This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json) Hash identifier: O20koUxA4GP2tFpem8kHGgQR3P5XEHnWdGb/yhDV/aw= Subject key identifier: 84:F3:5D:A8:5C:23:AE:D9:A1:71:F7:27:4B:8B:4E:06:15:AB:0B:EB Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977 Certificate serial: 5C3830BD9BF28CC0E6257E6BA20A5C15D7B092D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:01:02 +0000 Manifest this update: Sun 25 Jan 2026 09:56:02 +0000 Manifest next update: Mon 26 Jan 2026 12:46:02 +0000 Files and hashes: 1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: P98bWkkVWVv+XfE0j2gNei9PCM9BAuxqVb7EddsaznI=) 2: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=) 3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=) 4: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:38:30:bd:9b:f2:8c:c0:e6:25:7e:6b:a2:0a:5c:15:d7:b0:92:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977 Validity Not Before: Jan 25 09:56:02 2026 GMT Not After : Jan 26 12:46:02 2026 GMT Subject: CN=84F35DA85C23AED9A171F7274B8B4E0615AB0BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:19:f8:33:89:fc:45:5a:1a:6a:9f:bd:e8: 21:69:8a:bc:fb:70:7c:34:b9:3a:de:d5:28:ab:11: 20:36:cb:d4:6a:ce:c0:6a:01:6d:73:1e:ef:a1:9b: 5b:68:a0:46:5a:45:35:a8:0b:f9:d4:90:d3:78:d7: 56:60:1d:0c:f7:19:29:46:87:2b:dd:49:60:34:bb: 3e:45:87:14:fd:8b:e7:98:21:31:6b:4f:02:1d:5e: c2:92:3c:d2:5f:78:2d:cc:ea:c2:35:92:77:6b:c7: 8a:ab:ae:65:9f:cb:f2:95:20:6a:0b:95:d1:c8:11: 5e:95:32:e0:6f:59:e8:f0:6c:cb:70:9c:31:b6:10: c8:3e:46:30:13:dd:f0:46:53:bb:c7:85:2f:d8:60: 39:71:13:a8:f4:ab:4c:71:19:ef:a2:ad:c8:e4:d3: 86:68:62:42:1d:06:2f:c9:e2:d6:d8:36:d6:57:40: ea:dc:46:27:e9:29:fb:eb:40:49:23:55:f1:97:dc: 9a:0f:7f:3e:31:68:27:c1:fc:41:b5:2a:aa:47:ad: 93:22:d0:93:2b:60:13:40:f9:c4:fa:f6:2f:c3:e9: 75:ea:9d:4d:12:42:88:53:96:4f:ab:1b:80:4c:e9: 04:c4:86:00:bf:52:26:65:c2:4a:cf:51:cd:15:e1: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F3:5D:A8:5C:23:AE:D9:A1:71:F7:27:4B:8B:4E:06:15:AB:0B:EB X509v3 Authority Key Identifier: keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:4c:38:1a:47:a8:87:b4:6f:6d:9e:9b:42:8b:ec:d1:86:c8: 26:9a:e7:c9:62:40:d4:63:47:b8:dd:c8:fe:fc:98:0b:fe:04: 39:5f:09:3d:fd:cb:b6:90:ea:ec:86:ac:10:04:15:4e:49:bb: bd:14:77:f4:a6:6c:9d:7e:cb:1b:ba:a8:7e:02:fb:91:4e:fe: 55:4a:a1:1f:f9:51:f5:e6:d1:99:46:ec:bb:eb:f0:27:13:68: 7d:94:a0:16:34:c3:8b:36:34:97:a9:92:5d:4e:8e:15:71:5c: e8:b9:5f:c2:4d:57:b4:8b:ce:ea:45:f0:f0:72:0b:24:c9:15: 36:b7:89:5f:a0:7c:81:1f:f6:19:f8:2a:fb:23:15:80:c2:63: 85:6a:ae:c2:1d:03:cb:d4:95:77:44:17:07:64:85:51:1b:28: c4:8a:f6:c8:f9:51:ad:fe:e0:dc:27:82:92:d7:a7:08:12:23: 12:fd:14:80:9d:66:3d:19:44:76:f0:27:e3:96:c8:c4:9a:a2: cd:a4:46:cc:fc:ba:42:5a:bc:70:56:32:e6:2b:b8:a2:21:f3: b2:9f:4e:c3:eb:d9:79:f2:05:9f:8a:1e:0e:99:54:77:f2:22: be:e6:62:2d:25:bc:a5:08:ad:5d:a0:94:62:f3:c2:ae:b0:3f: 7b:ad:6e:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXDgwvZvyjMDmJX5rogpcFdewktQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5 NDI3OTk3NzAeFw0yNjAxMjUwOTU2MDJaFw0yNjAxMjYxMjQ2MDJaMDMxMTAvBgNV BAMTKDg0RjM1REE4NUMyM0FFRDlBMTcxRjcyNzRCOEI0RTA2MTVBQjBCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStBn4M4n8RVoaap+96CFpirz7 cHw0uTre1SirESA2y9RqzsBqAW1zHu+hm1tooEZaRTWoC/nUkNN411ZgHQz3GSlG hyvdSWA0uz5FhxT9i+eYITFrTwIdXsKSPNJfeC3M6sI1kndrx4qrrmWfy/KVIGoL ldHIEV6VMuBvWejwbMtwnDG2EMg+RjAT3fBGU7vHhS/YYDlxE6j0q0xxGe+ircjk 04ZoYkIdBi/J4tbYNtZXQOrcRifpKfvrQEkjVfGX3JoPfz4xaCfB/EG1KqpHrZMi 0JMrYBNA+cT69i/D6XXqnU0SQohTlk+rG4BM6QTEhgC/UiZlwkrPUc0V4WJ7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhPNdqFwjrtmhcfcnS4tOBhWrC+swHwYDVR0j BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2 MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUw4Gkeoh7Rv bZ6bQovs0YbIJprnyWJA1GNHuN3I/vyYC/4EOV8JPf3LtpDq7IasEAQVTkm7vRR3 9KZsnX7LG7qofgL7kU7+VUqhH/lR9ebRmUbsu+vwJxNofZSgFjTDizY0l6mSXU6O FXFc6Llfwk1XtIvO6kXw8HILJMkVNreJX6B8gR/2Gfgq+yMVgMJjhWquwh0Dy9SV d0QXB2SFURsoxIr2yPlRrf7g3CeCktenCBIjEv0UgJ1mPRlEdvAn45bIxJqizaRG zPy6Qlq8cFYy5iu4oiHzsp9Ow+vZefIFn4oeDplUd/IivuZiLSW8pQitXaCUYvPC rrA/e61u+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:57 2026 by rpki-client