This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft File: 2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft (raw, json) Hash identifier: bY+2TKDOI18POSeXw0zwh65+/uVErh1MknJdD4rrQ6o= Subject key identifier: 9A:FA:8D:21:0B:1E:FA:FB:7D:F5:D6:94:2C:4B:82:BD:24:99:B3:A0 Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF Certificate issuer: /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF Certificate serial: 1014823589A7B9B1F5A6C150D7F302B8D6946812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft Manifest number: 2B Signing time: Sat 24 Jan 2026 12:14:43 +0000 Manifest this update: Sat 24 Jan 2026 12:09:43 +0000 Manifest next update: Sun 25 Jan 2026 14:34:43 +0000 Files and hashes: 1: 3130332e3234352e32332e302f32342d3234203d3e203234343038.roa (hash: XIUkyhcqBCoi5zRucbNJwV7VNJYGwdhJAml+MvdzFng=) 2: 2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl (hash: 9jNRVQvAREJtGE8uI3RrGsWCZ9RYSfjta6TnZgT0WAU=) 3: 3130332e3234352e32332e302f32342d3235203d3e203234343039.roa (hash: 469hlmLm2KpSSrorT8OTR9mMQNHKpexMeaWyKztbia4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:14:82:35:89:a7:b9:b1:f5:a6:c1:50:d7:f3:02:b8:d6:94:68:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF Validity Not Before: Jan 24 12:09:43 2026 GMT Not After : Jan 25 14:34:43 2026 GMT Subject: CN=9AFA8D210B1EFAFB7DF5D6942C4B82BD2499B3A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:a9:64:74:d2:09:40:b5:37:0a:bc:6d:61: 7f:b9:7c:c3:a7:c2:87:ab:04:4e:6c:72:b1:b9:7e: 9e:ad:a0:10:ae:84:ea:58:8e:1a:a0:2e:0e:09:60: f6:06:8b:42:ea:d3:05:93:16:e9:55:81:8b:c5:ba: c8:73:ee:a8:b1:de:91:b7:95:dd:c3:8f:0f:19:0b: 58:17:95:6e:70:db:9c:a5:bb:fc:f4:8e:cf:b1:df: 2b:5c:00:c4:66:08:4a:37:aa:e4:52:f2:77:0b:55: 80:8f:84:43:e9:29:9f:54:a4:e1:36:01:94:a6:49: 1c:8d:06:de:e6:17:04:df:10:0e:23:47:19:a7:2e: 22:93:bc:62:b8:5b:4e:a2:0a:3b:20:ef:fd:2d:f4: 42:fb:1c:47:42:61:c0:df:bf:09:82:65:c2:c8:cf: 55:a2:b5:c7:ef:0b:3b:dc:41:b6:04:5e:7d:3f:17: 8f:17:22:65:b7:91:23:e1:41:22:03:9a:2c:ca:56: 5e:e1:55:e4:6f:98:22:fc:f3:a2:7f:e3:be:8d:a1: 5e:cd:70:b7:1a:5b:ca:4a:54:46:48:b4:61:18:b5: 1b:46:8e:d7:d3:66:6c:a2:cf:a1:8d:33:80:2c:3a: 13:5f:79:2c:d2:fb:10:f3:62:ab:72:43:46:c9:06: 47:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FA:8D:21:0B:1E:FA:FB:7D:F5:D6:94:2C:4B:82:BD:24:99:B3:A0 X509v3 Authority Key Identifier: keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:fa:d1:d6:4f:5e:18:eb:57:f1:39:6a:d2:8c:b1:ac:cb:af: 96:c1:1d:6a:86:c4:f5:25:76:27:e5:16:33:58:2d:d4:71:de: d8:26:a4:5c:08:3f:0c:39:59:dd:c9:cd:8a:ce:c7:43:81:d5: 23:58:28:8d:d2:d3:5d:1f:65:7b:6f:12:76:92:82:e5:eb:cf: e8:1a:20:2b:03:8f:51:37:45:1d:9d:65:85:81:7f:fd:79:fa: 99:ce:fd:80:17:d3:4e:1b:8f:b6:d7:23:f4:a3:f4:15:ee:e5: cb:7f:6a:be:78:a1:43:8b:66:ae:85:f8:de:d5:8a:28:58:8a: af:61:e0:56:84:b5:f8:e6:a5:27:51:94:d1:91:15:7b:d5:22: f7:98:55:d5:db:2f:7b:4b:d4:fc:c6:14:8b:59:ca:4e:ef:c5: ed:04:2f:d2:e9:f4:d7:aa:cf:21:72:3d:01:65:fc:a5:48:59: a8:0b:85:ad:bf:c2:da:6c:47:ff:a5:5a:27:08:d8:13:f6:2c: 03:6d:9f:3f:41:fb:af:ce:01:40:37:03:94:a8:3b:05:53:16: 58:59:2c:9e:b9:8d:8c:ea:ee:39:8c:2e:c7:13:b6:eb:e8:a9: 74:45:3d:85:16:d7:fd:db:96:51:3a:36:b5:7b:b2:dc:45:62: 5c:f4:26:3f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEBSCNYmnubH1psFQ1/MCuNaUaBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxOEM0MjUwMDAwMTEwLwYDVQQFEygyRUU0N0UzQzgx ODc0QTAxODNBOERBRjQyREVEOUFEOTk0QzQ3N0NGMB4XDTI2MDEyNDEyMDk0M1oX DTI2MDEyNTE0MzQ0M1owMzExMC8GA1UEAxMoOUFGQThEMjEwQjFFRkFGQjdERjVE Njk0MkM0QjgyQkQyNDk5QjNBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIp5qWR00glAtTcKvG1hf7l8w6fCh6sETmxysbl+nq2gEK6E6liOGqAuDglg 9gaLQurTBZMW6VWBi8W6yHPuqLHekbeV3cOPDxkLWBeVbnDbnKW7/PSOz7HfK1wA xGYISjeq5FLydwtVgI+EQ+kpn1Sk4TYBlKZJHI0G3uYXBN8QDiNHGacuIpO8Yrhb TqIKOyDv/S30QvscR0JhwN+/CYJlwsjPVaK1x+8LO9xBtgRefT8XjxciZbeRI+FB IgOaLMpWXuFV5G+YIvzzon/jvo2hXs1wtxpbykpURki0YRi1G0aO19NmbKLPoY0z gCw6E195LNL7EPNiq3JDRskGRxUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSa+o0h Cx76+3311pQsS4K9JJmzoDAfBgNVHSMEGDAWgBQu5H48gYdKAYOo2vQt7ZrZlMR3 zzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1Mzg1NzE4NzY0OTI5MDI1LzAvMkVFNDdF M0M4MTg3NEEwMTgzQThEQUY0MkRFRDlBRDk5NEM0NzdDRi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvTHVSLVBJR0hT Z0dEcU5yMExlMmEyWlRFZDg4LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM4NTcxODc2 NDkyOTAyNS8wLzJFRTQ3RTNDODE4NzRBMDE4M0E4REFGNDJERUQ5QUQ5OTRDNDc3 Q0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAX+tHWT14Y61fxOWrSjLGsy6+WwR1qhsT1JXYn5RYzWC3U cd7YJqRcCD8MOVndyc2KzsdDgdUjWCiN0tNdH2V7bxJ2koLl68/oGiArA49RN0Ud nWWFgX/9efqZzv2AF9NOG4+21yP0o/QV7uXLf2q+eKFDi2auhfje1YooWIqvYeBW hLX45qUnUZTRkRV71SL3mFXV2y97S9T8xhSLWcpO78XtBC/S6fTXqs8hcj0BZfyl SFmoC4Wtv8LabEf/pVonCNgT9iwDbZ8/QfuvzgFANwOUqDsFUxZYWSyeuY2M6u45 jC7HE7br6Kl0RT2FFtf925ZROja1e7LcRWJc9CY/ -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:29 2026 by rpki-client