This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json) Hash identifier: VBx0ZiD0d1AjD57DV4MfsZdpQM8W18OkNEY4Xysrr5U= Subject key identifier: DC:C5:C1:CF:E1:C1:0F:0E:35:63:7B:19:6B:AB:FD:D6:3C:CC:23:44 Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Certificate serial: A7A289A135B7BAB377DF24CC394EB9F85DF7D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 07:01:02 +0000 Manifest this update: Mon 26 Jan 2026 06:56:02 +0000 Manifest next update: Tue 27 Jan 2026 08:12:02 +0000 Files and hashes: 1: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=) 2: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: 1wEIvnhi6M4G7xx6WVh7lyQ6WNN0UhTajZlNsi6wLGs=) 3: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a7:a2:89:a1:35:b7:ba:b3:77:df:24:cc:39:4e:b9:f8:5d:f7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Validity Not Before: Jan 26 06:56:02 2026 GMT Not After : Jan 27 08:12:02 2026 GMT Subject: CN=DCC5C1CFE1C10F0E35637B196BABFDD63CCC2344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:15:5e:e4:0a:fc:ff:70:d5:3c:cb:28:22: 1c:2e:49:bf:79:8d:c0:9a:3a:61:5d:4e:ce:17:4c: d9:6c:3a:32:77:c0:0c:c9:5e:89:e3:f9:21:db:14: 70:c2:55:55:c6:65:91:30:e2:2f:5f:e5:13:7b:5a: e4:49:70:91:25:16:b2:10:ab:1d:5a:6c:44:17:3c: 44:fa:9b:40:0e:2c:86:ee:c8:72:0c:48:1a:66:91: 66:1b:48:5c:29:fe:fc:91:ba:9a:16:8f:ba:46:a2: d4:b8:9c:69:d0:1a:49:5d:28:7c:b1:91:68:40:75: 5e:f0:96:62:a1:8b:29:17:3c:65:60:b2:a4:68:a7: eb:e6:64:3c:3d:52:ba:94:e1:dd:5f:5a:88:31:41: fc:d3:40:fc:1e:f5:3e:ce:d0:4c:71:ee:b9:33:bf: 24:7a:44:94:e0:74:d3:9b:53:99:1b:b8:86:9a:a5: fc:c3:c4:4d:25:fe:21:7a:62:e0:7d:5f:9d:8c:ab: c5:68:d3:4a:9c:a4:ba:88:86:cf:b1:a4:d3:ec:40: c2:d1:e1:ce:36:b4:74:32:01:87:6d:fc:95:d3:d4: 4e:44:03:70:ea:6d:20:f1:c7:2f:23:d5:7d:8e:95: 99:5c:67:75:61:be:9d:0a:94:56:cb:0e:7b:9b:fe: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C5:C1:CF:E1:C1:0F:0E:35:63:7B:19:6B:AB:FD:D6:3C:CC:23:44 X509v3 Authority Key Identifier: keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:19:11:f3:1a:ed:9e:76:dc:eb:8c:e3:9d:57:fb:01:ac:52: 99:0b:37:90:40:54:19:59:c2:8f:ef:9f:f2:36:c9:c0:d2:cc: 4f:ab:e5:bb:54:f4:cd:87:6c:83:e2:5d:c9:14:fa:a1:cb:4c: bb:37:57:f8:f4:ec:41:79:49:c4:6c:88:ae:10:f7:c8:eb:4c: ab:a7:88:e8:ea:d0:9c:9e:d4:6f:71:62:60:a6:de:bf:f8:07: ab:63:cb:62:c1:bf:0a:69:25:de:53:bf:fa:bf:41:26:29:7e: bf:5f:1f:8e:12:f7:a7:16:95:82:a2:92:55:e3:37:d1:1e:a4: 2d:42:f6:fe:19:c1:8f:44:72:7c:e3:71:37:b1:46:3b:70:82: 9e:d3:e9:6f:b1:ee:57:c4:6a:50:a5:92:75:4f:02:0b:9e:83: e7:9a:ce:c6:f5:90:ae:1c:d9:cd:bb:2b:9c:f9:bb:a8:f3:ca: 2a:d6:04:6c:d5:65:2a:3c:02:22:52:a7:e4:1c:18:91:b8:e7: f2:3c:96:f7:a3:6d:fb:11:82:b1:94:bd:97:10:70:f8:56:24: c2:b6:f3:37:8f:db:87:d8:b8:55:52:5f:98:ea:b2:0e:d4:ed: c6:d1:86:ef:2a:12:f8:d0:40:b1:b9:2d:81:66:d7:0c:aa:39: eb:70:11:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAKeiiaE1t7qzd98kzDlOufhd99YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2 M0EwNjcxNjAeFw0yNjAxMjYwNjU2MDJaFw0yNjAxMjcwODEyMDJaMDMxMTAvBgNV BAMTKERDQzVDMUNGRTFDMTBGMEUzNTYzN0IxOTZCQUJGREQ2M0NDQzIzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZihVe5Ar8/3DVPMsoIhwuSb95 jcCaOmFdTs4XTNlsOjJ3wAzJXonj+SHbFHDCVVXGZZEw4i9f5RN7WuRJcJElFrIQ qx1abEQXPET6m0AOLIbuyHIMSBpmkWYbSFwp/vyRupoWj7pGotS4nGnQGkldKHyx kWhAdV7wlmKhiykXPGVgsqRop+vmZDw9UrqU4d1fWogxQfzTQPwe9T7O0Exx7rkz vyR6RJTgdNObU5kbuIaapfzDxE0l/iF6YuB9X52Mq8Vo00qcpLqIhs+xpNPsQMLR 4c42tHQyAYdt/JXT1E5EA3DqbSDxxy8j1X2OlZlcZ3Vhvp0KlFbLDnub/j8vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3MXBz+HBDw41Y3sZa6v91jzMI0QwHwYDVR0j BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3 QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2 RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRkR8xrtnnbc 64zjnVf7AaxSmQs3kEBUGVnCj++f8jbJwNLMT6vlu1T0zYdsg+JdyRT6octMuzdX +PTsQXlJxGyIrhD3yOtMq6eI6OrQnJ7Ub3FiYKbev/gHq2PLYsG/Cmkl3lO/+r9B Jil+v18fjhL3pxaVgqKSVeM30R6kLUL2/hnBj0RyfONxN7FGO3CCntPpb7HuV8Rq UKWSdU8CC56D55rOxvWQrhzZzbsrnPm7qPPKKtYEbNVlKjwCIlKn5BwYkbjn8jyW 96Nt+xGCsZS9lxBw+FYkwrbzN4/bh9i4VVJfmOqyDtTtxtGG7yoS+NBAsbktgWbX DKo563ARow== -----END CERTIFICATE-----Generated at Mon Jan 26 14:45:49 2026 by rpki-client