This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: I8qEiZC23fLk1K2EGwk4pZByalbMQBJUG5kVbpcFxrg= Subject key identifier: E4:24:92:8A:3A:40:43:8F:93:99:25:72:2C:C2:CE:79:76:B0:59:AF Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 13CA29AFCCD0A419A278EDFEED277354050644A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 14:25:57 +0000 Manifest this update: Sat 24 Jan 2026 14:20:57 +0000 Manifest next update: Sun 25 Jan 2026 18:16:57 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: XjdW1oAF8uncQMMPAv2c+0e4yZob1sYYd1etEMk4p3Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ca:29:af:cc:d0:a4:19:a2:78:ed:fe:ed:27:73:54:05:06:44:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Jan 24 14:20:57 2026 GMT Not After : Jan 25 18:16:57 2026 GMT Subject: CN=E424928A3A40438F939925722CC2CE7976B059AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:a7:5e:55:e0:34:d1:55:f3:31:a5:fd:c4: 62:a4:83:ac:ae:69:c8:7a:67:cf:7b:7d:2c:38:e0: 6b:3b:3c:79:0c:32:73:9a:02:5d:38:83:2e:f7:6a: 82:8a:b6:d7:a3:9e:24:54:a3:30:54:10:f6:70:d2: 8c:44:ed:3d:c5:09:1e:75:d0:b2:f4:b4:dc:70:f4: dc:d8:3c:4c:68:3b:fc:0b:a2:1c:ef:0c:4c:b0:f4: 1a:40:71:00:1a:de:bc:f9:d8:77:f7:5d:af:e0:89: 6d:c5:08:47:e8:27:fa:6a:31:96:61:a4:35:6e:7c: 24:54:25:9d:78:3b:d5:84:7b:17:c0:36:08:a4:7f: 9b:fd:6f:f7:78:0a:19:3b:41:99:04:52:00:ff:fd: 54:10:12:46:2b:b1:f2:78:e1:3d:48:61:de:12:56: 62:fb:5b:18:5c:ac:cb:99:40:8f:89:2e:30:54:59: 80:0b:e2:58:d3:e7:84:8c:dd:7a:8c:dd:49:2a:6f: 94:e8:8d:cb:8e:9a:1d:f4:45:5f:ae:5f:80:31:ab: 61:ed:05:f3:83:58:4a:69:84:48:e7:3d:7a:80:a5: 62:66:1e:83:75:8f:cf:18:97:07:be:10:e4:70:5a: e6:d9:23:14:de:fa:17:1d:33:10:3e:45:88:8c:dd: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:92:8A:3A:40:43:8F:93:99:25:72:2C:C2:CE:79:76:B0:59:AF X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:39:6e:31:3e:8f:45:b4:14:9a:97:1b:f1:8d:d3:fc:e5:69: 51:ad:61:47:7a:8a:48:63:d4:c1:a6:07:22:51:b9:57:13:30: 3d:5c:ed:fd:b9:e5:f4:74:09:3f:f1:c8:ec:9e:97:4c:7a:84: a3:e4:d6:14:73:76:dc:c0:95:94:69:fa:d9:ef:cc:08:12:71: 41:39:d9:15:3e:9e:03:b9:d8:70:3a:c1:dd:91:f1:ea:ef:ef: ad:72:0f:9d:09:3a:87:89:41:4a:07:7a:53:ec:46:af:5c:7c: d8:80:9c:58:d4:26:4a:6a:fd:b6:cb:9e:ce:ed:1e:a7:ab:61: 1c:68:d3:ea:4b:24:3c:88:6a:21:dc:38:47:95:bb:ae:de:87: 76:3e:71:6b:f1:2d:31:a9:de:3d:e9:44:ce:6a:56:a7:f0:71: bb:d9:8f:e1:c3:69:7a:f1:a9:11:a3:3c:c1:20:b7:6b:be:d2: fe:52:f1:f6:aa:2a:11:98:5f:d1:84:77:df:cd:7c:b6:24:c4: cd:26:45:98:5e:37:48:75:b6:4f:c2:33:58:bc:19:99:95:5d: e7:7c:dc:cb:08:ef:36:23:26:12:a2:a6:05:b2:7f:27:b4:b6: 29:5f:0b:d6:7c:55:ea:a3:8e:ca:4c:d0:d6:12:3f:f3:48:7f: 00:ce:8f:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE8opr8zQpBmieO3+7SdzVAUGRKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjAxMjQxNDIwNTdaFw0yNjAxMjUxODE2NTdaMDMxMTAvBgNV BAMTKEU0MjQ5MjhBM0E0MDQzOEY5Mzk5MjU3MjJDQzJDRTc5NzZCMDU5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M6deVeA00VXzMaX9xGKkg6yu ach6Z897fSw44Gs7PHkMMnOaAl04gy73aoKKttejniRUozBUEPZw0oxE7T3FCR51 0LL0tNxw9NzYPExoO/wLohzvDEyw9BpAcQAa3rz52Hf3Xa/giW3FCEfoJ/pqMZZh pDVufCRUJZ14O9WEexfANgikf5v9b/d4Chk7QZkEUgD//VQQEkYrsfJ44T1IYd4S VmL7WxhcrMuZQI+JLjBUWYAL4ljT54SM3XqM3Ukqb5TojcuOmh30RV+uX4Axq2Ht BfODWEpphEjnPXqApWJmHoN1j88Ylwe+EORwWubZIxTe+hcdMxA+RYiM3QfpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5CSSijpAQ4+TmSVyLMLOeXawWa8wHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjluMT6PRbQU mpcb8Y3T/OVpUa1hR3qKSGPUwaYHIlG5VxMwPVzt/bnl9HQJP/HI7J6XTHqEo+TW FHN23MCVlGn62e/MCBJxQTnZFT6eA7nYcDrB3ZHx6u/vrXIPnQk6h4lBSgd6U+xG r1x82ICcWNQmSmr9tsuezu0ep6thHGjT6kskPIhqIdw4R5W7rt6Hdj5xa/EtMane PelEzmpWp/Bxu9mP4cNpevGpEaM8wSC3a77S/lLx9qoqEZhf0YR33818tiTEzSZF mF43SHW2T8IzWLwZmZVd53zcywjvNiMmEqKmBbJ/J7S2KV8L1nxV6qOOykzQ1hI/ 80h/AM6PLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:55 2026 by rpki-client