This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: 9x1+ZUvnsjJjGs56MzoEuLRt7ZWQJXlAVWl7cJVKTWU= Subject key identifier: A1:02:69:54:0E:D7:9F:E8:40:1D:8D:00:90:F0:5D:B3:3F:95:58:A2 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 685C8D5CB4D5C337207BA59B566E698F9E99576E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: 09 Signing time: Sat 24 Jan 2026 18:45:57 +0000 Manifest this update: Sat 24 Jan 2026 18:40:57 +0000 Manifest next update: Sun 25 Jan 2026 19:40:57 +0000 Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: raByv4RVUMyLFgGoNhXy72ycGsd1cZiNMcX33++NPmI=) 2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5c:8d:5c:b4:d5:c3:37:20:7b:a5:9b:56:6e:69:8f:9e:99:57:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Jan 24 18:40:57 2026 GMT Not After : Jan 25 19:40:57 2026 GMT Subject: CN=A10269540ED79FE8401D8D0090F05DB33F9558A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:8c:14:54:28:aa:f1:ea:45:0e:02:ed:05: 13:7d:2b:8a:9a:1a:21:bf:8f:ef:32:f9:e6:0d:68: e1:f2:6e:4e:50:db:4d:8a:b0:a4:c6:bb:fe:96:c9: 72:fd:89:72:95:35:4e:46:f5:09:61:57:28:6f:11: 1a:b9:4d:5d:25:3d:59:b2:a0:f4:1d:67:2b:4e:90: a4:af:08:fe:34:b9:9e:c0:2b:26:85:a1:86:ff:ca: bc:e1:4b:4a:de:c7:34:09:ff:91:dc:e2:f0:4a:3f: 0d:ab:2b:7d:5f:13:b2:ab:a0:3c:39:d0:a1:65:75: 30:b1:4b:83:81:c2:3e:87:e8:62:5c:a2:ac:a8:5e: 8f:41:48:5c:7c:83:ce:4a:b0:60:52:db:a8:a0:75: e1:fc:10:ca:8b:93:29:53:cb:a3:29:2c:57:69:4e: e1:c9:15:be:f1:f8:2d:d8:05:e7:99:e8:f9:26:af: 71:94:8f:a3:0a:0c:37:e6:21:ba:5d:f6:ab:12:bb: 10:b9:82:c2:cf:cd:86:9a:a4:f3:47:44:fc:e6:7c: cd:b2:0b:63:33:d6:c9:ce:ce:5d:33:16:45:30:62: ee:21:47:0c:c7:dc:e8:dd:dd:2f:66:5c:8d:a9:fc: ea:e4:0b:96:08:89:49:32:34:b5:29:58:b1:87:df: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:69:54:0E:D7:9F:E8:40:1D:8D:00:90:F0:5D:B3:3F:95:58:A2 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c7:ca:06:c7:b6:fe:cf:d9:9a:05:8e:55:df:58:9a:0f:e2: a0:2e:81:c1:d3:21:df:c2:ab:34:9d:d7:82:7c:b3:1c:25:fd: 9f:b2:d2:0f:ef:e0:41:df:5a:10:fa:c0:50:63:66:b6:e3:8d: 10:b7:99:b3:a1:71:7f:d6:e6:cd:f0:b4:48:e6:bf:92:6b:f5: ab:d5:e8:84:2b:72:5b:25:58:ac:ae:25:c6:f8:10:8a:a4:c6: 2e:28:94:42:62:e3:f7:7c:8f:4c:30:27:d6:2a:16:91:3b:45: c4:6e:ed:ee:ed:16:c3:21:66:b2:ce:23:1c:d2:f9:f8:f0:9c: ed:e1:91:c3:f5:36:21:c5:b9:4d:50:5d:a1:76:44:f2:33:c2: d8:c0:d6:e9:6b:26:e2:48:a5:e7:24:7d:88:8a:b3:53:4c:75: 14:db:e6:f1:b5:55:c6:41:aa:17:72:3c:4c:04:4d:e8:2b:0f: b3:28:21:14:85:89:f6:1e:d5:c6:11:a6:4d:47:7a:a7:92:77: 8a:d9:ee:24:ba:aa:96:07:83:8f:7f:69:0d:a2:cb:ca:8d:bf: 0a:20:63:31:2a:b1:52:2b:c1:73:9c:4c:f0:9d:67:73:40:6e: f8:46:b6:8f:3a:3d:93:3e:37:67:3a:1c:aa:7e:c3:3d:4a:65: a2:75:1d:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaFyNXLTVwzcge6WbVm5pj56ZV24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjAxMjQxODQwNTdaFw0yNjAxMjUxOTQwNTdaMDMxMTAvBgNV BAMTKEExMDI2OTU0MEVENzlGRTg0MDFEOEQwMDkwRjA1REIzM0Y5NTU4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6owUVCiq8epFDgLtBRN9K4qa GiG/j+8y+eYNaOHybk5Q202KsKTGu/6WyXL9iXKVNU5G9QlhVyhvERq5TV0lPVmy oPQdZytOkKSvCP40uZ7AKyaFoYb/yrzhS0rexzQJ/5Hc4vBKPw2rK31fE7KroDw5 0KFldTCxS4OBwj6H6GJcoqyoXo9BSFx8g85KsGBS26igdeH8EMqLkylTy6MpLFdp TuHJFb7x+C3YBeeZ6Pkmr3GUj6MKDDfmIbpd9qsSuxC5gsLPzYaapPNHRPzmfM2y C2Mz1snOzl0zFkUwYu4hRwzH3Ojd3S9mXI2p/OrkC5YIiUkyNLUpWLGH34aTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoQJpVA7Xn+hAHY0AkPBdsz+VWKIwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMfKBse2/s/Z mgWOVd9Ymg/ioC6BwdMh38KrNJ3XgnyzHCX9n7LSD+/gQd9aEPrAUGNmtuONELeZ s6Fxf9bmzfC0SOa/kmv1q9XohCtyWyVYrK4lxvgQiqTGLiiUQmLj93yPTDAn1ioW kTtFxG7t7u0WwyFmss4jHNL5+PCc7eGRw/U2IcW5TVBdoXZE8jPC2MDW6Wsm4kil 5yR9iIqzU0x1FNvm8bVVxkGqF3I8TARN6CsPsyghFIWJ9h7VxhGmTUd6p5J3itnu JLqqlgeDj39pDaLLyo2/CiBjMSqxUivBc5xM8J1nc0Bu+Ea2jzo9kz43Zzocqn7D PUplonUd7g== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:45 2026 by rpki-client