This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json) Hash identifier: zv8CHaCap7E1HL6VIWxOlTaUwT2BtY+UTJkBpeeXvW4= Subject key identifier: 04:B3:80:55:F4:3B:A5:AD:12:97:20:B3:16:9B:5E:5E:F5:AD:49:BF Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 1868A29763811AD4B862B2E3D3066F389A4B8F14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft Manifest number: 0B Signing time: Mon 26 Jan 2026 18:11:02 +0000 Manifest this update: Mon 26 Jan 2026 18:06:02 +0000 Manifest next update: Tue 27 Jan 2026 18:21:02 +0000 Files and hashes: 1: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=) 2: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=) 3: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: GtqLGY6Fsz/Ut34CpKVuJdQ3d/XaU9SJZ/UagWindEk=) 4: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:68:a2:97:63:81:1a:d4:b8:62:b2:e3:d3:06:6f:38:9a:4b:8f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Jan 26 18:06:02 2026 GMT Not After : Jan 27 18:21:02 2026 GMT Subject: CN=04B38055F43BA5AD129720B3169B5E5EF5AD49BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:fb:f4:16:5e:69:73:29:47:12:be:7b:70: 94:06:41:c9:bd:53:ab:09:2b:f4:bb:b9:1f:45:35: a7:a9:19:be:f5:aa:f9:96:2d:c8:7b:03:b6:8b:be: a9:13:d3:f6:4b:f5:6a:ce:1a:de:15:a5:8a:83:34: 4d:09:49:8a:e5:e2:eb:1f:cd:1d:07:0e:32:0b:5c: de:18:b8:8b:41:28:eb:5f:bf:a5:05:78:12:d6:73: 5e:c7:c6:9e:34:39:04:cc:da:e1:75:9d:21:7b:52: 4a:84:a6:13:ef:3d:b6:14:06:93:78:27:4c:8e:0c: c5:4c:53:aa:72:55:a1:7c:fb:7f:b1:49:f4:a6:87: 85:e5:64:1a:28:96:28:e8:0f:70:be:ac:f5:03:86: 4d:c4:9e:cc:09:36:0e:f6:6b:d5:d7:89:b0:7a:60: c9:f5:e6:84:57:76:e3:0f:71:c6:13:24:48:1a:af: 33:77:31:c5:8a:37:fa:41:d8:56:b3:de:53:4f:51: fc:18:a6:09:13:cc:b7:62:e2:34:4b:0e:14:2a:cd: ac:c5:65:39:dc:fb:28:48:e5:7c:ee:9b:5a:3c:70: 84:19:9e:0d:1a:08:dc:c4:19:b5:ed:1b:5f:3d:12: 37:1e:2e:82:6e:dc:9f:87:ef:13:17:1c:94:20:3b: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B3:80:55:F4:3B:A5:AD:12:97:20:B3:16:9B:5E:5E:F5:AD:49:BF X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:04:ad:5c:4e:83:dc:33:bd:24:7a:a0:eb:14:02:26:b4:e9: 51:28:ed:96:7f:69:ee:01:fe:35:1c:09:f4:68:31:3f:94:40: d9:bd:d9:0d:ea:69:da:40:65:13:15:c7:d1:23:cc:5a:7f:cd: 39:98:46:25:80:8d:7f:de:80:17:0a:5b:e1:ca:14:1b:92:60: ae:75:65:5d:e4:89:1e:39:bd:06:6d:82:69:ba:d6:0d:c4:dc: 7e:40:0f:ae:f8:aa:27:6a:e5:7e:9a:55:ff:79:7e:5b:46:10: e5:16:58:69:a8:b2:62:0d:d7:26:8e:1b:e8:c1:6c:34:a3:e6: c5:89:80:29:9c:a3:21:46:92:12:79:a9:ef:b0:fe:e5:1f:19: f5:01:70:fd:86:3a:43:30:df:9b:bb:00:97:47:f7:f0:11:61: 0e:cc:22:b1:1f:d6:1f:6d:9e:85:88:67:70:f3:e3:ae:09:33: 07:3e:40:17:97:46:75:e3:82:35:b2:f9:3b:44:50:a6:17:a8: 33:8f:88:fb:ff:e1:cd:2e:ee:bf:50:a5:7b:fc:cd:ca:0c:2c: d3:d6:26:48:58:f7:5b:6c:6c:08:97:60:39:88:a1:35:4b:44: a1:9b:8f:a7:b0:cd:6f:6f:a1:66:c8:54:a0:7c:dd:c9:ca:c5: ad:2d:6f:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGGiil2OBGtS4YrLj0wZvOJpLjxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjAxMjYxODA2MDJaFw0yNjAxMjcxODIxMDJaMDMxMTAvBgNV BAMTKDA0QjM4MDU1RjQzQkE1QUQxMjk3MjBCMzE2OUI1RTVFRjVBRDQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnPv0Fl5pcylHEr57cJQGQcm9 U6sJK/S7uR9FNaepGb71qvmWLch7A7aLvqkT0/ZL9WrOGt4VpYqDNE0JSYrl4usf zR0HDjILXN4YuItBKOtfv6UFeBLWc17Hxp40OQTM2uF1nSF7UkqEphPvPbYUBpN4 J0yODMVMU6pyVaF8+3+xSfSmh4XlZBoolijoD3C+rPUDhk3EnswJNg72a9XXibB6 YMn15oRXduMPccYTJEgarzN3McWKN/pB2Faz3lNPUfwYpgkTzLdi4jRLDhQqzazF ZTnc+yhI5Xzum1o8cIQZng0aCNzEGbXtG189EjceLoJu3J+H7xMXHJQgO0WLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBLOAVfQ7pa0SlyCzFpteXvWtSb8wHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMS9BNUIyQjE0RDk3NTEz QjZDMEM4MkIxRTU0MDcwM0VCOTEyREZEMjI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAStXE6D3DO9 JHqg6xQCJrTpUSjtln9p7gH+NRwJ9GgxP5RA2b3ZDepp2kBlExXH0SPMWn/NOZhG JYCNf96AFwpb4coUG5JgrnVlXeSJHjm9Bm2CabrWDcTcfkAPrviqJ2rlfppV/3l+ W0YQ5RZYaaiyYg3XJo4b6MFsNKPmxYmAKZyjIUaSEnmp77D+5R8Z9QFw/YY6QzDf m7sAl0f38BFhDswisR/WH22ehYhncPPjrgkzBz5AF5dGdeOCNbL5O0RQpheoM4+I +//hzS7uv1Cle/zNygws09YmSFj3W2xsCJdgOYihNUtEoZuPp7DNb2+hZshUoHzd ycrFrS1vvg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:37 2026 by rpki-client