This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: Aw6z8MFmMMYnd52Z7MXDmoIAahX4xIQmgVTas1i+U0I= Subject key identifier: 14:AE:2B:3D:46:EB:83:C9:78:C1:18:40:2D:4A:CF:EB:73:0F:16:69 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 1E328450D51A2A911F42DD3C87595074450C9995 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:55:57 +0000 Manifest this update: Sat 24 Jan 2026 17:50:57 +0000 Manifest next update: Sun 25 Jan 2026 21:27:57 +0000 Files and hashes: 1: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) 2: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: QByRSvfppZjA2O4wrREnptFrsi428LruOcPE3yPO1y0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:32:84:50:d5:1a:2a:91:1f:42:dd:3c:87:59:50:74:45:0c:99:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Jan 24 17:50:57 2026 GMT Not After : Jan 25 21:27:57 2026 GMT Subject: CN=14AE2B3D46EB83C978C118402D4ACFEB730F1669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:11:a4:9e:a9:c9:06:27:ce:29:49:b8:b8: e3:c0:09:bd:d7:b2:04:b9:65:cd:b7:8e:71:3b:c6: d6:9c:e4:0a:e1:8e:db:be:83:1e:76:d6:15:28:90: c3:ca:05:ab:04:d1:47:ca:71:72:8f:df:42:8c:5f: dd:c6:8f:b7:2e:72:57:ec:59:70:01:ba:2e:3b:78: 67:f9:b7:e6:88:7f:46:09:1d:af:4f:d3:6a:2b:23: f8:9e:81:fa:97:df:b9:e5:6e:cb:62:c4:5f:5a:6d: bd:c8:c8:c6:4d:8e:09:ea:9c:49:81:e3:01:e3:91: 4c:62:a0:60:07:f9:a3:7f:43:79:7e:9f:04:8b:60: 70:69:7a:54:ee:f3:7d:90:1d:07:5b:50:82:f8:d8: d7:e5:8e:20:4f:0b:5d:76:4f:a1:1e:43:a8:a7:bc: c3:a9:66:40:d0:10:43:64:34:0f:94:65:b5:4a:a5: 61:80:96:aa:65:32:e5:65:f9:d0:03:7f:25:e7:38: 9b:2c:6e:a2:47:13:90:5c:f7:22:ae:32:80:8d:3d: aa:b5:79:0c:b8:bd:98:cc:df:3a:e5:8e:6f:a9:5c: 98:a0:52:b4:dc:e4:15:47:a3:20:5e:f9:1f:5c:62: 18:cd:53:c6:93:9c:bf:2f:7e:5f:7f:08:fc:50:54: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:2B:3D:46:EB:83:C9:78:C1:18:40:2D:4A:CF:EB:73:0F:16:69 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:50:46:7b:ae:9d:21:a7:e9:d8:9c:67:2f:f5:01:5f:01:91: ec:42:06:d1:47:42:d0:bc:81:58:00:d7:6d:5e:12:f6:d2:19: a0:87:6c:c2:0c:d5:d4:7c:be:b0:d9:2a:af:b5:08:4b:23:9b: dd:40:09:b3:fd:2c:6d:e2:a7:ac:09:17:b0:93:cd:30:44:d1: 93:b6:d9:b7:4e:7f:fa:84:89:a3:c1:a4:2d:78:b4:6f:50:cb: 4b:46:0a:11:a0:db:52:6a:69:59:bb:9c:10:1e:65:77:b5:1a: 2c:da:7c:54:9f:2e:30:3c:22:11:37:14:6f:08:56:24:cc:b2: c6:18:b3:e8:d2:b8:1c:f4:7d:5e:65:b8:32:83:1d:67:4b:28: b9:1e:25:49:3e:97:2f:36:d8:00:fa:9a:e9:38:27:46:57:d7: 74:66:08:ad:ca:15:98:e6:05:76:ab:c5:2b:ab:37:71:35:56: fa:10:31:ea:61:8e:b6:8e:ed:b4:86:6e:cb:53:32:e3:1b:4e: 05:c4:43:4c:55:81:05:4c:fe:06:74:2c:81:1c:1b:8a:b7:61: 01:8b:08:22:fd:05:45:22:e0:71:6e:9e:96:8f:76:15:f0:19: e5:6f:99:1d:7f:fc:bc:27:5c:9d:62:0e:9c:08:a1:97:e6:e5: f5:ca:3e:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHjKEUNUaKpEfQt08h1lQdEUMmZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjAxMjQxNzUwNTdaFw0yNjAxMjUyMTI3NTdaMDMxMTAvBgNV BAMTKDE0QUUyQjNENDZFQjgzQzk3OEMxMTg0MDJENEFDRkVCNzMwRjE2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVhGknqnJBifOKUm4uOPACb3X sgS5Zc23jnE7xtac5Arhjtu+gx521hUokMPKBasE0UfKcXKP30KMX93Gj7cuclfs WXABui47eGf5t+aIf0YJHa9P02orI/iegfqX37nlbstixF9abb3IyMZNjgnqnEmB 4wHjkUxioGAH+aN/Q3l+nwSLYHBpelTu832QHQdbUIL42NfljiBPC112T6EeQ6in vMOpZkDQEENkNA+UZbVKpWGAlqplMuVl+dADfyXnOJssbqJHE5Bc9yKuMoCNPaq1 eQy4vZjM3zrljm+pXJigUrTc5BVHoyBe+R9cYhjNU8aTnL8vfl9/CPxQVF9HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFK4rPUbrg8l4wRhALUrP63MPFmkwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFBGe66dIafp 2JxnL/UBXwGR7EIG0UdC0LyBWADXbV4S9tIZoIdswgzV1Hy+sNkqr7UISyOb3UAJ s/0sbeKnrAkXsJPNMETRk7bZt05/+oSJo8GkLXi0b1DLS0YKEaDbUmppWbucEB5l d7UaLNp8VJ8uMDwiETcUbwhWJMyyxhiz6NK4HPR9XmW4MoMdZ0souR4lST6XLzbY APqa6TgnRlfXdGYIrcoVmOYFdqvFK6s3cTVW+hAx6mGOto7ttIZuy1My4xtOBcRD TFWBBUz+BnQsgRwbirdhAYsIIv0FRSLgcW6elo92FfAZ5W+ZHX/8vCdcnWIOnAih l+bl9co+IA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:40 2026 by rpki-client