This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: mGFzlbc3fCrmnJb6gvWAL40hrpzC9cHxJ59/jo/3gmM= Subject key identifier: C0:6F:01:2C:9F:B9:9C:8C:C7:32:55:5F:CA:FB:6A:02:38:79:4D:31 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 4498BC0169DCD61F3BEAEC9448DCC18831B3BF17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 13:55:57 +0000 Manifest this update: Sat 24 Jan 2026 13:50:57 +0000 Manifest next update: Sun 25 Jan 2026 14:56:57 +0000 Files and hashes: 1: 3130332e3233382e34382e302f32322d3234203d3e203137343239.roa (hash: rttDeHAFBcC/FYTbFPRn/BAotSmLlX3DE6v6zoY9hhg=) 2: 34332e3234372e3233362e302f32322d3234203d3e203137343239.roa (hash: OkspnUQvKjtS72CeXZeKKyXqfiA+KxT6HHhEv5NC4NQ=) 3: 323430333a343330303a3a2f33322d3438203d3e203137343239.roa (hash: BxtN59vqgBZxPoERk/JYSA/midP2NXeRF93I1z+oqtg=) 4: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: t32RKJwcb7OGoCeHfnoCKkfx8P53+qhInEvDN8ZBG88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:98:bc:01:69:dc:d6:1f:3b:ea:ec:94:48:dc:c1:88:31:b3:bf:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jan 24 13:50:57 2026 GMT Not After : Jan 25 14:56:57 2026 GMT Subject: CN=C06F012C9FB99C8CC732555FCAFB6A0238794D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:7e:1d:23:68:99:c2:27:6e:48:a3:4e:78: 6f:11:22:10:4d:80:f0:63:83:8c:74:65:92:e5:e0: 0f:e0:d0:8f:85:ee:14:5a:8a:24:b2:cf:e4:d9:5f: f2:e5:d3:da:7a:57:61:55:4f:c7:f4:00:a1:8e:5c: e0:a8:72:95:e0:df:3f:50:58:7a:00:97:4e:87:54: df:9d:ba:d8:24:fd:00:6e:4b:7a:93:e6:9c:a5:71: 7f:b5:04:fc:af:ba:22:23:6b:32:55:1d:8e:90:5b: 9d:f4:0b:d7:cb:27:16:94:6b:c4:c6:81:0f:e8:94: 9c:90:05:5a:4d:54:e5:82:0d:f0:be:ea:dd:36:0a: e4:95:b8:dd:34:6c:57:df:33:37:91:53:df:62:cd: 55:42:f9:82:f0:eb:8c:d0:89:b5:9b:ba:ee:c0:0d: a1:ff:fe:76:8e:e5:ea:16:f2:e8:55:17:88:9e:62: 1b:56:66:2f:97:95:e4:67:8d:54:e2:7a:bd:b8:db: 1e:82:40:78:37:c5:16:95:a8:69:24:51:ab:9e:3f: 8c:7f:0d:b4:52:66:8f:58:40:ce:fe:67:90:3b:30: 5b:1e:c0:9f:fb:6f:80:35:03:ea:fa:c4:d5:1d:17: c4:ad:f0:ab:da:0f:86:8a:6f:40:fa:38:c9:70:9c: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6F:01:2C:9F:B9:9C:8C:C7:32:55:5F:CA:FB:6A:02:38:79:4D:31 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:25:e2:a7:b7:53:87:0a:2a:e1:df:ba:c5:c3:5a:98:86:d2: 64:57:0c:41:8d:64:7c:06:63:41:9f:47:f2:0e:03:98:76:9b: 62:e7:c6:28:2b:63:d3:56:f4:d7:11:72:37:da:c1:d7:2a:e6: d7:ce:d2:9b:d7:71:a5:90:b0:48:1d:0c:63:ec:bf:43:ae:11: 88:64:59:6b:8d:d0:81:b4:98:5a:4a:45:a2:25:bf:11:e0:96: 3c:ef:0f:01:d3:2b:6f:00:4e:a4:28:4f:8f:92:5d:69:ae:d7: f0:cb:17:92:a6:de:45:39:3f:f0:b9:dc:0e:a8:8b:91:ae:6c: 02:75:b6:4f:85:ed:13:bc:cc:7c:9d:e9:27:18:be:d9:b5:78: f2:c9:22:1f:1b:ab:92:a5:a3:e5:11:34:10:52:d0:27:c7:bc: a0:b6:bf:bb:36:f1:3c:4c:5d:d1:6e:a6:ce:2f:68:ec:13:25: 60:d1:0d:12:54:7b:3e:8f:35:2d:0f:79:2c:f8:79:5d:68:53: 13:7a:09:39:85:98:dc:9e:64:d1:e1:2a:1a:e5:09:9b:c3:ec: ce:c3:a8:ce:bc:ec:2e:1f:a7:ca:b2:82:7e:97:55:c0:4d:f4: cd:e7:04:12:06:b1:25:40:ec:75:c2:9f:29:a6:e0:bd:a7:b4: d2:a7:b9:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURJi8AWnc1h876uyUSNzBiDGzvxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjAxMjQxMzUwNTdaFw0yNjAxMjUxNDU2NTdaMDMxMTAvBgNV BAMTKEMwNkYwMTJDOUZCOTlDOENDNzMyNTU1RkNBRkI2QTAyMzg3OTREMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMl34dI2iZwiduSKNOeG8RIhBN gPBjg4x0ZZLl4A/g0I+F7hRaiiSyz+TZX/Ll09p6V2FVT8f0AKGOXOCocpXg3z9Q WHoAl06HVN+dutgk/QBuS3qT5pylcX+1BPyvuiIjazJVHY6QW530C9fLJxaUa8TG gQ/olJyQBVpNVOWCDfC+6t02CuSVuN00bFffMzeRU99izVVC+YLw64zQibWbuu7A DaH//naO5eoW8uhVF4ieYhtWZi+XleRnjVTier242x6CQHg3xRaVqGkkUaueP4x/ DbRSZo9YQM7+Z5A7MFsewJ/7b4A1A+r6xNUdF8St8KvaD4aKb0D6OMlwnOL5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwG8BLJ+5nIzHMlVfyvtqAjh5TTEwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyXip7dThwoq 4d+6xcNamIbSZFcMQY1kfAZjQZ9H8g4DmHabYufGKCtj01b01xFyN9rB1yrm187S m9dxpZCwSB0MY+y/Q64RiGRZa43QgbSYWkpFoiW/EeCWPO8PAdMrbwBOpChPj5Jd aa7X8MsXkqbeRTk/8LncDqiLka5sAnW2T4XtE7zMfJ3pJxi+2bV48skiHxurkqWj 5RE0EFLQJ8e8oLa/uzbxPExd0W6mzi9o7BMlYNENElR7Po81LQ95LPh5XWhTE3oJ OYWY3J5k0eEqGuUJm8PszsOozrzsLh+nyrKCfpdVwE30zecEEgaxJUDsdcKfKabg vae00qe5GQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:48 2026 by rpki-client