This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json) Hash identifier: qcUccYLPmuANsFU7+Klw0/E3kX7ZcexwKZY1/4ZXsh4= Subject key identifier: 8B:9A:7B:3D:80:55:DF:31:B9:A4:5A:EB:95:88:DE:02:8B:FE:B0:CA Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 15E08A3065CA24EA0D2CC59029EEEB7D1C6E8B83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:15:57 +0000 Manifest this update: Sat 24 Jan 2026 15:10:57 +0000 Manifest next update: Sun 25 Jan 2026 17:29:57 +0000 Files and hashes: 1: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: 5knTN8Ua1I/yxmfyilvRYXW2WMG7Nt8JxIZbnopzMN8=) 2: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: CF+z33Rj2YhsOOEndNKmnOpnjbWukgLJhVN5L0N0Tvc=) 3: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: kUBqxH2ZZ4TmBOKzWUD0brYEgK2iHz2LdszFr0mSBx0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e0:8a:30:65:ca:24:ea:0d:2c:c5:90:29:ee:eb:7d:1c:6e:8b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Jan 24 15:10:57 2026 GMT Not After : Jan 25 17:29:57 2026 GMT Subject: CN=8B9A7B3D8055DF31B9A45AEB9588DE028BFEB0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:db:f2:bc:1b:19:58:a1:92:14:14:ba:f2: 40:ba:6d:3e:43:a2:4b:44:63:c2:d4:19:fe:e3:0a: 93:18:6a:0f:12:b0:f7:ee:c3:2b:bc:58:42:b7:c9: d7:f2:5a:ef:46:68:84:82:8d:cc:10:30:ab:87:be: 7c:01:6c:e8:19:30:72:86:49:01:e2:f4:e8:88:19: ed:eb:a0:18:47:01:14:92:24:2c:7e:d8:5f:5f:1b: a7:e0:39:c5:37:e2:46:21:a6:13:f8:85:2c:a9:7f: bb:d8:dd:33:e3:45:aa:73:7d:0d:0c:39:8e:60:22: 60:bc:3c:bf:c5:98:a4:35:85:dd:bb:e0:f1:f5:c4: 33:64:c7:4f:ba:4c:1b:15:42:fa:8a:ad:0b:bd:b0: e9:22:9e:85:29:31:ff:d1:f1:60:46:3b:27:1c:01: 5c:e9:41:b6:78:25:c2:46:d6:36:59:2e:e8:42:4f: b0:9c:de:72:71:37:14:f7:83:91:fd:23:00:29:4e: 85:5b:29:0d:14:6f:c1:67:91:bc:31:8d:ef:77:aa: 96:7d:ce:18:94:66:1f:46:bd:0d:92:2c:05:12:0e: 7d:75:a5:d3:c6:fc:c7:da:1a:4e:79:54:8c:12:2e: 4d:f2:34:ee:f3:92:10:85:a6:f5:12:7d:ad:bd:20: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9A:7B:3D:80:55:DF:31:B9:A4:5A:EB:95:88:DE:02:8B:FE:B0:CA X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:41:9b:c7:89:4c:a5:95:69:e0:0c:70:5c:69:1f:3a:3d:46: 90:5b:c6:dc:26:4d:76:6e:aa:a1:eb:bc:dc:60:e8:69:41:e9: fa:c2:15:74:38:d3:6c:0d:1a:9c:3b:fa:19:e7:df:aa:8d:ea: 7e:b5:b2:3e:2b:d4:ce:c3:e3:2c:5a:01:79:8b:98:aa:4b:94: 64:2e:39:80:af:6d:4c:ec:ec:39:13:44:d7:48:10:70:24:d6: 5c:f4:2c:2a:cb:05:21:f7:28:51:cc:45:a3:71:96:87:2d:41: 69:c7:36:fc:b1:4a:ed:64:46:80:18:97:c8:b6:54:74:05:7e: a7:bf:b4:e9:a9:a4:a7:38:91:c2:22:62:d1:3f:aa:15:a4:2d: 8f:ed:fd:89:c8:08:bc:12:70:d4:27:dc:d9:81:cf:bc:ba:f7: f8:b6:32:9f:e1:0c:b0:41:13:24:46:02:9f:b8:b6:a2:30:1c: a5:e9:52:32:be:03:95:fe:50:40:1e:c9:bc:4c:be:f9:a6:51: 28:c6:1c:1a:b4:4f:d0:de:66:1a:bc:c0:27:d7:e9:26:62:99: 5b:4f:81:7c:e0:0c:88:f8:e1:7c:45:77:5d:a5:ec:59:9a:a3: 08:09:52:83:45:42:af:df:7c:8f:03:11:b0:28:88:c5:fd:05: fd:7d:dc:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFeCKMGXKJOoNLMWQKe7rfRxui4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjAxMjQxNTEwNTdaFw0yNjAxMjUxNzI5NTdaMDMxMTAvBgNV BAMTKDhCOUE3QjNEODA1NURGMzFCOUE0NUFFQjk1ODhERTAyOEJGRUIwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz9vyvBsZWKGSFBS68kC6bT5D oktEY8LUGf7jCpMYag8SsPfuwyu8WEK3ydfyWu9GaISCjcwQMKuHvnwBbOgZMHKG SQHi9OiIGe3roBhHARSSJCx+2F9fG6fgOcU34kYhphP4hSypf7vY3TPjRapzfQ0M OY5gImC8PL/FmKQ1hd274PH1xDNkx0+6TBsVQvqKrQu9sOkinoUpMf/R8WBGOycc AVzpQbZ4JcJG1jZZLuhCT7Cc3nJxNxT3g5H9IwApToVbKQ0Ub8Fnkbwxje93qpZ9 zhiUZh9GvQ2SLAUSDn11pdPG/MfaGk55VIwSLk3yNO7zkhCFpvUSfa29IOrLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi5p7PYBV3zG5pFrrlYjeAov+sMowHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMC9GQjdCNzk0RjEyMzcy NUZFODAwQTY0N0YzRjdFOEJFOTlCMUY1QjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEGbx4lMpZVp 4AxwXGkfOj1GkFvG3CZNdm6qoeu83GDoaUHp+sIVdDjTbA0anDv6Geffqo3qfrWy PivUzsPjLFoBeYuYqkuUZC45gK9tTOzsORNE10gQcCTWXPQsKssFIfcoUcxFo3GW hy1Bacc2/LFK7WRGgBiXyLZUdAV+p7+06amkpziRwiJi0T+qFaQtj+39icgIvBJw 1Cfc2YHPvLr3+LYyn+EMsEETJEYCn7i2ojAcpelSMr4Dlf5QQB7JvEy++aZRKMYc GrRP0N5mGrzAJ9fpJmKZW0+BfOAMiPjhfEV3XaXsWZqjCAlSg0VCr998jwMRsCiI xf0F/X3cFw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:49 2026 by rpki-client