This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft (raw, json) Hash identifier: eknFZBdp8ylK786DbMqSRwsxtqQWMLHKOGVmL2iLmKs= Subject key identifier: D4:7F:E5:4C:EF:2C:82:13:73:59:C5:CC:35:54:7F:CE:B4:34:16:F1 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2E03D8BC0D675680B7BF6584B97C1FC4C238E4A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 16:00:57 +0000 Manifest this update: Sat 24 Jan 2026 15:55:57 +0000 Manifest next update: Sun 25 Jan 2026 19:13:57 +0000 Files and hashes: 1: 34332e3234382e38302e302f32302d3230203d3e203633353637.roa (hash: VkQGCtVJyviO04wqgZyxJPSPG8lvhM5uDjyNdvHCq8s=) 2: 34332e3234312e35312e302f32342d3234203d3e203633353637.roa (hash: xNq1x6rcWhlJtcLVmOS0CcdqSWIQcrWdeplRGbxlLaE=) 3: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl (hash: of5bCgPKd+i/09vxriDqWq2Y1tit8b9DpPvSWXXfrUk=) 4: 34332e3232362e39362e302f32302d3230203d3e203633353637.roa (hash: Fmf8TYs3zzXnLl9iq8IFZg7QuqhisyZN3WSiZItCZJA=) 5: 34332e3234372e39322e302f32322d3232203d3e203633353637.roa (hash: TWBPIceMErTmM3bBa5s13kmWazMVd/xcv4XaT8mek6s=) 6: 34332e3234382e3138342e302f32312d3231203d3e2034383337.roa (hash: jawpvfpnIh9qGodp6c/NHrzmXHiczZ41m82UYVYjACE=) 7: 34332e3234382e3138342e302f32312d3231203d3e203633353637.roa (hash: AIOWf2rnd3G5ICGkvrsyQlCoBqqePcJfvboxXn3EeP4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:03:d8:bc:0d:67:56:80:b7:bf:65:84:b9:7c:1f:c4:c2:38:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 24 15:55:57 2026 GMT Not After : Jan 25 19:13:57 2026 GMT Subject: CN=D47FE54CEF2C82137359C5CC35547FCEB43416F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:8f:55:e6:49:c7:63:2a:09:86:24:06:be: c1:f9:ac:45:61:27:7f:cf:62:5c:f9:65:1f:e3:f6: 32:37:5a:4c:2d:68:a8:7a:bf:26:f2:95:9e:a2:75: 88:cb:8b:05:e7:07:4c:40:2f:74:fb:90:d5:12:29: 44:18:8b:0d:29:b1:45:a8:22:8c:75:24:0b:0d:2d: ea:69:6f:8d:b1:2d:eb:61:d7:ed:a5:e1:72:b6:67: d1:37:92:7d:8f:46:4e:ca:52:63:de:f2:66:2f:b1: 18:40:5b:e9:77:cd:42:a2:fc:ef:78:a6:c2:5b:99: 5e:d7:7c:05:c3:e0:e6:28:e1:a3:3d:96:d5:59:a7: 11:4b:33:52:8b:29:7a:39:2d:ca:45:c6:d9:08:2b: aa:e4:0a:1e:9c:71:d3:f0:6d:e3:3f:ad:62:ec:14: 87:c9:24:c2:ba:94:50:80:64:63:ee:57:20:a6:51: c6:d9:4b:3a:6d:b0:cb:a1:53:d7:10:79:f6:56:9a: 99:c1:50:d4:c5:5f:4e:b9:e3:23:0f:ff:68:d4:12: 12:41:f9:25:f6:02:ae:4d:b4:6d:77:26:95:fb:04: fa:93:73:ad:16:93:ae:fd:51:f1:e2:72:33:66:26: 2b:cb:6e:f1:52:7c:82:91:5f:a5:1d:58:5f:49:a1: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7F:E5:4C:EF:2C:82:13:73:59:C5:CC:35:54:7F:CE:B4:34:16:F1 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d6:26:cf:e7:11:0f:e8:17:6f:a8:e0:12:23:dd:00:d6:83: d2:65:8d:a7:7c:a2:1a:2e:93:fd:dd:e3:ab:73:6b:05:86:25: a6:d0:d0:4e:2f:1a:56:2d:83:af:c1:a2:a6:b6:8c:4c:d9:72: 24:89:86:11:e3:a2:62:a8:7c:d6:9d:23:a3:b1:50:29:dc:38: 57:ac:fb:83:e5:30:a7:ca:09:66:40:f5:cc:fd:68:1b:d4:82: 72:1f:f3:91:9d:f2:24:13:7c:16:12:46:0e:b6:8d:e6:d1:91: 6f:39:c6:f9:bc:08:f8:7a:27:a2:ac:f1:8f:fb:38:fb:e0:cb: 75:54:6b:09:a5:ab:da:75:08:25:67:40:1e:7f:a8:47:26:49: 3d:52:d6:42:65:e4:89:5c:b2:7d:01:5e:b0:a6:01:5e:94:d9: a1:15:f4:5c:81:f2:13:52:bc:95:32:81:87:d3:7a:ad:48:7a: 63:21:5a:79:f7:97:9d:91:b3:da:91:89:22:7c:40:b9:bc:9e: 58:bb:74:65:ce:67:06:ae:b6:1b:f9:7e:31:18:e9:61:ff:9f: 84:22:0e:06:5f:0a:b9:3c:9f:3d:fe:38:81:de:b4:d6:e0:eb: fb:fd:97:35:3f:b0:af:cb:80:d4:f9:1e:92:3b:ac:80:1e:a7: 8b:68:dc:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULgPYvA1nVoC3v2WEuXwfxMI45KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjQxNTU1NTdaFw0yNjAxMjUxOTEzNTdaMDMxMTAvBgNV BAMTKEQ0N0ZFNTRDRUYyQzgyMTM3MzU5QzVDQzM1NTQ3RkNFQjQzNDE2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6J49V5knHYyoJhiQGvsH5rEVh J3/PYlz5ZR/j9jI3WkwtaKh6vybylZ6idYjLiwXnB0xAL3T7kNUSKUQYiw0psUWo Iox1JAsNLeppb42xLeth1+2l4XK2Z9E3kn2PRk7KUmPe8mYvsRhAW+l3zUKi/O94 psJbmV7XfAXD4OYo4aM9ltVZpxFLM1KLKXo5LcpFxtkIK6rkCh6ccdPwbeM/rWLs FIfJJMK6lFCAZGPuVyCmUcbZSzptsMuhU9cQefZWmpnBUNTFX0654yMP/2jUEhJB +SX2Aq5NtG13JpX7BPqTc60Wk679UfHicjNmJivLbvFSfIKRX6UdWF9JoYx7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1H/lTO8sghNzWcXMNVR/zrQ0FvEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC83MUM5QkZFNEM4RkQ3 RTc3N0ExQzlFNTVERkE2MEEzQUMyOUEyNTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdYmz+cRD+gX b6jgEiPdANaD0mWNp3yiGi6T/d3jq3NrBYYlptDQTi8aVi2Dr8GipraMTNlyJImG EeOiYqh81p0jo7FQKdw4V6z7g+Uwp8oJZkD1zP1oG9SCch/zkZ3yJBN8FhJGDraN 5tGRbznG+bwI+Honoqzxj/s4++DLdVRrCaWr2nUIJWdAHn+oRyZJPVLWQmXkiVyy fQFesKYBXpTZoRX0XIHyE1K8lTKBh9N6rUh6YyFaefeXnZGz2pGJInxAubyeWLt0 Zc5nBq62G/l+MRjpYf+fhCIOBl8KuTyfPf44gd601uDr+/2XNT+wr8uA1Pkekjus gB6ni2jcsg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:18 2026 by rpki-client