This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: hK1H63ydzbkkyhA232xuO4eeE06bdqEb5KUw6LWeKNc= Subject key identifier: AF:DB:8C:CC:DE:C6:F7:8C:7E:90:B9:68:B7:EA:10:6C:E8:62:C8:3E Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 7BA1BFD5B97F93CBB8D6DA9DDA08EEE8DEBAB06F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 0A Signing time: Sun 25 Jan 2026 23:46:02 +0000 Manifest this update: Sun 25 Jan 2026 23:41:02 +0000 Manifest next update: Tue 27 Jan 2026 03:27:02 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: LVXT2uU2NT+DlW53CYU5iPDZ/8hVZdgDZevJbHuRIes=) 2: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a1:bf:d5:b9:7f:93:cb:b8:d6:da:9d:da:08:ee:e8:de:ba:b0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Jan 25 23:41:02 2026 GMT Not After : Jan 27 03:27:02 2026 GMT Subject: CN=AFDB8CCCDEC6F78C7E90B968B7EA106CE862C83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:c3:bd:5f:38:11:bf:55:cb:a9:b9:c8:f3: 16:b7:ff:ee:d9:fd:5e:41:dd:ff:0b:1d:6c:1d:9a: 3e:ab:ab:0b:d3:40:d8:fe:72:64:d6:89:b5:61:26: 4a:74:8e:13:11:08:8f:54:b4:39:1b:80:87:68:f6: 6d:47:a9:7f:dc:01:24:8d:dd:2f:ba:95:d4:84:d5: 5e:35:04:62:b7:fb:a2:35:27:4c:7b:b9:75:75:38: f9:a2:29:10:83:c5:bd:c0:a9:fa:f8:9d:51:95:f7: b9:d8:de:2b:37:ee:e3:4a:2f:c1:b5:1f:39:16:fa: da:e4:f6:c1:7f:c7:2a:f9:df:0d:2d:76:95:b0:71: 0c:03:ca:95:28:a4:a0:59:f3:7e:a8:39:a3:a5:6a: e3:93:7c:a7:6b:00:c2:47:48:ca:f6:15:7e:bb:41: 2f:5e:30:1d:c9:bf:d5:c4:5e:7e:f4:ae:18:a8:55: 0d:5a:11:0d:d5:f2:07:70:88:4a:60:ce:1d:7a:62: c3:0f:6f:99:d6:db:b9:54:0d:60:f0:13:ea:5c:80: 66:8b:4e:2b:e4:a0:7c:bd:79:cd:23:24:3f:13:b2: 2b:6c:38:9b:4d:59:b2:84:47:2a:de:41:9d:50:ce: 27:a9:c8:81:a0:9f:d7:ef:eb:c8:6f:67:9c:49:2d: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DB:8C:CC:DE:C6:F7:8C:7E:90:B9:68:B7:EA:10:6C:E8:62:C8:3E X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1b:f6:27:e7:f7:39:91:fc:ed:90:46:e1:e8:a5:c6:a1:60: d9:ab:4d:fc:88:0f:9a:9c:fb:13:81:a8:7c:5a:69:d2:f5:c3: 9f:f9:3c:83:fe:4f:73:8d:9b:3d:45:7a:af:ca:25:59:4f:d5: 58:4d:15:7e:ab:23:ae:ab:3a:f0:d3:7f:b4:51:74:64:58:7c: a1:eb:92:b0:69:0b:f5:d4:76:f0:12:9c:ff:78:f1:4d:5c:a0: fe:69:1f:cd:2c:e0:05:09:19:73:82:1f:ad:b5:97:ac:2f:d2: e3:60:0b:7f:ff:26:ee:43:7a:a1:08:1a:a9:63:b8:af:18:3d: 05:19:af:be:98:9f:4f:fe:00:27:f9:f4:75:1d:10:26:68:0f: ce:c6:5a:ea:66:57:7b:3d:22:55:47:94:21:92:f9:9b:81:45: ed:bc:3b:e0:4a:17:77:9c:a8:5d:cc:a5:9f:93:55:7a:1d:a3: 93:4b:bd:4d:d1:e3:21:0a:f4:8d:4f:19:89:55:85:81:bd:46: bd:29:ac:10:e6:c7:b8:08:45:d5:7d:f2:19:d9:0b:97:19:ac: 2f:d5:06:2a:5e:70:49:71:e1:28:84:61:1f:f3:cd:49:45:4d: f3:55:23:03:30:ba:44:ac:05:38:36:14:2c:05:87:82:31:d6: 31:3b:50:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe6G/1bl/k8u41tqd2gju6N66sG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjAxMjUyMzQxMDJaFw0yNjAxMjcwMzI3MDJaMDMxMTAvBgNV BAMTKEFGREI4Q0NDREVDNkY3OEM3RTkwQjk2OEI3RUExMDZDRTg2MkM4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoM8O9XzgRv1XLqbnI8xa3/+7Z /V5B3f8LHWwdmj6rqwvTQNj+cmTWibVhJkp0jhMRCI9UtDkbgIdo9m1HqX/cASSN 3S+6ldSE1V41BGK3+6I1J0x7uXV1OPmiKRCDxb3Aqfr4nVGV97nY3is37uNKL8G1 HzkW+trk9sF/xyr53w0tdpWwcQwDypUopKBZ836oOaOlauOTfKdrAMJHSMr2FX67 QS9eMB3Jv9XEXn70rhioVQ1aEQ3V8gdwiEpgzh16YsMPb5nW27lUDWDwE+pcgGaL TivkoHy9ec0jJD8TsitsOJtNWbKERyreQZ1QziepyIGgn9fv68hvZ5xJLcLJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr9uMzN7G94x+kLlot+oQbOhiyD4wHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBv2J+f3OZH8 7ZBG4eilxqFg2atN/IgPmpz7E4GofFpp0vXDn/k8g/5Pc42bPUV6r8olWU/VWE0V fqsjrqs68NN/tFF0ZFh8oeuSsGkL9dR28BKc/3jxTVyg/mkfzSzgBQkZc4IfrbWX rC/S42ALf/8m7kN6oQgaqWO4rxg9BRmvvpifT/4AJ/n0dR0QJmgPzsZa6mZXez0i VUeUIZL5m4FF7bw74EoXd5yoXcyln5NVeh2jk0u9TdHjIQr0jU8ZiVWFgb1GvSms EObHuAhF1X3yGdkLlxmsL9UGKl5wSXHhKIRhH/PNSUVN81UjAzC6RKwFODYULAWH gjHWMTtQmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:21:22 2026 by rpki-client