This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json) Hash identifier: Pp6qZEsqbvtzYudpO8HDn6iGFkb3rGmGXFAl1Wpz+KM= Subject key identifier: 9C:0F:A8:9C:F2:F8:7D:FB:96:DD:D8:6E:F4:3B:B8:28:AF:BB:EA:E6 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 13F1B5A7E58FB64EC8ADA461F949BD3F6245220F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:45:57 +0000 Manifest this update: Sun 25 Jan 2026 06:40:57 +0000 Manifest next update: Mon 26 Jan 2026 07:38:57 +0000 Files and hashes: 1: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=) 2: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: B9+LIF0F2jOmyBOP5MaMAIvmuw1Q1Po92LV0UMNnbWk=) 3: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: QEARkNRXrr5S/JuqPcLWL9nFD5LpvuqcQKyCm7DCiUM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f1:b5:a7:e5:8f:b6:4e:c8:ad:a4:61:f9:49:bd:3f:62:45:22:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Jan 25 06:40:57 2026 GMT Not After : Jan 26 07:38:57 2026 GMT Subject: CN=9C0FA89CF2F87DFB96DDD86EF43BB828AFBBEAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:ed:b3:1d:51:39:bf:22:2a:1c:9a:62:c5: 2d:1b:0b:4e:0d:b1:7e:96:11:d4:8e:ec:6e:67:db: 7c:bc:b6:0c:64:fb:89:be:69:c7:34:7f:42:ec:e4: 5e:66:5c:2f:d8:e7:19:3e:f5:60:ae:3c:b8:dd:99: fa:d4:46:24:4b:41:c5:e4:85:78:53:9b:26:1f:dc: 2d:88:ba:ec:8f:e1:21:57:48:a4:71:7b:91:17:77: 46:b3:1f:86:d0:6f:e6:63:e2:4d:dc:27:7f:57:13: 08:03:1e:55:48:d3:66:32:1f:7a:86:5a:2e:65:0a: 19:fd:39:e4:55:47:9e:5a:98:d7:58:a3:48:2d:c9: 84:0c:79:b5:16:b6:4f:fc:80:20:8d:12:ee:53:df: 98:f8:1b:e8:d3:39:a9:a6:64:83:1f:ff:70:72:73: 2d:ed:ce:f1:f5:52:50:3e:5b:bc:ec:c4:7d:d8:ea: c8:46:a1:7f:5c:53:82:cc:4a:7f:7b:66:1b:27:05: f4:68:42:84:73:2b:0c:1a:98:67:eb:69:30:15:36: 68:f5:5f:88:5d:4f:77:b0:19:0d:83:b0:79:0a:27: 9e:ed:4d:47:87:af:93:65:90:c3:4d:12:df:95:99: ab:dc:1b:01:ed:79:f5:26:d2:4e:d7:d6:eb:77:b1: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:A8:9C:F2:F8:7D:FB:96:DD:D8:6E:F4:3B:B8:28:AF:BB:EA:E6 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:db:84:88:4a:24:81:da:cc:e4:73:03:d7:33:8e:51:bd:91: 99:3c:73:f2:51:97:e5:05:08:75:c8:7a:15:27:64:16:eb:82: 18:fa:ee:3c:22:70:64:b4:31:59:e0:9f:92:22:0d:71:64:10: 6c:ac:ac:52:66:5f:d6:8c:b7:88:04:00:87:b2:b9:e8:aa:1c: 1d:04:1e:b0:94:33:df:0b:7e:df:bc:f7:07:3a:3d:09:9a:60: 99:47:a6:44:02:93:11:b2:2c:5f:22:b2:e0:63:ad:50:18:a9: 8c:bc:5b:04:e8:19:2b:c2:fa:12:22:3d:80:72:2d:75:11:ab: cf:81:c6:39:ad:e2:e6:1b:0e:70:94:ec:d7:c8:59:4f:b4:83: ad:73:27:d9:bf:bb:74:f4:20:78:5b:ce:b1:eb:5f:81:e4:4d: 11:d5:a0:8c:b2:77:8a:84:43:71:a4:6f:84:09:e1:a5:63:ff: 5b:1c:1a:f1:97:41:42:a7:29:37:28:c6:0d:24:0f:4c:cf:3d: a4:f5:60:89:1b:46:ec:35:bb:32:3c:ff:37:e0:c6:7a:25:9a: b4:c3:47:df:9b:8f:1c:d9:bf:c8:f5:8f:2c:17:9f:fe:e0:48: ed:b7:0d:09:a9:13:f9:4c:8e:a6:f1:1f:68:99:b3:41:b9:ee: fe:ee:0a:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE/G1p+WPtk7IraRh+Um9P2JFIg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjAxMjUwNjQwNTdaFw0yNjAxMjYwNzM4NTdaMDMxMTAvBgNV BAMTKDlDMEZBODlDRjJGODdERkI5NkRERDg2RUY0M0JCODI4QUZCQkVBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d+2zHVE5vyIqHJpixS0bC04N sX6WEdSO7G5n23y8tgxk+4m+acc0f0Ls5F5mXC/Y5xk+9WCuPLjdmfrURiRLQcXk hXhTmyYf3C2IuuyP4SFXSKRxe5EXd0azH4bQb+Zj4k3cJ39XEwgDHlVI02YyH3qG Wi5lChn9OeRVR55amNdYo0gtyYQMebUWtk/8gCCNEu5T35j4G+jTOammZIMf/3By cy3tzvH1UlA+W7zsxH3Y6shGoX9cU4LMSn97ZhsnBfRoQoRzKwwamGfraTAVNmj1 X4hdT3ewGQ2DsHkKJ57tTUeHr5NlkMNNEt+VmavcGwHtefUm0k7X1ut3sYB5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnA+onPL4ffuW3dhu9Du4KK+76uYwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9uEiEokgdrM 5HMD1zOOUb2RmTxz8lGX5QUIdch6FSdkFuuCGPruPCJwZLQxWeCfkiINcWQQbKys UmZf1oy3iAQAh7K56KocHQQesJQz3wt+37z3Bzo9CZpgmUemRAKTEbIsXyKy4GOt UBipjLxbBOgZK8L6EiI9gHItdRGrz4HGOa3i5hsOcJTs18hZT7SDrXMn2b+7dPQg eFvOsetfgeRNEdWgjLJ3ioRDcaRvhAnhpWP/Wxwa8ZdBQqcpNyjGDSQPTM89pPVg iRtG7DW7Mjz/N+DGeiWatMNH35uPHNm/yPWPLBef/uBI7bcNCakT+UyOpvEfaJmz Qbnu/u4KJA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:28 2026 by rpki-client