This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: gyMu/vQeLtRZ1q/Btoc/S1YQr/Rig2I11txZrJ2aqKI= Subject key identifier: EC:52:0F:74:21:A0:64:E4:C4:59:BF:DE:08:71:EE:C6:17:FB:E1:EE Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 5E95AFD84B501D3E76454F53008C24BF3BBD68EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 18:45:57 +0000 Manifest this update: Sat 24 Jan 2026 18:40:57 +0000 Manifest next update: Sun 25 Jan 2026 19:18:57 +0000 Files and hashes: 1: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: QQYAMk1XFmysE0dNoUeD6kyDVWsUL+vF7l33pp/bRK8=) 2: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) 3: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 4: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 5: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) 6: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) 7: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:95:af:d8:4b:50:1d:3e:76:45:4f:53:00:8c:24:bf:3b:bd:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Jan 24 18:40:57 2026 GMT Not After : Jan 25 19:18:57 2026 GMT Subject: CN=EC520F7421A064E4C459BFDE0871EEC617FBE1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:3b:49:2d:45:2f:e0:28:b1:bc:65:b1:1d: 60:f2:59:73:3f:58:56:93:0b:cb:2f:a8:6d:a0:c8: 20:56:c5:ca:01:4d:65:0e:b3:38:2c:58:7e:aa:9f: 58:78:1e:de:ba:ca:ac:46:3f:3c:ed:ee:78:98:b8: f2:ca:43:a2:cb:c5:77:d8:19:1a:e1:02:d7:c9:bc: bb:88:41:b7:eb:8b:ba:17:3b:74:d6:60:32:b9:47: 35:56:e6:d6:a2:de:67:a2:6a:b7:25:d1:19:c7:21: 78:40:14:9d:80:81:b3:7a:79:33:3a:b8:ae:7c:5e: 5d:ae:64:ce:58:41:59:08:59:28:dd:be:4a:53:aa: d0:f7:1c:59:34:c0:5a:2d:92:fd:70:42:cb:7d:d8: b8:41:7b:e6:6b:51:7e:39:16:5b:ee:fc:f1:1b:9b: ee:3d:fd:b5:f3:24:87:e5:ab:3b:28:e6:4b:7a:61: aa:dd:06:d4:e4:19:50:25:ab:00:b4:ab:7b:f1:5f: 75:79:37:29:ac:ba:d5:41:b7:da:a1:a8:06:35:33: b0:b6:c7:05:cd:a9:dd:65:2f:34:f8:c4:5f:71:ca: 3d:5d:4b:d6:bf:3e:83:84:5c:3d:db:f6:41:f1:d3: 2f:bb:fc:b8:10:fb:b8:16:c3:10:ba:b7:bf:e1:45: a6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:52:0F:74:21:A0:64:E4:C4:59:BF:DE:08:71:EE:C6:17:FB:E1:EE X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:2f:e2:e3:84:66:9d:7a:c6:08:e9:79:ac:be:30:83:21: ed:d8:e3:49:41:94:b2:be:b4:70:e3:55:f7:88:a0:a3:89:08: b2:5e:74:e5:8f:81:96:ef:6b:1b:7b:fc:5e:aa:6e:1f:f3:c8: ac:de:df:43:ae:d3:d8:34:69:ca:96:e2:a8:11:f1:6f:d5:73: 56:32:c1:3a:34:34:88:b0:70:4e:2a:07:12:22:52:c5:ad:70: 05:76:6f:99:3f:63:00:aa:60:c9:d3:ff:91:a3:31:d2:b1:91: ee:75:3c:5d:51:02:49:c3:aa:d5:48:d2:f8:41:ff:f7:90:b5: 7f:21:88:55:72:33:7c:13:0a:28:ba:b7:a2:b0:31:eb:77:6f: 46:d8:52:0d:ec:de:34:c7:e5:97:d0:63:15:22:9f:67:42:00: 99:b6:f1:5c:09:a2:7a:77:2b:ca:85:2e:42:66:42:ad:76:d9: 2f:69:3e:a4:9b:eb:19:8c:12:fb:d7:5a:62:09:d8:35:41:25: 84:7f:e8:20:89:0f:69:27:67:d9:28:6d:ed:07:b4:dd:f7:d3: c1:56:9b:a6:15:a9:fc:bc:7a:1a:8a:99:c7:bf:b2:61:f5:70: d6:2f:78:6c:38:18:ad:ca:33:a9:c0:bc:83:76:5c:d4:51:b7: 24:05:8d:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXpWv2EtQHT52RU9TAIwkvzu9aO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjAxMjQxODQwNTdaFw0yNjAxMjUxOTE4NTdaMDMxMTAvBgNV BAMTKEVDNTIwRjc0MjFBMDY0RTRDNDU5QkZERTA4NzFFRUM2MTdGQkUxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ETtJLUUv4CixvGWxHWDyWXM/ WFaTC8svqG2gyCBWxcoBTWUOszgsWH6qn1h4Ht66yqxGPzzt7niYuPLKQ6LLxXfY GRrhAtfJvLuIQbfri7oXO3TWYDK5RzVW5tai3meiarcl0RnHIXhAFJ2AgbN6eTM6 uK58Xl2uZM5YQVkIWSjdvkpTqtD3HFk0wFotkv1wQst92LhBe+ZrUX45Flvu/PEb m+49/bXzJIflqzso5kt6YardBtTkGVAlqwC0q3vxX3V5NymsutVBt9qhqAY1M7C2 xwXNqd1lLzT4xF9xyj1dS9a/PoOEXD3b9kHx0y+7/LgQ+7gWwxC6t7/hRaYnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7FIPdCGgZOTEWb/eCHHuxhf74e4wHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4gv4uOEZp16 xgjpeay+MIMh7djjSUGUsr60cONV94igo4kIsl505Y+Blu9rG3v8XqpuH/PIrN7f Q67T2DRpypbiqBHxb9VzVjLBOjQ0iLBwTioHEiJSxa1wBXZvmT9jAKpgydP/kaMx 0rGR7nU8XVECScOq1UjS+EH/95C1fyGIVXIzfBMKKLq3orAx63dvRthSDezeNMfl l9BjFSKfZ0IAmbbxXAmiencryoUuQmZCrXbZL2k+pJvrGYwS+9daYgnYNUElhH/o IIkPaSdn2Sht7Qe03ffTwVabphWp/Lx6GoqZx7+yYfVw1i94bDgYrcozqcC8g3Zc 1FG3JAWNpg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:53 2026 by rpki-client