This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: gbZ8feRgXpgg4cn/iPCpe/S3jNeZR7pDLfECiX5Cqc0= Subject key identifier: A7:77:E7:1D:0B:76:28:70:FB:C6:87:E8:94:92:92:12:BE:8A:74:48 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 7C366A78464249A03925A92550045D63527F9B0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:20:58 +0000 Manifest this update: Sun 25 Jan 2026 08:15:58 +0000 Manifest next update: Mon 26 Jan 2026 09:40:58 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: /wYr63lz9vBxR8psxxjhpUMai/M/NSglKK6n87Mr43Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:36:6a:78:46:42:49:a0:39:25:a9:25:50:04:5d:63:52:7f:9b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Jan 25 08:15:58 2026 GMT Not After : Jan 26 09:40:58 2026 GMT Subject: CN=A777E71D0B762870FBC687E894929212BE8A7448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:4f:e2:bb:6d:62:53:ef:ee:82:e0:0c:30: e9:82:be:72:42:f9:05:51:6c:90:14:02:c1:07:42: 8e:65:7c:e5:7f:0d:5e:9d:a3:14:18:03:eb:19:f9: 9d:57:aa:de:a9:70:ce:77:c3:84:4e:53:0d:b0:7b: 44:82:fc:dc:65:34:9f:37:53:07:0b:5f:b6:96:26: ce:80:1b:34:19:c5:33:18:0f:83:d1:d5:86:99:34: 93:7f:aa:61:ec:9a:4d:cc:1b:92:a8:e6:a8:85:6a: d0:49:e1:1a:70:04:24:ff:5c:2f:42:43:0d:45:9f: 6a:f6:bc:8f:5b:1b:15:58:7a:65:89:db:20:de:07: 59:76:df:0f:ab:f8:6e:df:5a:1e:fe:68:ff:3a:b1: 54:5f:b7:dc:8a:20:35:1b:bb:1a:0a:49:6d:3f:ca: 01:b6:f1:b5:53:1b:18:79:c6:d2:c9:6d:2a:a5:75: c2:a0:c0:93:8c:3c:c6:80:12:95:e1:ce:89:66:d0: ab:da:f7:e3:8f:20:c6:5c:15:73:33:be:e5:8f:56: 19:3f:63:94:ac:ab:64:ea:34:b4:f6:b9:51:2d:ce: ef:4a:6d:a5:b3:b8:77:e9:2e:98:48:64:d9:0f:50: 21:85:26:48:a4:2f:20:a2:29:b5:8e:c4:c4:54:5a: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:77:E7:1D:0B:76:28:70:FB:C6:87:E8:94:92:92:12:BE:8A:74:48 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:a9:cc:61:8a:6d:5a:16:55:a9:5f:ae:ed:48:2d:c3:0d: f7:6e:15:07:c8:e4:e6:ee:d6:69:65:f8:c3:57:a6:0a:a6:28: 2b:92:a0:db:5d:84:9b:3a:37:8a:f3:79:55:eb:21:f5:5a:94: 0f:06:67:b2:6f:25:bb:12:4c:74:7e:7c:02:22:a1:ba:20:17: f9:f2:51:85:62:bf:3a:ca:ce:a4:f3:8e:29:1d:2e:67:d9:18: 39:2c:62:1a:32:2b:7f:ea:3b:8b:79:29:c8:a0:d9:b7:38:9e: ae:ba:13:a4:94:c1:b1:cc:23:05:aa:a5:3e:e7:20:a4:09:97: 42:b8:af:98:e9:8c:3b:fd:78:e4:8c:95:5b:fc:3a:d4:88:61: e8:d1:79:6d:fa:28:86:88:02:68:f5:19:a8:7a:e1:0a:d7:c3: d5:9f:e1:61:8a:12:39:63:38:6b:d6:71:67:56:6a:58:7f:fc: 3d:50:ac:be:1c:84:6b:5a:51:ea:a0:27:4b:14:be:76:e7:75: 0d:74:fa:d0:d9:87:79:75:57:1c:c5:36:61:17:ee:8f:18:95: 6a:77:78:00:87:5b:0f:ab:c4:28:fe:85:81:0b:59:77:9a:5a: c2:20:a6:32:30:03:6c:5a:c6:8a:3d:8e:47:05:01:38:5f:03: 57:49:e2:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfDZqeEZCSaA5JaklUARdY1J/mwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjAxMjUwODE1NThaFw0yNjAxMjYwOTQwNThaMDMxMTAvBgNV BAMTKEE3NzdFNzFEMEI3NjI4NzBGQkM2ODdFODk0OTI5MjEyQkU4QTc0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCre0/iu21iU+/uguAMMOmCvnJC +QVRbJAUAsEHQo5lfOV/DV6doxQYA+sZ+Z1Xqt6pcM53w4ROUw2we0SC/NxlNJ83 UwcLX7aWJs6AGzQZxTMYD4PR1YaZNJN/qmHsmk3MG5Ko5qiFatBJ4RpwBCT/XC9C Qw1Fn2r2vI9bGxVYemWJ2yDeB1l23w+r+G7fWh7+aP86sVRft9yKIDUbuxoKSW0/ ygG28bVTGxh5xtLJbSqldcKgwJOMPMaAEpXhzolm0Kva9+OPIMZcFXMzvuWPVhk/ Y5Ssq2TqNLT2uVEtzu9KbaWzuHfpLphIZNkPUCGFJkikLyCiKbWOxMRUWlIlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp3fnHQt2KHD7xofolJKSEr6KdEgwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXypzGGKbVoW Valfru1ILcMN924VB8jk5u7WaWX4w1emCqYoK5Kg212Emzo3ivN5Vesh9VqUDwZn sm8luxJMdH58AiKhuiAX+fJRhWK/OsrOpPOOKR0uZ9kYOSxiGjIrf+o7i3kpyKDZ tzierroTpJTBscwjBaqlPucgpAmXQrivmOmMO/145IyVW/w61Ihh6NF5bfoohogC aPUZqHrhCtfD1Z/hYYoSOWM4a9ZxZ1ZqWH/8PVCsvhyEa1pR6qAnSxS+dud1DXT6 0NmHeXVXHMU2YRfujxiVand4AIdbD6vEKP6FgQtZd5pawiCmMjADbFrGij2ORwUB OF8DV0niMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:27 2026 by rpki-client