This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json) Hash identifier: kmXfvWk4SaCYFTmxFQiWAgoPaYbSe2dbbUeQMKnuWXY= Subject key identifier: 03:59:6C:DB:BF:9E:D9:5D:6F:60:5C:4E:89:99:C3:44:34:56:E4:6B Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 4B4C669A4CD9827909DD34499C0D0AFDE8F605AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:20:57 +0000 Manifest this update: Sun 25 Jan 2026 06:15:57 +0000 Manifest next update: Mon 26 Jan 2026 06:47:57 +0000 Files and hashes: 1: 3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa (hash: 5j4qtob+syiOeOjHQA6tru1Q5Emv8og7jhAu9x8oqcM=) 2: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: Zy1isExEK/zegibZ3osJvK9m4zKX0Z/vz0H2zvXoECE=) 3: 3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa (hash: PEiq15CzWq7YVz5yjYQ9845wTwEywGiN4bqFOhOBuiA=) 4: 323430313a326130303a3a2f33322d3438203d3e2037343638.roa (hash: A8NZ0UY8B3O3+sohjguWnNXSf3IoWdVu8cAaIcwGSx4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4c:66:9a:4c:d9:82:79:09:dd:34:49:9c:0d:0a:fd:e8:f6:05:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Jan 25 06:15:57 2026 GMT Not After : Jan 26 06:47:57 2026 GMT Subject: CN=03596CDBBF9ED95D6F605C4E8999C3443456E46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:96:91:ce:3d:20:45:a2:08:5e:50:60:db: 27:ba:99:9e:db:29:e4:f0:ef:c2:a0:f9:ac:d9:08: cf:ff:f4:31:1d:76:1b:6b:0b:63:50:4b:a0:47:c8: 65:73:59:2a:9b:cf:13:30:83:ee:e4:0c:d9:a4:f1: e0:e8:d4:17:64:20:b8:48:36:98:40:2a:b3:63:7e: 62:8b:b1:19:d2:c6:0b:35:74:8c:be:82:40:ae:5c: ac:68:3b:b0:de:70:e0:d3:2d:60:3c:54:c9:14:a5: 82:f5:59:d3:5b:68:09:f3:cb:1a:ff:c0:c0:8a:c9: ae:73:69:e7:9b:97:0a:fa:14:9c:55:a2:8b:e5:35: 7b:20:48:36:01:f6:1e:b8:e9:bd:f0:6f:6c:0e:77: 58:40:93:a1:47:66:e1:00:8b:f3:fd:95:c6:af:f3: 2a:13:72:29:1b:3f:1b:f5:07:af:6e:b6:3c:88:d3: 41:9b:df:03:1b:97:a7:a7:c8:f5:ae:93:09:3e:38: 7d:ea:23:0b:5f:1c:f0:a5:7c:92:65:5a:3e:89:3c: cf:68:28:93:b9:1a:0b:92:ad:d3:dc:87:c1:53:d8: bd:5f:90:53:bc:36:49:38:84:f2:12:e6:f2:9d:e5: 48:6b:dd:39:30:f1:16:a1:1a:7c:37:67:98:67:c9: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:59:6C:DB:BF:9E:D9:5D:6F:60:5C:4E:89:99:C3:44:34:56:E4:6B X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:df:b0:b8:3d:57:b7:77:84:97:a5:c8:1a:1e:30:2e:8f:d5: 0d:10:65:24:52:9b:a6:5c:34:a2:e0:aa:5b:b2:9c:8c:88:4b: 7e:4c:aa:e4:04:9d:d7:e4:8f:f6:a4:6d:1c:b8:52:b9:de:3e: e6:94:41:42:10:b0:94:68:46:fb:60:7b:df:bf:60:d9:13:05: f9:d9:43:eb:bb:05:c3:56:c2:a3:d0:af:a8:6a:5b:da:3e:6f: 64:cd:5a:ad:1f:74:f2:b7:73:d9:49:2b:94:a4:1b:0a:f6:a3: 31:5b:a7:65:d5:fb:1b:50:9f:5d:6c:35:32:02:8d:0b:a4:48: 71:a8:58:fe:a4:27:15:37:3b:0f:86:1c:6f:33:f9:ac:3a:cd: 31:c5:d6:12:8d:49:ac:d2:85:a1:52:7b:aa:bb:cc:b7:fc:c6: 05:69:c9:80:df:b2:1d:d6:58:3a:41:01:07:ee:92:1e:81:92: 20:fd:4b:e2:cb:35:d4:2f:f2:1f:bf:f4:92:e1:b4:1f:c8:b0: 02:ef:1a:e3:69:f0:a9:64:92:36:e6:c0:bd:5e:ed:3c:be:3d: 51:b5:5a:09:b1:26:46:07:f9:22:47:e1:f6:e4:75:b4:d6:45: 23:94:e8:5c:e1:fa:63:24:7b:34:81:10:d5:d4:08:f7:f0:e4: fb:1e:37:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS0xmmkzZgnkJ3TRJnA0K/ej2Ba4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjAxMjUwNjE1NTdaFw0yNjAxMjYwNjQ3NTdaMDMxMTAvBgNV BAMTKDAzNTk2Q0RCQkY5RUQ5NUQ2RjYwNUM0RTg5OTlDMzQ0MzQ1NkU0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDZaRzj0gRaIIXlBg2ye6mZ7b KeTw78Kg+azZCM//9DEddhtrC2NQS6BHyGVzWSqbzxMwg+7kDNmk8eDo1BdkILhI NphAKrNjfmKLsRnSxgs1dIy+gkCuXKxoO7DecODTLWA8VMkUpYL1WdNbaAnzyxr/ wMCKya5zaeeblwr6FJxVoovlNXsgSDYB9h646b3wb2wOd1hAk6FHZuEAi/P9lcav 8yoTcikbPxv1B69utjyI00Gb3wMbl6enyPWukwk+OH3qIwtfHPClfJJlWj6JPM9o KJO5GguSrdPch8FT2L1fkFO8Nkk4hPIS5vKd5Uhr3Tkw8RahGnw3Z5hnybsvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA1ls27+e2V1vYFxOiZnDRDRW5GswHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BNTE0MDhFOTcwMTBC REI0NDE0NjI4MUI4QTc4QkNGQTRFMEU0QzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN+wuD1Xt3eE l6XIGh4wLo/VDRBlJFKbplw0ouCqW7KcjIhLfkyq5ASd1+SP9qRtHLhSud4+5pRB QhCwlGhG+2B7379g2RMF+dlD67sFw1bCo9CvqGpb2j5vZM1arR908rdz2UkrlKQb CvajMVunZdX7G1CfXWw1MgKNC6RIcahY/qQnFTc7D4YcbzP5rDrNMcXWEo1JrNKF oVJ7qrvMt/zGBWnJgN+yHdZYOkEBB+6SHoGSIP1L4ss11C/yH7/0kuG0H8iwAu8a 42nwqWSSNubAvV7tPL49UbVaCbEmRgf5Ikfh9uR1tNZFI5ToXOH6YyR7NIEQ1dQI 9/Dk+x432Q== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:20 2026 by rpki-client