This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: sEA77KjjrjltNm4zaHBsm3+U+z9hvjqmIlEgjl3w6Vw= Subject key identifier: 9E:8D:C5:BF:A5:61:08:71:7C:F7:2E:B3:0F:F3:DA:1B:B5:13:48:2D Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 36C7E69DE7F794C7C81BCDB48E3DDC7988A3AD02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 05:45:57 +0000 Manifest this update: Sun 25 Jan 2026 05:40:57 +0000 Manifest next update: Mon 26 Jan 2026 07:02:57 +0000 Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: 1xfRDlOEOeiycICnlVbbHF3D4IbRDgJnpmtqBhLElKk=) 2: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 3: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c7:e6:9d:e7:f7:94:c7:c8:1b:cd:b4:8e:3d:dc:79:88:a3:ad:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Jan 25 05:40:57 2026 GMT Not After : Jan 26 07:02:57 2026 GMT Subject: CN=9E8DC5BFA56108717CF72EB30FF3DA1BB513482D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:9e:2f:17:6b:f2:6f:6b:cf:5f:bd:17:47: a8:37:f8:49:8f:5d:e2:f4:ec:a0:3f:9d:e5:8a:f9: 72:1d:7c:dd:c3:a3:79:8d:3f:e7:f7:59:a0:09:ab: ab:c4:d4:be:8e:8a:ff:24:c3:3e:9f:44:5f:d3:16: 01:52:27:71:01:fb:33:37:61:27:c3:2c:3d:ac:65: 52:bb:4c:00:be:c6:93:7a:67:e2:a1:0c:95:e1:5e: 25:4b:76:f9:16:8b:cf:f7:05:33:9c:67:28:89:d5: 64:5e:77:8c:bd:58:1a:a2:c8:f8:0f:d4:77:a6:08: 62:5e:14:8f:14:64:f0:c3:14:da:a0:cc:55:57:67: 96:5f:fd:e0:16:7f:a0:13:f1:d8:74:c1:d9:76:33: 8f:ca:27:93:70:78:4c:f0:39:b5:fd:ae:d3:d8:e4: d5:bd:d6:3d:c7:cf:7b:4d:6e:f7:d4:52:70:59:69: 25:89:1c:66:7e:e8:12:8f:8b:ff:7a:86:7c:0b:11: 9d:06:5c:29:4e:c8:a1:3d:87:33:79:bd:b2:9e:69: 39:df:9f:cc:d9:0d:47:aa:86:d7:9b:86:a8:8c:3e: f9:61:fe:d1:96:71:ba:52:64:5c:4e:fa:d1:cb:20: 00:79:73:91:25:cb:c6:97:b0:7a:95:9d:16:d6:39: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:C5:BF:A5:61:08:71:7C:F7:2E:B3:0F:F3:DA:1B:B5:13:48:2D X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:57:c5:0d:f1:61:fc:45:41:af:ca:9b:21:99:c0:43:20:f1: 09:aa:85:28:57:f4:f7:a3:c0:e2:fb:db:fe:ae:e2:e8:78:69: c0:e0:22:0b:58:29:36:a1:d3:b3:05:51:a0:03:13:82:15:75: 6e:4a:d8:38:32:e5:be:00:52:6c:ab:46:63:62:55:b5:0d:24: 11:9e:87:ab:5f:54:87:90:2f:a0:07:49:a2:b0:ec:b3:3f:9f: b0:2a:5a:24:c0:d7:07:32:b4:92:fe:06:25:e8:4c:0b:60:92: 97:7b:45:55:28:9f:37:13:c4:0e:ef:2a:af:d8:70:f3:6b:a7: c5:9f:62:4a:95:6f:0c:02:06:60:bc:44:0b:3b:05:64:16:b3: c6:77:15:c2:43:ca:80:ea:62:2b:99:71:c8:6b:de:19:4c:0f: 5d:2e:d1:e5:80:23:aa:4b:95:62:24:a3:0a:f0:ac:ea:9e:f6: 9c:09:5b:13:07:47:9b:44:50:3e:42:5a:25:e0:72:99:e7:84: 3f:76:d2:b1:16:72:c7:b6:5c:d1:f2:c0:3a:39:86:41:ae:04: 25:37:b3:e8:ef:1d:01:8b:5c:4c:0f:d6:5c:26:c3:49:9d:e1: 7a:66:31:c1:83:d7:0f:63:33:f6:12:e1:a9:65:7a:d2:46:ec: aa:47:af:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNsfmnef3lMfIG820jj3ceYijrQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjAxMjUwNTQwNTdaFw0yNjAxMjYwNzAyNTdaMDMxMTAvBgNV BAMTKDlFOERDNUJGQTU2MTA4NzE3Q0Y3MkVCMzBGRjNEQTFCQjUxMzQ4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiJ4vF2vyb2vPX70XR6g3+EmP XeL07KA/neWK+XIdfN3Do3mNP+f3WaAJq6vE1L6Oiv8kwz6fRF/TFgFSJ3EB+zM3 YSfDLD2sZVK7TAC+xpN6Z+KhDJXhXiVLdvkWi8/3BTOcZyiJ1WRed4y9WBqiyPgP 1HemCGJeFI8UZPDDFNqgzFVXZ5Zf/eAWf6AT8dh0wdl2M4/KJ5NweEzwObX9rtPY 5NW91j3Hz3tNbvfUUnBZaSWJHGZ+6BKPi/96hnwLEZ0GXClOyKE9hzN5vbKeaTnf n8zZDUeqhtebhqiMPvlh/tGWcbpSZFxO+tHLIAB5c5Ely8aXsHqVnRbWOR8TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUno3Fv6VhCHF89y6zD/PaG7UTSC0wHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlfFDfFh/EVB r8qbIZnAQyDxCaqFKFf096PA4vvb/q7i6HhpwOAiC1gpNqHTswVRoAMTghV1bkrY ODLlvgBSbKtGY2JVtQ0kEZ6Hq19Uh5AvoAdJorDssz+fsCpaJMDXBzK0kv4GJehM C2CSl3tFVSifNxPEDu8qr9hw82unxZ9iSpVvDAIGYLxECzsFZBazxncVwkPKgOpi K5lxyGveGUwPXS7R5YAjqkuVYiSjCvCs6p72nAlbEwdHm0RQPkJaJeBymeeEP3bS sRZyx7Zc0fLAOjmGQa4EJTez6O8dAYtcTA/WXCbDSZ3hemYxwYPXD2Mz9hLhqWV6 0kbsqkevIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:52 2026 by rpki-client