This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: NQwQw1dLdNMfpWo3Ox6Nja8x7MwIJgwY8DucRK+YOoQ= Subject key identifier: E6:8D:0E:C5:16:F9:40:B6:4D:2E:A3:05:06:EC:03:F0:AC:C8:58:64 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 20A91299A30AF5554FC89DB2D776128E8ABBAE36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 09:01:02 +0000 Manifest this update: Sun 25 Jan 2026 08:56:02 +0000 Manifest next update: Mon 26 Jan 2026 09:09:02 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: KVInVlFP0NflChbx42S/oUJKQ1R9uC/1QHrin3dGi8M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:12:99:a3:0a:f5:55:4f:c8:9d:b2:d7:76:12:8e:8a:bb:ae:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Jan 25 08:56:02 2026 GMT Not After : Jan 26 09:09:02 2026 GMT Subject: CN=E68D0EC516F940B64D2EA30506EC03F0ACC85864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:08:7b:41:bf:9f:45:80:5a:52:ea:3d:f2: ac:22:9c:a9:88:67:02:0d:6a:37:34:99:48:3b:95: 4b:78:20:42:67:88:18:c4:d8:05:1f:f3:1b:0c:fb: 7d:1a:27:f9:96:06:73:5a:e0:1a:f1:3a:e8:f9:53: 76:34:4a:e6:36:f3:32:83:a0:23:b4:25:18:fe:f8: 4b:c3:32:d7:7a:3a:35:16:31:c2:54:df:5e:ed:0f: 2e:78:e6:32:6b:3e:01:e2:79:f3:63:98:51:e1:a3: b0:63:f6:21:45:4a:0d:97:38:00:e4:1b:be:bb:bf: 37:af:db:dc:07:44:08:9c:0f:a2:e8:f6:1d:1d:f6: 83:51:2f:33:7c:0f:b8:4f:d9:36:09:a0:3d:aa:2a: 4c:33:db:a4:41:49:4a:dd:4c:51:ed:dd:22:b2:7f: 89:9c:bd:6d:82:57:5e:f6:b3:1f:fa:7e:d5:03:2f: 1e:90:69:cd:63:a8:9c:4c:3e:ba:b6:65:a8:dd:3f: 4f:d8:cb:aa:39:96:16:35:fd:3d:83:61:36:a5:c4: 94:dd:68:74:ce:eb:63:04:b1:99:f8:6f:2d:07:79: c9:65:f4:4a:47:1b:c1:5f:e9:c2:01:93:3c:09:13: 90:19:06:15:25:ff:13:2b:96:a7:e9:44:d7:a1:2e: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8D:0E:C5:16:F9:40:B6:4D:2E:A3:05:06:EC:03:F0:AC:C8:58:64 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bc:d1:28:60:7d:a0:92:f7:29:8e:c0:b9:21:12:3a:5f:4b: 24:4d:02:fa:7c:29:04:99:32:9e:30:b4:44:9f:25:56:af:56: 64:f5:43:65:09:a4:df:08:61:ab:75:fc:3c:68:84:3a:96:91: 2a:0a:ec:ec:3c:52:74:82:18:d5:86:55:2f:1a:54:85:c0:05: 2e:7a:d2:59:19:87:8a:80:08:63:cd:0a:44:af:b9:64:b6:c6: 38:f9:23:4a:37:64:1e:33:0d:24:f8:a9:f1:f1:07:8d:c1:d6: 45:9f:ce:dc:d2:8c:db:68:c1:f0:14:08:8e:9f:b4:80:03:f3: 41:77:e6:5b:6e:f5:08:91:08:6e:7d:5c:a2:39:0b:4e:37:cf: 7c:63:d1:d0:ee:51:59:2e:3e:75:b4:8a:3f:bb:36:2e:56:30: de:92:59:92:a7:9b:be:a4:dd:cf:0d:42:5d:55:aa:62:55:42: 23:6a:50:84:54:fa:9f:3c:e4:19:17:d9:37:62:d2:ad:f4:9e: 28:b5:e6:de:0b:e3:1b:ea:a9:66:37:b8:ae:c9:6c:27:61:52: 96:ab:de:55:d1:84:78:af:31:d5:31:6b:5c:90:56:1c:a9:87: 30:b9:27:f1:41:7a:4f:a7:2f:02:05:90:36:8c:97:0c:41:f9: d4:2e:ba:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIKkSmaMK9VVPyJ2y13YSjoq7rjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjAxMjUwODU2MDJaFw0yNjAxMjYwOTA5MDJaMDMxMTAvBgNV BAMTKEU2OEQwRUM1MTZGOTQwQjY0RDJFQTMwNTA2RUMwM0YwQUNDODU4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lwh7Qb+fRYBaUuo98qwinKmI ZwINajc0mUg7lUt4IEJniBjE2AUf8xsM+30aJ/mWBnNa4BrxOuj5U3Y0SuY28zKD oCO0JRj++EvDMtd6OjUWMcJU317tDy545jJrPgHiefNjmFHho7Bj9iFFSg2XOADk G767vzev29wHRAicD6Lo9h0d9oNRLzN8D7hP2TYJoD2qKkwz26RBSUrdTFHt3SKy f4mcvW2CV172sx/6ftUDLx6Qac1jqJxMPrq2ZajdP0/Yy6o5lhY1/T2DYTalxJTd aHTO62MEsZn4by0Hecll9EpHG8Ff6cIBkzwJE5AZBhUl/xMrlqfpRNehLhvRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5o0OxRb5QLZNLqMFBuwD8KzIWGQwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrzRKGB9oJL3 KY7AuSESOl9LJE0C+nwpBJkynjC0RJ8lVq9WZPVDZQmk3whhq3X8PGiEOpaRKgrs 7DxSdIIY1YZVLxpUhcAFLnrSWRmHioAIY80KRK+5ZLbGOPkjSjdkHjMNJPip8fEH jcHWRZ/O3NKM22jB8BQIjp+0gAPzQXfmW271CJEIbn1cojkLTjfPfGPR0O5RWS4+ dbSKP7s2LlYw3pJZkqebvqTdzw1CXVWqYlVCI2pQhFT6nzzkGRfZN2LSrfSeKLXm 3gvjG+qpZje4rslsJ2FSlqveVdGEeK8x1TFrXJBWHKmHMLkn8UF6T6cvAgWQNoyX DEH51C66Ew== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:22 2026 by rpki-client