This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: CQaq7MsSFw7FadUOMwF9duDr5icTbqg7tvmiYnteS/M= Subject key identifier: 01:DB:79:85:43:75:CE:94:C5:CF:2E:44:61:3E:5F:24:AD:B3:8E:9E Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 66E2E167177FAC754C2EB0B1AFAF2E270D266835 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 02:45:57 +0000 Manifest this update: Sun 25 Jan 2026 02:40:57 +0000 Manifest next update: Mon 26 Jan 2026 06:35:57 +0000 Files and hashes: 1: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 2: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 464bopKxNkq8SHNpd73ti8t3gZZ2DffQY48p3cc4ujE=) 3: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e2:e1:67:17:7f:ac:75:4c:2e:b0:b1:af:af:2e:27:0d:26:68:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Jan 25 02:40:57 2026 GMT Not After : Jan 26 06:35:57 2026 GMT Subject: CN=01DB79854375CE94C5CF2E44613E5F24ADB38E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:7a:5c:27:c4:e1:67:51:83:9e:a6:d9:83: 81:ef:74:86:65:c5:0c:52:15:b9:0f:47:ef:71:f4: 83:a9:ae:8d:3f:f1:98:86:24:09:ed:09:cb:d7:42: 39:eb:af:76:21:d3:f4:a2:1a:dc:da:1e:02:1e:aa: 78:99:b4:b7:b3:a9:14:a5:55:d3:c9:1d:a3:68:a2: f1:72:8e:ef:e8:9b:4f:a6:c5:c2:b1:ec:d8:fa:c1: c8:d6:6a:42:b3:f5:f6:60:44:fb:f2:84:b5:5a:0d: 20:5f:ae:45:3c:a5:e7:84:2b:2e:56:0b:c0:73:3e: ec:45:4f:5f:04:8d:dc:30:e6:99:59:b3:e1:b9:74: 65:ff:c4:6e:26:af:83:68:37:2e:97:54:42:83:42: a9:c0:5d:0d:3e:c8:2a:d1:62:bc:98:8b:10:77:b6: 7f:a4:d5:2c:b2:5c:8e:3b:c5:6b:f6:f3:db:8f:4a: ea:dd:4f:ee:2a:44:f4:02:47:cd:6c:59:d5:3e:85: c3:fc:b9:b8:17:99:b4:d4:78:81:2f:12:8c:0a:5e: 59:84:53:17:4e:b7:69:7e:8e:70:8f:a2:76:f1:98: 88:08:0c:18:65:9a:cb:3d:76:a8:c8:4a:63:69:31: 78:18:90:18:4f:7f:26:a0:88:e6:86:2c:53:f9:3e: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:79:85:43:75:CE:94:C5:CF:2E:44:61:3E:5F:24:AD:B3:8E:9E X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6e:14:93:3b:8a:50:e3:0f:a1:70:62:4b:41:d7:f7:f6:3e: 33:72:8c:25:b0:bb:0a:a3:2d:fe:c5:c1:44:b5:b4:4c:99:f0: 7c:7d:dd:b0:34:fd:cf:21:20:d8:4d:9d:b3:13:87:12:1d:75: 51:3c:b1:e9:9e:00:e0:08:9f:d5:6e:ed:c9:26:69:1a:b2:cf: 65:c2:e8:42:fd:e7:0c:36:df:57:39:85:9c:78:96:4b:d3:ee: 3f:9a:f4:c7:ec:26:58:57:93:32:06:48:aa:e3:78:cb:56:4d: 28:58:59:55:59:d7:c7:ba:9e:1e:f7:6d:96:c2:3b:45:67:13: 32:a4:ef:de:4a:80:a1:1a:1a:3a:0f:7f:5f:d1:05:ad:9d:7b: 16:3c:64:ee:30:6c:50:c5:c0:66:b9:8e:7a:15:87:21:bd:e7: e6:47:98:d9:93:67:e1:b4:4d:3a:75:4d:da:0d:ea:ba:63:8d: 7e:c5:6b:d7:85:f2:e5:03:d0:ea:e9:aa:7d:33:30:c4:f9:aa: 05:b7:da:cd:cd:82:90:5d:a5:dc:45:74:01:65:a5:52:86:25: ab:79:bd:10:a4:1e:51:c6:24:89:9d:29:9e:ed:35:cc:c3:d5: 76:b2:0f:51:c5:ba:e8:49:9c:e1:c2:89:f3:de:6c:a4:0a:b6: f6:52:98:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZuLhZxd/rHVMLrCxr68uJw0maDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjAxMjUwMjQwNTdaFw0yNjAxMjYwNjM1NTdaMDMxMTAvBgNV BAMTKDAxREI3OTg1NDM3NUNFOTRDNUNGMkU0NDYxM0U1RjI0QURCMzhFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYMXpcJ8ThZ1GDnqbZg4HvdIZl xQxSFbkPR+9x9IOpro0/8ZiGJAntCcvXQjnrr3Yh0/SiGtzaHgIeqniZtLezqRSl VdPJHaNoovFyju/om0+mxcKx7Nj6wcjWakKz9fZgRPvyhLVaDSBfrkU8peeEKy5W C8BzPuxFT18Ejdww5plZs+G5dGX/xG4mr4NoNy6XVEKDQqnAXQ0+yCrRYryYixB3 tn+k1SyyXI47xWv289uPSurdT+4qRPQCR81sWdU+hcP8ubgXmbTUeIEvEowKXlmE UxdOt2l+jnCPonbxmIgIDBhlmss9dqjISmNpMXgYkBhPfyagiOaGLFP5PqxVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAdt5hUN1zpTFzy5EYT5fJK2zjp4wHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL24UkzuKUOMP oXBiS0HX9/Y+M3KMJbC7CqMt/sXBRLW0TJnwfH3dsDT9zyEg2E2dsxOHEh11UTyx 6Z4A4Aif1W7tySZpGrLPZcLoQv3nDDbfVzmFnHiWS9PuP5r0x+wmWFeTMgZIquN4 y1ZNKFhZVVnXx7qeHvdtlsI7RWcTMqTv3kqAoRoaOg9/X9EFrZ17Fjxk7jBsUMXA ZrmOehWHIb3n5keY2ZNn4bRNOnVN2g3qumONfsVr14Xy5QPQ6umqfTMwxPmqBbfa zc2CkF2l3EV0AWWlUoYlq3m9EKQeUcYkiZ0pnu01zMPVdrIPUcW66Emc4cKJ895s pAq29lKYiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:51 2026 by rpki-client