd:a5:da: 3f:83:f2:47:e4:39:f2:79:87:29:42:03:9f:6f:c1:99:7f:c2: 53:a0:31:4e:09:08:ad:c2:56:d3:b0:15:99:9a:ea:15:31:03: e9:63:5d:f2:dd:e1:b2:14:bd:24:94:37:71:87:e1:e2:3b:b5: 6b:2a:57:a8:71:ab:56:79:d4:33:23:4e:b5:a3:b6:28:18:ea: 40:4a:93:c3:b6:8a:e3:43:b7:88:ad:74:87:26:1e:70:fa:89: 5f:a9:e4:e4:bc:4e:7c:f4:30:cd:90:25:71:ec:ef:37:d1:9e: 9d:c5:5b:c6:09:d4:77:03:34:68:5a:e2:88:bb:ae:1d:3e:75: ab:db:30:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXk0f5jsi4l5NU1QBJi61umOaOV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjAxMjMwNDI1NTVaFw0yNjAxMjQwNzE2NTVaMDMxMTAvBgNV BAMTKEJDRDI5QjU1OUJGOTY0M0YwM0QyQkFBRDdBQzZGMjc5MjFENDg2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbemhcIkLQm4JKIaW6sVDUDkYw wNyU+6MT6CQfK4rOZnSudyz/txboPl52GijMQ3ipqvwNonT0IVj1do8+EZ8rxSyZ Z4ucrW+N7MA02OtNSHcWX4Z4MLhvJnBNHo/77e80xemsnICmAcn53C3zg3xGrVOB YzS1bdDT8NKnJDg2+aLThsbhnMaqZKtLuEI0SuVe99NrMBE3zAfq/ofoNCLmPbaR 1bBG1ii1QqJJY17swd0BSOVa6gqPGgR3yJm3LFxKhl0rAP7u6MJ1GvrM8IsHwiiL wdzE7Uu44ufAhRv9b31RHtWD7QJan+Py2wJWIfipyGmOLNewctZALqP9mPDbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvNKbVZv5ZD8D0rqtesbyeSHUhicwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXYUVKp9hKlR CSF8W2euAc1uSnPiWay2LFyhWHNCxeAyQIbj79TY0SeatxKVqbE3PWyX9iQJqBXB 8bGA70XSI7JswXhRybWLo7FuoAzahZ6xSQH+8zGm5ojB+UFSokqay4fE+lFnCck5 emHLF1Cu9K81UU5/kMMYTyIzvaXaP4PyR+Q58nmHKUIDn2/BmX/CU6AxTgkIrcJW 07AVmZrqFTED6WNd8t3hshS9JJQ3cYfh4ju1aypXqHGrVnnUMyNOtaO2KBjqQEqT w7aK40O3iK10hyYecPqJX6nk5LxOfPQwzZAlcezvN9GencVbxgnUdwM0aFriiLuu HT51q9swcQ== -----END CERTIFICATE-----Generated at Fri Jan 23 15:20:09 2026 by rpki-client