This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft File: 745EC59458DF98DC3674219750AB7E7BC251E62C.mft (raw, json) Hash identifier: DKvlP57tDHXzfLgxTpLKztq/+0wqaB9M9k+X+5lZ0uY= Subject key identifier: CB:98:31:47:69:AD:0C:9F:37:29:2B:AA:1A:93:10:17:0A:A3:45:B0 Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C Certificate serial: 2BB19857911907888F0C481A5AA3D16E4FA0545C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:46:02 +0000 Manifest this update: Sun 25 Jan 2026 08:41:02 +0000 Manifest next update: Mon 26 Jan 2026 08:52:02 +0000 Files and hashes: 1: 745EC59458DF98DC3674219750AB7E7BC251E62C.crl (hash: Fs+3jIuO/p9gIRtQRo38lKxwl2K5CcJIv8upuaSywsQ=) 2: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (hash: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E=) 3: 3231302e37382e36342e302f31392d3139203d3e2039333931.roa (hash: jvALRiPVY3SMKzJOoNBmUmRGQM09Xnh580YLiGxSUOQ=) 4: 3230332e3131382e3139322e302f31392d3139203d3e2039333931.roa (hash: ftO2KpGExa6jnpukq7xnTVq+eIsEnXrt8N3x54iJtxw=) 5: 3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (hash: uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=) 6: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (hash: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc=) 7: 3231382e39372e3232342e302f32302d3230203d3e2039333931.roa (hash: Q+3AnXH0y0d7c5nDlvD7W2yKYZPR5Q1odJ1oD7AGUO4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b1:98:57:91:19:07:88:8f:0c:48:1a:5a:a3:d1:6e:4f:a0:54:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C Validity Not Before: Jan 25 08:41:02 2026 GMT Not After : Jan 26 08:52:02 2026 GMT Subject: CN=CB98314769AD0C9F37292BAA1A9310170AA345B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:6e:b1:c1:05:f0:ec:de:0f:de:ae:82:81: fc:00:85:aa:00:cb:79:1d:6d:fa:2b:e8:d0:29:04: e6:fb:d5:f5:e7:b6:07:d7:d7:0e:e1:50:63:f5:64: 1f:be:60:91:6b:1b:fd:11:93:6c:be:1f:42:c4:a8: a4:14:01:78:f1:8c:fb:cc:b5:ca:fd:bf:0f:48:f5: 17:80:67:cb:7c:1d:4a:73:85:c7:d6:8f:79:3b:da: 4f:f0:d1:4a:65:d5:89:07:8c:88:97:f3:e2:63:ef: d7:5e:aa:a4:01:92:b9:47:d8:84:2a:5a:e2:ec:db: f3:07:8e:e6:2e:d4:24:54:e1:d0:d9:9e:19:79:75: 83:ff:15:d4:cf:46:76:19:44:68:b5:f2:27:3c:a9: 8d:48:5e:5a:87:1d:a7:3d:5f:e7:56:bf:6f:59:24: 4b:a6:85:5c:df:27:f2:d1:00:ff:e9:df:53:36:cf: a1:2f:68:b7:66:6e:11:59:85:b7:8b:c1:2a:49:9c: 7e:81:f6:94:44:d1:c2:05:b7:0e:20:f5:37:12:14: b1:70:01:31:9e:8d:a7:b6:49:aa:e9:77:49:09:68: 01:24:6e:db:ef:cb:9e:8a:6c:c4:13:aa:09:d9:a5: 86:c5:35:0e:bc:65:8a:8f:69:db:e1:61:95:ca:06: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:31:47:69:AD:0C:9F:37:29:2B:AA:1A:93:10:17:0A:A3:45:B0 X509v3 Authority Key Identifier: keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:05:c9:23:c2:0c:e7:29:13:08:f8:df:df:66:a6:e3:4e:79: 96:88:21:f4:3c:69:ad:b0:1f:34:cc:86:cd:59:22:4f:08:8d: 0f:36:59:8e:db:55:83:2b:c0:6f:7b:c3:c6:4e:e0:8a:b9:2f: ed:bd:15:06:b8:1c:d3:ad:0f:a9:1b:02:1e:5f:a9:f8:35:6f: 1a:0f:b4:b0:12:c9:c0:b6:be:19:15:2e:61:88:33:38:ff:e6: 46:cf:21:af:e5:c8:51:c2:06:09:28:67:15:84:0d:cb:b5:98: f4:e1:76:5b:56:70:f3:bd:81:e4:87:41:92:3b:ce:91:0d:45: 23:75:7f:30:20:83:be:ef:1a:91:1c:62:3e:08:85:a2:c8:99: 43:60:ff:8c:9e:78:6b:d3:0b:dd:1f:58:d5:6a:53:65:bd:88: 16:80:a0:b7:da:ae:f9:a3:4a:eb:af:ff:e0:fa:21:bb:7c:33: 1f:16:1c:61:69:c4:f1:b9:e2:b4:d1:9c:00:31:99:43:d2:17: 06:f8:0d:8f:e0:72:b2:95:d9:2a:47:04:9e:21:25:92:ce:18: 1e:2f:fc:c2:4d:04:5a:e5:43:e0:1a:df:53:e3:84:fe:29:17: c1:70:69:6a:a0:4a:58:88:85:f6:ef:fa:d9:96:fb:30:13:5c: a6:08:9d:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK7GYV5EZB4iPDEgaWqPRbk+gVFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JD MjUxRTYyQzAeFw0yNjAxMjUwODQxMDJaFw0yNjAxMjYwODUyMDJaMDMxMTAvBgNV BAMTKENCOTgzMTQ3NjlBRDBDOUYzNzI5MkJBQTFBOTMxMDE3MEFBMzQ1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc26xwQXw7N4P3q6CgfwAhaoA y3kdbfor6NApBOb71fXntgfX1w7hUGP1ZB++YJFrG/0Rk2y+H0LEqKQUAXjxjPvM tcr9vw9I9ReAZ8t8HUpzhcfWj3k72k/w0Upl1YkHjIiX8+Jj79deqqQBkrlH2IQq WuLs2/MHjuYu1CRU4dDZnhl5dYP/FdTPRnYZRGi18ic8qY1IXlqHHac9X+dWv29Z JEumhVzfJ/LRAP/p31M2z6EvaLdmbhFZhbeLwSpJnH6B9pRE0cIFtw4g9TcSFLFw ATGejae2Sarpd0kJaAEkbtvvy56KbMQTqgnZpYbFNQ68ZYqPadvhYZXKBrwrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy5gxR2mtDJ83KSuqGpMQFwqjRbAwHwYDVR0j BBgwFoAUdF7FlFjfmNw2dCGXUKt+e8JR5iwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTg1MTc3OC8wLzc0NUVDNTk0NThERjk4REMzNjc0MjE5NzUwQUI3 RTdCQzI1MUU2MkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JDMjUxRTYyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE4NTE3NzgvMC83NDVFQzU5NDU4REY5 OERDMzY3NDIxOTc1MEFCN0U3QkMyNTFFNjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAXJI8IM5ykT CPjf32am4055logh9DxprbAfNMyGzVkiTwiNDzZZjttVgyvAb3vDxk7girkv7b0V Brgc060PqRsCHl+p+DVvGg+0sBLJwLa+GRUuYYgzOP/mRs8hr+XIUcIGCShnFYQN y7WY9OF2W1Zw872B5IdBkjvOkQ1FI3V/MCCDvu8akRxiPgiFosiZQ2D/jJ54a9ML 3R9Y1WpTZb2IFoCgt9qu+aNK66//4Pohu3wzHxYcYWnE8bnitNGcADGZQ9IXBvgN j+ByspXZKkcEniElks4YHi/8wk0EWuVD4BrfU+OE/ikXwXBpaqBKWIiF9u/62Zb7 MBNcpgid5w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:56 2026 by rpki-client