This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: s6iFHtrTuyBqkbMh0Gc+aRu0tqGqoMUwY1vevlsdfCg= Subject key identifier: D8:C9:04:9C:75:7B:6C:F6:DA:1C:4E:8A:33:13:6B:77:4B:D9:EA:6D Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 3067D9ACB5129A10CE260298FBDA18EAC72DD9A3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 13:05:57 +0000 Manifest this update: Sat 24 Jan 2026 13:00:57 +0000 Manifest next update: Sun 25 Jan 2026 15:56:57 +0000 Files and hashes: 1: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: n2SSbvs5XbkjZkdUs810ebaCkLqZdYxxLsmfAZaNaSE=) 2: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 3: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 4: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:67:d9:ac:b5:12:9a:10:ce:26:02:98:fb:da:18:ea:c7:2d:d9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Jan 24 13:00:57 2026 GMT Not After : Jan 25 15:56:57 2026 GMT Subject: CN=D8C9049C757B6CF6DA1C4E8A33136B774BD9EA6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:61:6a:15:a4:04:c4:0c:83:b3:47:21:5f: 97:1e:c5:1c:96:f7:c0:35:9a:5d:90:c9:08:13:80: d5:c2:ed:09:04:8b:e4:e0:07:fc:af:2b:ca:27:93: 0c:04:aa:bd:26:db:87:a6:a4:d8:04:cd:98:56:da: 8c:7e:41:77:40:f3:bd:d7:40:c7:bb:ab:94:ff:42: 36:a7:b5:85:ee:45:10:2a:40:0b:3b:98:d3:ef:ba: d5:f6:e5:5b:d2:6a:88:c7:24:eb:4a:f6:a4:47:83: a2:3d:3d:db:09:f7:28:53:d2:44:a8:2f:8e:16:71: 83:18:8a:1b:d3:67:b1:d7:73:c7:37:e3:e0:3c:50: 62:9a:80:ee:84:64:ab:0c:85:d8:1c:fe:a9:a1:a3: a7:01:ec:0a:3c:77:8c:84:19:14:1e:b9:fe:cc:ff: 5b:3b:87:7e:16:b4:a1:e5:4b:28:7e:57:69:29:57: 70:31:70:e1:2d:1d:2b:bc:91:e0:1a:6e:ac:fe:1c: 5b:f0:52:76:8e:72:7a:c9:af:c1:de:11:bd:62:44: 76:6d:c2:21:51:63:18:bd:e7:4d:23:12:d1:8a:c1: 97:4a:6b:c4:84:60:80:95:c8:0c:38:81:d6:1f:0f: 1a:e3:3c:e6:a4:a1:0d:12:d4:bb:fd:2f:98:ed:83: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C9:04:9C:75:7B:6C:F6:DA:1C:4E:8A:33:13:6B:77:4B:D9:EA:6D X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2a:b7:eb:62:a3:83:f7:30:8d:5e:38:d4:8f:16:a2:65:cb: 2c:37:2f:82:0b:35:22:a2:e6:23:57:e9:da:9c:17:9d:5e:0e: 33:55:53:39:75:65:18:ef:81:79:6d:24:50:bb:65:b4:6c:c0: cf:cb:d6:88:6e:00:55:8b:bd:df:a6:0d:60:2f:3b:16:8e:03: 19:7f:dd:80:f9:99:23:22:3a:9c:b3:bb:7a:45:bc:f9:85:b3: 84:fa:a7:d3:c8:18:1f:17:7b:d7:2e:a7:96:31:04:c1:ad:93: 23:22:a7:d7:d7:34:89:7f:bc:da:96:f3:fd:60:6f:1f:7f:27: 18:c9:61:23:86:93:6d:9b:74:cf:a8:48:a4:3e:d8:ae:de:fd: 33:c2:4a:92:f5:75:de:94:47:03:e4:75:d6:a7:2d:e5:3a:b7: 99:d4:c5:6a:4e:f5:67:23:50:41:a5:3a:43:b5:4e:17:26:dc: df:75:66:d1:a0:57:6d:2b:00:07:1a:10:c6:2c:78:5b:53:18: 0d:fc:23:a8:a4:81:98:93:2e:f0:32:98:20:e7:c2:3d:13:e9: 38:0f:76:f7:40:89:63:45:16:04:55:be:12:90:6a:5a:ec:fa: 90:db:95:9b:56:34:d2:25:ac:cd:60:7f:1d:c4:28:6b:b0:b8: c8:a0:2a:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMGfZrLUSmhDOJgKY+9oY6sct2aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAxMjQxMzAwNTdaFw0yNjAxMjUxNTU2NTdaMDMxMTAvBgNV BAMTKEQ4QzkwNDlDNzU3QjZDRjZEQTFDNEU4QTMzMTM2Qjc3NEJEOUVBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZGFqFaQExAyDs0chX5cexRyW 98A1ml2QyQgTgNXC7QkEi+TgB/yvK8onkwwEqr0m24empNgEzZhW2ox+QXdA873X QMe7q5T/QjantYXuRRAqQAs7mNPvutX25VvSaojHJOtK9qRHg6I9PdsJ9yhT0kSo L44WcYMYihvTZ7HXc8c34+A8UGKagO6EZKsMhdgc/qmho6cB7Ao8d4yEGRQeuf7M /1s7h34WtKHlSyh+V2kpV3AxcOEtHSu8keAabqz+HFvwUnaOcnrJr8HeEb1iRHZt wiFRYxi9500jEtGKwZdKa8SEYICVyAw4gdYfDxrjPOakoQ0S1Lv9L5jtg/eBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2MkEnHV7bPbaHE6KMxNrd0vZ6m0wHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCq362Kjg/cw jV441I8WomXLLDcvggs1IqLmI1fp2pwXnV4OM1VTOXVlGO+BeW0kULtltGzAz8vW iG4AVYu936YNYC87Fo4DGX/dgPmZIyI6nLO7ekW8+YWzhPqn08gYHxd71y6nljEE wa2TIyKn19c0iX+82pbz/WBvH38nGMlhI4aTbZt0z6hIpD7Yrt79M8JKkvV13pRH A+R11qct5Tq3mdTFak71ZyNQQaU6Q7VOFybc33Vm0aBXbSsABxoQxix4W1MYDfwj qKSBmJMu8DKYIOfCPRPpOA9290CJY0UWBFW+EpBqWuz6kNuVm1Y00iWszWB/HcQo a7C4yKAqTg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:46 2026 by rpki-client