This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: ipqRsJdStkXSlq2FHvllPB58n7iUxlQJVs/dqN5Ji9k= Subject key identifier: 92:0E:3F:91:43:FD:2E:74:73:C6:93:2F:FD:EF:89:0E:CE:78:9A:6C Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 39893931877AE1156DCA50F4598A28C57D83EEDF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:10:57 +0000 Manifest this update: Sat 24 Jan 2026 17:05:57 +0000 Manifest next update: Sun 25 Jan 2026 17:38:57 +0000 Files and hashes: 1: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 2: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: BfhbXY4vq2T3QWAYwzpRfhptx+7YtVV8SrSdh4m2gFE=) 5: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:89:39:31:87:7a:e1:15:6d:ca:50:f4:59:8a:28:c5:7d:83:ee:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jan 24 17:05:57 2026 GMT Not After : Jan 25 17:38:57 2026 GMT Subject: CN=920E3F9143FD2E7473C6932FFDEF890ECE789A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:d1:5f:a8:83:82:ce:f6:08:fc:e3:81:68: 2f:3e:bd:28:c9:27:53:65:da:3f:94:cc:0f:e1:a7: 76:56:93:be:dd:f3:54:2c:5d:ff:cf:71:dc:bd:ac: c6:4f:f0:50:3b:67:cb:71:a4:29:b3:da:63:3d:f4: 8e:fe:31:f2:b5:8e:58:91:f4:d0:a7:b4:a9:96:6b: a1:88:14:c4:ec:cc:aa:b0:01:a8:8c:d2:6c:4c:10: 3b:51:c4:6e:c1:5c:b8:55:e6:7c:ad:4b:96:27:c3: da:25:1d:0f:61:4d:d7:69:bb:c5:40:e9:ae:52:a5: 91:73:b2:ab:16:c7:8d:b6:f2:c3:73:ed:86:33:34: 39:78:1a:7c:b4:45:a3:58:ea:c5:e8:c6:f5:c4:00: 54:44:67:7a:e7:73:ca:87:8f:b6:88:68:58:83:52: 6b:47:dc:a2:2b:fe:b5:45:00:f5:fc:de:3c:37:cf: 17:7b:e3:5a:b3:2b:be:0a:68:4c:7b:5c:bc:a0:8d: c2:20:9f:08:08:d7:57:1f:93:dc:bf:c3:cd:f2:7f: 05:d1:38:37:e4:a3:c2:7b:42:0c:f9:8d:76:55:36: 30:f3:47:ec:15:43:93:43:ab:df:63:64:88:22:a1: 66:d4:f9:85:5c:db:e4:4d:2e:ec:ac:79:a6:0e:11: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0E:3F:91:43:FD:2E:74:73:C6:93:2F:FD:EF:89:0E:CE:78:9A:6C X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fd:81:d4:eb:34:13:50:5c:72:6e:77:62:42:e9:33:01:c3: 84:4b:0f:4c:9f:1b:34:4d:30:7b:40:aa:61:7a:3f:db:35:89: 33:d8:02:0c:04:f1:4c:bb:72:b5:a9:c0:27:30:36:c5:2e:dc: ce:7a:e2:9f:2e:38:90:e3:2e:ff:2b:f7:1b:f6:a0:21:db:c7: f2:84:b2:ea:93:c9:87:6e:22:3c:be:4a:95:36:36:ad:59:a7: d5:19:eb:0e:fb:8d:9d:a4:fa:68:7e:56:a1:dc:0c:31:d4:d0: a2:1c:74:38:9a:86:52:fe:b9:43:3a:e1:0d:29:4c:e9:2d:22: 05:d1:6c:cc:0a:85:de:cf:eb:64:e4:58:ff:a2:02:c7:a6:f9: b5:04:cc:0a:19:a6:03:9f:59:80:58:43:44:c7:98:94:9c:bc: 8e:28:ef:a5:06:df:75:e4:82:48:e7:37:f9:f4:fd:c7:b1:6c: 41:61:1f:21:03:85:14:2b:12:4f:d7:34:fe:95:32:19:31:da: e4:2f:f9:ac:b8:bf:f2:70:0b:fe:a0:15:88:c7:24:d3:1b:f7: 0d:70:1b:bf:03:35:15:47:47:31:5e:1b:26:ec:19:7f:24:c4: 57:39:e9:84:68:f2:65:ef:0c:ed:4f:ef:87:8e:1d:d0:13:5c: b4:2e:70:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOYk5MYd64RVtylD0WYooxX2D7t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjAxMjQxNzA1NTdaFw0yNjAxMjUxNzM4NTdaMDMxMTAvBgNV BAMTKDkyMEUzRjkxNDNGRDJFNzQ3M0M2OTMyRkZERUY4OTBFQ0U3ODlBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEC9FfqIOCzvYI/OOBaC8+vSjJ J1Nl2j+UzA/hp3ZWk77d81QsXf/Pcdy9rMZP8FA7Z8txpCmz2mM99I7+MfK1jliR 9NCntKmWa6GIFMTszKqwAaiM0mxMEDtRxG7BXLhV5nytS5Ynw9olHQ9hTddpu8VA 6a5SpZFzsqsWx4228sNz7YYzNDl4Gny0RaNY6sXoxvXEAFREZ3rnc8qHj7aIaFiD UmtH3KIr/rVFAPX83jw3zxd741qzK74KaEx7XLygjcIgnwgI11cfk9y/w83yfwXR ODfko8J7Qgz5jXZVNjDzR+wVQ5NDq99jZIgioWbU+YVc2+RNLuyseaYOEaZVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkg4/kUP9LnRzxpMv/e+JDs54mmwwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/2B1Os0E1Bc cm53YkLpMwHDhEsPTJ8bNE0we0CqYXo/2zWJM9gCDATxTLtytanAJzA2xS7cznri ny44kOMu/yv3G/agIdvH8oSy6pPJh24iPL5KlTY2rVmn1RnrDvuNnaT6aH5WodwM MdTQohx0OJqGUv65QzrhDSlM6S0iBdFszAqF3s/rZORY/6ICx6b5tQTMChmmA59Z gFhDRMeYlJy8jijvpQbfdeSCSOc3+fT9x7FsQWEfIQOFFCsST9c0/pUyGTHa5C/5 rLi/8nAL/qAViMck0xv3DXAbvwM1FUdHMV4bJuwZfyTEVznphGjyZe8M7U/vh44d 0BNctC5weA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:04 2026 by rpki-client