This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json) Hash identifier: sDOLToO/S9nEEVCSZ8YuSS70/N17hBYrY92TcPZBQZI= Subject key identifier: 8A:57:03:DD:48:D2:3C:EE:A3:DE:A6:CF:1E:C4:A0:A9:A4:65:C9:69 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 7DC334F6B2A803999D2D571AEBA66496AC1B2265 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 04:35:57 +0000 Manifest this update: Sun 25 Jan 2026 04:30:57 +0000 Manifest next update: Mon 26 Jan 2026 06:00:57 +0000 Files and hashes: 1: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=) 2: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=) 3: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: qOYCc0lTsxfBsTvoYjqocPhTAlYpYyouz23oFoIKR2Q=) 4: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c3:34:f6:b2:a8:03:99:9d:2d:57:1a:eb:a6:64:96:ac:1b:22:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jan 25 04:30:57 2026 GMT Not After : Jan 26 06:00:57 2026 GMT Subject: CN=8A5703DD48D23CEEA3DEA6CF1EC4A0A9A465C969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:79:45:34:7c:79:31:76:38:ff:50:43:38: c1:af:9e:f8:12:7e:ac:6d:1b:20:89:13:24:2f:01: fc:06:c5:b2:6c:76:04:44:13:de:d8:36:52:73:dc: 9e:a2:cb:11:a4:2f:eb:6c:b6:2f:84:f5:21:3a:bc: 2d:8e:36:c0:0f:bc:f2:a4:6e:0c:1f:18:fd:0f:ac: 8d:eb:c9:33:6f:bc:37:7d:a8:ec:23:8b:49:0e:78: 8b:0e:2d:36:e7:dc:bd:b7:17:13:be:6a:60:f7:6b: c7:34:34:bc:e5:4d:2b:e4:55:e5:91:f0:17:62:28: 60:18:12:0f:61:87:07:6b:e0:49:05:59:fe:f0:b1: 11:68:48:7f:4f:0d:32:13:77:b7:ed:6f:1c:ca:8f: 6c:63:93:77:15:1e:1e:b2:a2:d2:4f:36:2c:12:65: 03:44:75:51:a9:76:07:a7:80:2a:65:f6:8f:c1:7c: 81:36:f5:e8:24:1e:4f:6e:57:e5:87:04:f4:46:a7: a8:73:ab:f7:54:56:15:44:14:d3:70:1d:8a:07:08: 3d:d6:d8:b6:73:89:b3:cb:9c:2f:64:fa:01:c9:6c: 05:be:c7:a7:af:20:1d:b8:7b:9e:fb:83:d8:25:a7: 34:5f:f9:8f:08:3c:8b:47:80:f8:78:2e:6b:25:be: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:03:DD:48:D2:3C:EE:A3:DE:A6:CF:1E:C4:A0:A9:A4:65:C9:69 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c9:2d:e0:04:03:0a:5a:e7:f7:4b:70:ce:36:b9:df:02:4f: 51:6d:b3:85:29:a5:48:85:d8:08:aa:d2:08:79:ba:c1:35:bc: 43:20:01:fc:a8:ed:bf:ba:17:d9:73:04:3b:b2:fa:6b:d9:94: 34:ce:27:bf:1e:b5:0f:1f:2b:02:89:50:7c:f2:53:ef:87:99: a6:32:f7:d5:5b:2f:dc:f3:f5:41:d4:1a:0c:37:29:3e:96:8f: c3:dd:b3:78:45:bf:98:b1:a9:01:79:94:36:65:ad:19:5e:e1: b2:f2:73:87:7e:f5:df:91:1b:56:db:e2:cb:b6:4d:d0:9b:29: c2:23:d9:23:f8:1b:55:30:09:75:1d:a4:89:2f:89:69:54:bd: 8f:db:3a:3d:25:c4:fc:4d:74:9f:07:1c:b2:7a:68:95:38:ea: 6d:21:44:e5:05:93:87:c3:db:24:ed:fa:95:54:67:fd:75:17: b6:9d:05:1a:e1:4d:79:af:51:45:c1:8c:e2:ae:05:c9:21:9b: bf:d7:9c:39:d8:69:a6:82:13:1c:c4:4d:8c:b0:91:fb:59:1c: ee:39:b4:37:8a:82:df:50:ce:b1:48:d9:92:61:81:63:f7:83: 57:13:5d:55:4d:9a:0c:b5:71:00:5c:de:1c:44:47:62:54:8b: eb:d0:13:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfcM09rKoA5mdLVca66ZklqwbImUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAxMjUwNDMwNTdaFw0yNjAxMjYwNjAwNTdaMDMxMTAvBgNV BAMTKDhBNTcwM0RENDhEMjNDRUVBM0RFQTZDRjFFQzRBMEE5QTQ2NUM5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIunlFNHx5MXY4/1BDOMGvnvgS fqxtGyCJEyQvAfwGxbJsdgREE97YNlJz3J6iyxGkL+tsti+E9SE6vC2ONsAPvPKk bgwfGP0PrI3ryTNvvDd9qOwji0kOeIsOLTbn3L23FxO+amD3a8c0NLzlTSvkVeWR 8BdiKGAYEg9hhwdr4EkFWf7wsRFoSH9PDTITd7ftbxzKj2xjk3cVHh6yotJPNiwS ZQNEdVGpdgengCpl9o/BfIE29egkHk9uV+WHBPRGp6hzq/dUVhVEFNNwHYoHCD3W 2LZzibPLnC9k+gHJbAW+x6evIB24e577g9glpzRf+Y8IPItHgPh4LmslvnpxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUilcD3UjSPO6j3qbPHsSgqaRlyWkwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4 RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMkt4AQDClrn 90twzja53wJPUW2zhSmlSIXYCKrSCHm6wTW8QyAB/Kjtv7oX2XMEO7L6a9mUNM4n vx61Dx8rAolQfPJT74eZpjL31Vsv3PP1QdQaDDcpPpaPw92zeEW/mLGpAXmUNmWt GV7hsvJzh37135EbVtviy7ZN0JspwiPZI/gbVTAJdR2kiS+JaVS9j9s6PSXE/E10 nwccsnpolTjqbSFE5QWTh8PbJO36lVRn/XUXtp0FGuFNea9RRcGM4q4FySGbv9ec OdhppoITHMRNjLCR+1kc7jm0N4qC31DOsUjZkmGBY/eDVxNdVU2aDLVxAFzeHERH YlSL69ATVw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:52:52 2026 by rpki-client