This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: tjoZikyfFjAB4Jd2+XNnKVLYPBkQ7ca9BTcd5AsFdnI= Subject key identifier: 93:94:E1:49:AE:BA:15:C3:28:52:11:9F:BA:EB:B8:73:2C:AF:E5:F3 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 36B2B0D4C3C42DE9748000D9128B11261742AFBF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 14:00:57 +0000 Manifest this update: Sat 24 Jan 2026 13:55:57 +0000 Manifest next update: Sun 25 Jan 2026 17:56:57 +0000 Files and hashes: 1: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 2: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 3: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: YTEvZLOq7IKjO4AcXA2m28IOUa+cq5QGc3akReL6hNM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b2:b0:d4:c3:c4:2d:e9:74:80:00:d9:12:8b:11:26:17:42:af:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jan 24 13:55:57 2026 GMT Not After : Jan 25 17:56:57 2026 GMT Subject: CN=9394E149AEBA15C32852119FBAEBB8732CAFE5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:fd:98:77:aa:60:3a:f1:82:b1:1a:62:4f: 31:65:e0:71:4b:53:68:1b:38:6a:80:74:97:d8:0d: dc:f0:b3:e9:90:db:9d:60:6b:79:89:13:b5:99:4b: 08:cb:f7:ea:9f:cc:62:5c:f9:19:5a:c0:94:19:b3: ff:89:f5:6c:3f:46:f6:1f:dd:73:79:ff:ca:0d:47: 71:8b:2b:9b:04:db:c2:91:f7:c6:9f:c4:30:88:2b: 47:72:fb:94:99:c9:21:61:7b:3f:86:b9:7a:27:ea: 7a:8e:e5:cf:e2:af:7f:08:1e:b8:95:ec:2f:8c:ed: df:f3:d8:ad:51:42:a0:54:6b:c8:8f:67:6d:7b:8e: 85:8c:86:e9:2b:a3:7d:2d:99:6d:33:21:8f:03:09: 4b:65:56:55:24:ca:6a:be:c1:64:3a:93:4a:57:53: 9f:29:25:87:0e:54:48:6f:ac:94:35:fa:63:5e:4b: 36:20:00:63:7e:6d:1d:62:87:0d:ac:1f:1b:e2:fc: 76:54:0a:90:3b:6d:b2:0b:a0:64:f2:3b:be:d0:32: f5:4d:0e:7d:cd:20:43:62:da:bf:59:79:b8:09:fd: cb:9f:53:2d:ee:9a:7e:dc:95:05:11:ed:b2:37:f0: 5f:3d:21:93:0b:f1:82:9e:56:2e:90:a6:66:67:12: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:94:E1:49:AE:BA:15:C3:28:52:11:9F:BA:EB:B8:73:2C:AF:E5:F3 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a8:23:e1:42:48:dc:a8:02:b2:90:5c:8f:ea:95:0f:93:f5: a7:d9:32:e6:1e:0a:49:f8:df:bb:81:4f:ce:8e:f3:0a:f8:eb: b3:aa:b7:20:36:89:85:f6:46:3d:e3:24:ed:8c:a5:70:16:1e: d6:05:03:74:cd:d3:f7:67:97:b9:32:45:00:75:34:2d:2d:9d: 77:55:e0:20:df:6f:db:03:db:db:3e:14:70:c8:4a:d7:4e:5f: b7:77:c0:89:1e:af:5b:01:07:52:d1:ff:5d:20:a7:d6:3e:73: 85:82:79:96:bf:80:33:09:7c:be:be:69:a5:87:1c:1d:f2:54: ba:06:04:75:b2:b7:0f:82:d3:e7:a1:f3:88:c8:ea:be:ae:c6: 1f:41:32:fb:9d:be:2b:7d:33:f7:b0:b2:0d:ff:49:53:74:6a: 81:51:9c:96:76:ba:66:a6:1e:d2:05:9a:d4:e9:cc:23:e4:ea: 35:91:23:42:55:21:1a:30:30:a0:88:81:34:6c:13:f9:03:66: 1a:01:3e:f4:ff:79:79:00:fd:7d:f2:e2:af:d9:ac:cb:a5:e6: 90:4e:4a:ad:d5:da:a5:a5:50:91:d3:89:34:ad:71:5f:96:84: da:f4:54:16:7b:b4:b0:95:56:bf:9b:f4:d5:1b:19:f3:54:69: e8:1e:e3:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNrKw1MPELel0gADZEosRJhdCr78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjAxMjQxMzU1NTdaFw0yNjAxMjUxNzU2NTdaMDMxMTAvBgNV BAMTKDkzOTRFMTQ5QUVCQTE1QzMyODUyMTE5RkJBRUJCODczMkNBRkU1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Af2Yd6pgOvGCsRpiTzFl4HFL U2gbOGqAdJfYDdzws+mQ251ga3mJE7WZSwjL9+qfzGJc+RlawJQZs/+J9Ww/RvYf 3XN5/8oNR3GLK5sE28KR98afxDCIK0dy+5SZySFhez+GuXon6nqO5c/ir38IHriV 7C+M7d/z2K1RQqBUa8iPZ217joWMhukro30tmW0zIY8DCUtlVlUkymq+wWQ6k0pX U58pJYcOVEhvrJQ1+mNeSzYgAGN+bR1ihw2sHxvi/HZUCpA7bbILoGTyO77QMvVN Dn3NIENi2r9ZebgJ/cufUy3umn7clQUR7bI38F89IZML8YKeVi6QpmZnEvLJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk5ThSa66FcMoUhGfuuu4cyyv5fMwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVagj4UJI3KgC spBcj+qVD5P1p9ky5h4KSfjfu4FPzo7zCvjrs6q3IDaJhfZGPeMk7YylcBYe1gUD dM3T92eXuTJFAHU0LS2dd1XgIN9v2wPb2z4UcMhK105ft3fAiR6vWwEHUtH/XSCn 1j5zhYJ5lr+AMwl8vr5ppYccHfJUugYEdbK3D4LT56HziMjqvq7GH0Ey+52+K30z 97CyDf9JU3RqgVGclna6ZqYe0gWa1OnMI+TqNZEjQlUhGjAwoIiBNGwT+QNmGgE+ 9P95eQD9ffLir9msy6XmkE5KrdXapaVQkdOJNK1xX5aE2vRUFnu0sJVWv5v01RsZ 81Rp6B7jbw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:54 2026 by rpki-client