This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: QvwptdMvFTjl15FLIfehZJiV6T0hU4ZV5EZY1MebKaE= Subject key identifier: 2D:E1:34:F6:F9:80:34:FB:C0:CD:51:82:E2:3D:D1:6B:FA:54:5F:F9 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 27DEE30DE7B1BF1C539E2F667CC485E3043B4C5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 07:16:02 +0000 Manifest this update: Mon 26 Jan 2026 07:11:02 +0000 Manifest next update: Tue 27 Jan 2026 10:09:02 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 2: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: FiN5TBn/s1W/cfmDGhv3+pWqtN+2Ef/cir7AM5isdCA=) 3: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 4: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 5: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 6: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 7: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:de:e3:0d:e7:b1:bf:1c:53:9e:2f:66:7c:c4:85:e3:04:3b:4c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jan 26 07:11:02 2026 GMT Not After : Jan 27 10:09:02 2026 GMT Subject: CN=2DE134F6F98034FBC0CD5182E23DD16BFA545FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:06:72:98:5d:9d:34:2a:3c:78:21:99:cf: 6f:c5:ba:1f:a4:8c:fe:c6:61:bc:f7:fd:39:4c:0b: e5:38:bd:e1:b1:bd:72:c3:33:13:1f:0b:41:e7:14: af:82:9b:e3:29:ca:0d:2f:4f:60:35:3a:60:5c:e7: e7:9c:a9:8a:83:cc:37:a7:6e:37:92:84:83:7b:4c: b5:4c:63:11:c7:dd:c2:0a:b7:0f:86:fe:30:db:d5: 02:34:bc:22:29:7b:1f:9b:7a:84:a2:75:14:1f:a1: 78:a7:ea:0a:73:90:95:fe:f8:0f:c6:9c:b2:40:9c: 5c:e5:11:11:55:dd:55:6b:97:dd:28:3b:e8:34:b3: 37:d3:ac:97:ce:7a:2b:ee:0c:5d:9f:ac:7c:10:76: 1b:93:5c:9e:a4:63:d0:6f:b2:4d:39:57:e6:e5:d1: 54:d5:ce:e3:91:8b:4b:6f:b7:13:57:ca:f4:10:a1: 31:e6:95:75:fb:4f:38:b7:b1:41:2a:5d:c7:70:e3: 10:1a:1d:3b:bb:a7:8d:9d:79:86:8e:03:cb:06:24: 4f:d8:4e:ec:30:c1:b8:78:56:e4:de:14:64:9e:18: ac:97:16:7d:12:f1:c1:06:c9:a7:51:99:d5:6b:fe: b8:db:ac:93:73:1c:cb:f7:41:05:8c:46:38:1c:1b: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E1:34:F6:F9:80:34:FB:C0:CD:51:82:E2:3D:D1:6B:FA:54:5F:F9 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:de:ba:82:73:e5:e4:6a:0d:1d:71:85:12:12:0b:5a:4b:13: 2b:8c:d3:3d:df:ba:b4:5d:f7:a7:84:a5:6e:f1:90:c5:21:eb: 7b:75:cc:6e:04:52:85:aa:81:7c:83:8e:bf:c7:4e:d8:2e:58: 52:83:f3:87:99:2f:a5:fc:c1:35:bd:38:b8:90:b2:cc:37:cc: 49:01:82:06:e7:ab:b6:46:7d:b7:01:1e:4e:12:33:90:fd:d8: 5c:8b:a0:5f:95:cb:d1:9d:45:f2:d7:5f:65:29:a4:a4:b6:0b: 54:ea:e0:63:90:34:26:33:5e:8d:2f:08:1c:f9:3b:ec:f1:f2: 46:d6:1a:4c:be:17:29:a8:1a:d0:c0:13:5d:2d:aa:82:d8:63: 23:6e:27:8e:ea:57:03:47:9d:3b:e9:7f:6d:b8:88:4b:6d:b9: 08:f0:07:aa:35:0c:9a:c4:97:b2:ac:e3:08:13:d7:eb:00:4c: b7:66:9a:d0:39:bd:68:40:bd:36:16:61:4f:bb:5b:1c:3e:50: fc:90:53:9b:41:1a:38:06:a0:33:9b:bb:0f:83:ad:27:b6:47: 6b:35:b5:dc:0d:e0:e5:5f:d8:ee:0a:bc:02:45:31:85:fb:63: 29:a4:ab:46:11:92:41:2a:09:30:9c:d7:9b:66:0b:99:c3:04: 26:16:fa:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ97jDeexvxxTni9mfMSF4wQ7TF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAxMjYwNzExMDJaFw0yNjAxMjcxMDA5MDJaMDMxMTAvBgNV BAMTKDJERTEzNEY2Rjk4MDM0RkJDMENENTE4MkUyM0REMTZCRkE1NDVGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6wZymF2dNCo8eCGZz2/Fuh+k jP7GYbz3/TlMC+U4veGxvXLDMxMfC0HnFK+Cm+Mpyg0vT2A1OmBc5+ecqYqDzDen bjeShIN7TLVMYxHH3cIKtw+G/jDb1QI0vCIpex+beoSidRQfoXin6gpzkJX++A/G nLJAnFzlERFV3VVrl90oO+g0szfTrJfOeivuDF2frHwQdhuTXJ6kY9Bvsk05V+bl 0VTVzuORi0tvtxNXyvQQoTHmlXX7Tzi3sUEqXcdw4xAaHTu7p42deYaOA8sGJE/Y Tuwwwbh4VuTeFGSeGKyXFn0S8cEGyadRmdVr/rjbrJNzHMv3QQWMRjgcG+ZxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULeE09vmANPvAzVGC4j3Ra/pUX/kwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApd66gnPl5GoN HXGFEhILWksTK4zTPd+6tF33p4SlbvGQxSHre3XMbgRShaqBfIOOv8dO2C5YUoPz h5kvpfzBNb04uJCyzDfMSQGCBuertkZ9twEeThIzkP3YXIugX5XL0Z1F8tdfZSmk pLYLVOrgY5A0JjNejS8IHPk77PHyRtYaTL4XKaga0MATXS2qgthjI24njupXA0ed O+l/bbiIS225CPAHqjUMmsSXsqzjCBPX6wBMt2aa0Dm9aEC9NhZhT7tbHD5Q/JBT m0EaOAagM5u7D4OtJ7ZHazW13A3g5V/Y7gq8AkUxhftjKaSrRhGSQSoJMJzXm2YL mcMEJhb6Dg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:24:23 2026 by rpki-client