This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft File: F329F518724FAC695E33F5C78532CBF56BF4243D.mft (raw, json) Hash identifier: j4cTKzSK8ph9tf/GhXBYJVah+XyBEa4OJfD8LWdT1OU= Subject key identifier: 3A:65:3E:D4:19:F1:69:EB:BA:C5:FF:1E:4E:EA:2E:75:2C:D1:90:74 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 2FBCE3FEA99EC9F31DF2038D5EE64237BB133B63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft Manifest number: 09 Signing time: Sat 24 Jan 2026 19:05:57 +0000 Manifest this update: Sat 24 Jan 2026 19:00:57 +0000 Manifest next update: Sun 25 Jan 2026 20:16:57 +0000 Files and hashes: 1: 35392e3130372e36342e302f31382d3234203d3e20313334373733.roa (hash: 0zY22v6zj7Va/jjar+sQq7kCtTDD22I+jvz/eJrNkW8=) 2: F329F518724FAC695E33F5C78532CBF56BF4243D.crl (hash: DcRrgDvVJjwU2juENM2BYnJF0ksv4OBxuSmeaNfcfxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bc:e3:fe:a9:9e:c9:f3:1d:f2:03:8d:5e:e6:42:37:bb:13:3b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Jan 24 19:00:57 2026 GMT Not After : Jan 25 20:16:57 2026 GMT Subject: CN=3A653ED419F169EBBAC5FF1E4EEA2E752CD19074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:7b:03:cd:73:27:00:07:80:36:6f:bd:a7: 92:24:ae:a3:d2:b0:6d:20:32:7f:39:62:30:89:90: f8:4c:6a:fc:ae:a4:82:f2:aa:90:11:24:87:89:9b: 95:d0:d9:02:0d:44:d2:e4:9f:61:19:6d:c2:f9:16: 37:28:4e:82:2c:19:4b:a6:6a:6c:92:ec:81:44:b0: c1:aa:17:28:1b:6b:9c:a0:33:69:18:1d:44:1e:7f: 3c:c2:15:36:69:11:24:20:be:3f:f1:8d:ea:11:24: f8:fa:4d:3b:f8:ad:aa:01:ec:d1:57:c2:24:d1:ed: 81:82:31:ce:5f:b5:d4:8d:c8:8f:35:d2:e1:af:d4: 95:77:8a:19:eb:8d:88:7c:f3:ed:62:93:11:4d:45: c2:d2:2f:7c:da:44:60:02:0f:06:fd:6a:34:92:26: a5:cc:50:06:90:5f:9a:f4:02:ea:3e:3a:bc:f2:b9: df:32:29:80:fd:5f:83:b6:7d:94:5f:bb:67:2a:78: 06:ff:4e:79:76:4b:0e:5e:f3:01:b1:8c:19:56:6d: d0:d4:ee:8e:d5:fb:bb:f7:5e:24:ec:ab:74:a4:f7: a1:06:f0:52:98:b1:61:e1:89:1d:1e:2c:12:8e:bc: 18:cb:70:ec:69:0b:ae:14:27:18:14:19:43:5c:82: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:65:3E:D4:19:F1:69:EB:BA:C5:FF:1E:4E:EA:2E:75:2C:D1:90:74 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6e:01:8e:1b:b5:ef:10:20:c3:ff:b9:d5:bd:89:4a:73:b9: b6:3f:46:2b:40:dd:e3:32:38:7b:85:6e:0c:41:f2:41:92:ef: 71:be:f5:a8:a0:8c:e6:95:a1:70:9c:b9:c2:10:a2:37:18:4b: f5:86:9a:c5:a5:54:e0:15:04:87:b3:49:a7:c5:6a:c5:8d:b5: 44:91:74:13:c0:35:57:a3:76:38:42:e5:25:f6:9e:7b:3b:b0: e7:06:93:f5:c3:16:75:30:b2:50:eb:b4:fb:d2:3b:0d:d4:06: 96:e5:43:bc:60:06:84:84:35:01:39:8d:b3:cc:54:49:25:11: f1:38:fb:02:58:a8:fe:ba:08:10:b2:04:84:20:51:68:ae:71: 41:32:19:a3:4d:24:60:0b:47:3b:ea:a2:cb:18:1e:cc:29:ec: 55:32:15:b2:d2:d5:b3:5e:53:a8:73:2d:5b:2a:7f:0f:1d:63: a2:69:62:3f:8a:fb:49:40:db:05:47:ac:5c:9d:f5:1a:94:26: 5a:e2:7f:17:a4:e5:02:99:73:6d:d8:89:74:c3:4c:fa:96:53: cf:56:ed:3c:5b:10:e5:b2:50:ee:44:2b:d6:ad:50:f7:20:b2: 3a:b4:9a:06:c6:ff:ae:75:68:51:94:7f:30:d2:3d:04:5b:a5: 85:f5:8a:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL7zj/qmeyfMd8gONXuZCN7sTO2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjAxMjQxOTAwNTdaFw0yNjAxMjUyMDE2NTdaMDMxMTAvBgNV BAMTKDNBNjUzRUQ0MTlGMTY5RUJCQUM1RkYxRTRFRUEyRTc1MkNEMTkwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTnsDzXMnAAeANm+9p5IkrqPS sG0gMn85YjCJkPhMavyupILyqpARJIeJm5XQ2QINRNLkn2EZbcL5FjcoToIsGUum amyS7IFEsMGqFygba5ygM2kYHUQefzzCFTZpESQgvj/xjeoRJPj6TTv4raoB7NFX wiTR7YGCMc5ftdSNyI810uGv1JV3ihnrjYh88+1ikxFNRcLSL3zaRGACDwb9ajSS JqXMUAaQX5r0Auo+Orzyud8yKYD9X4O2fZRfu2cqeAb/Tnl2Sw5e8wGxjBlWbdDU 7o7V+7v3XiTsq3Sk96EG8FKYsWHhiR0eLBKOvBjLcOxpC64UJxgUGUNcggidAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOmU+1Bnxaeu6xf8eTuoudSzRkHQwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC9GMzI5RjUxODcyNEZB QzY5NUUzM0Y1Qzc4NTMyQ0JGNTZCRjQyNDNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG4Bjhu17xAg w/+51b2JSnO5tj9GK0Dd4zI4e4VuDEHyQZLvcb71qKCM5pWhcJy5whCiNxhL9Yaa xaVU4BUEh7NJp8VqxY21RJF0E8A1V6N2OELlJfaeezuw5waT9cMWdTCyUOu0+9I7 DdQGluVDvGAGhIQ1ATmNs8xUSSUR8Tj7Alio/roIELIEhCBRaK5xQTIZo00kYAtH O+qiyxgezCnsVTIVstLVs15TqHMtWyp/Dx1jomliP4r7SUDbBUesXJ31GpQmWuJ/ F6TlAplzbdiJdMNM+pZTz1btPFsQ5bJQ7kQr1q1Q9yCyOrSaBsb/rnVoUZR/MNI9 BFulhfWKHA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:57 2026 by rpki-client