This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: Y3HrtABke8NQoxWvpaaqREwGsouFvrrZ8vR3RCFYDy0= Subject key identifier: 9C:54:77:DC:C0:23:E3:E4:C6:62:2E:08:16:62:74:A7:22:63:49:0C Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 378467161386651B70C32D0A281864E4304BBF3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:35:57 +0000 Manifest this update: Sun 25 Jan 2026 03:30:57 +0000 Manifest next update: Mon 26 Jan 2026 06:32:57 +0000 Files and hashes: 1: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: y2SRCWmpUedZFx8u62Oz57Xx4Swx9z4EosR73C0T7ww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:84:67:16:13:86:65:1b:70:c3:2d:0a:28:18:64:e4:30:4b:bf:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Jan 25 03:30:57 2026 GMT Not After : Jan 26 06:32:57 2026 GMT Subject: CN=9C5477DCC023E3E4C6622E08166274A72263490C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:06:e9:46:50:dd:d7:b8:47:e3:b3:dd:c5:a8: e9:d8:67:62:38:9b:e8:4d:ec:04:a4:4b:ea:49:2e: 61:c9:d8:a1:34:7b:38:8e:f1:df:86:ee:83:04:2b: f3:1c:47:26:57:14:87:52:b7:3d:80:37:e1:70:6e: 37:6b:bf:c5:e6:ca:8d:a0:a5:49:ff:08:27:17:f4: 51:f9:d9:b4:d8:bc:84:86:c6:1b:0a:20:25:5c:d5: bb:63:74:87:91:a5:a3:2c:fc:71:5a:74:b1:5e:c7: d2:bf:7f:35:9a:a9:1b:2c:67:bd:06:a5:42:69:bb: 54:c3:eb:9f:9c:03:09:c4:75:36:0d:75:43:f3:73: f6:bb:2a:f3:c9:84:93:90:39:04:7b:cd:e4:01:61: 66:62:05:a4:75:06:21:36:23:f4:95:c5:79:7c:74: eb:77:e9:47:33:da:ec:14:b1:22:d8:94:1c:cf:2b: 2b:97:69:6d:e5:f8:42:52:df:56:81:5f:26:90:11: a1:01:9c:ca:02:bd:a4:ed:f5:6a:4a:f6:73:50:23: a1:d1:a2:b2:d0:e9:8b:e7:5f:06:65:38:f0:40:b4: 73:4d:b3:b7:a1:7f:10:b8:bf:64:8c:72:79:43:c3: 59:ea:4c:d2:47:2e:2b:c1:b0:e1:72:72:1d:81:ae: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:54:77:DC:C0:23:E3:E4:C6:62:2E:08:16:62:74:A7:22:63:49:0C X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:10:82:5e:ca:1d:c6:02:30:5b:a5:31:8e:1d:bb:38:51:91: 0f:6f:32:e9:d3:e2:1f:e5:b1:7f:b4:2f:8d:5c:bf:b6:d7:20: 9e:7a:28:cf:98:2d:91:5c:69:9f:d0:41:f1:c4:6e:ed:d9:2f: e4:07:82:f1:97:ee:66:3d:ab:6c:52:b5:84:fa:45:a3:e0:17: 78:79:83:97:ae:1b:0f:60:38:3a:02:84:36:16:86:9b:e8:f7: 43:48:fc:db:4b:00:16:2b:d0:37:4b:f2:3b:51:ff:c6:40:e0: ba:64:08:0f:3e:c7:e4:10:c2:53:43:85:f8:31:be:b6:be:d2: b7:0a:2e:1a:c3:59:d9:4a:dd:47:bc:98:e9:69:ed:7f:d4:cc: 39:6d:c1:aa:f1:c6:dd:a7:db:bf:f7:8e:1b:27:70:b1:6a:07: e7:52:d7:9f:d4:f4:63:9f:89:f0:fe:2f:b1:72:89:c9:c4:2e: 03:63:cb:c8:f0:23:cd:55:35:75:5a:f4:52:00:e7:8b:af:89: 32:07:27:01:f5:d2:e8:26:68:c5:be:99:eb:e3:cd:6c:e4:39: da:34:e5:b8:58:14:18:93:18:0c:71:c2:d1:07:c9:2a:a6:a4: 22:61:09:fa:1f:23:13:bd:62:ee:02:1c:cb:04:9c:96:d3:96: 30:eb:cf:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN4RnFhOGZRtwwy0KKBhk5DBLvzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjAxMjUwMzMwNTdaFw0yNjAxMjYwNjMyNTdaMDMxMTAvBgNV BAMTKDlDNTQ3N0RDQzAyM0UzRTRDNjYyMkUwODE2NjI3NEE3MjI2MzQ5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBulGUN3XuEfjs93FqOnYZ2I4 m+hN7ASkS+pJLmHJ2KE0eziO8d+G7oMEK/McRyZXFIdStz2AN+Fwbjdrv8Xmyo2g pUn/CCcX9FH52bTYvISGxhsKICVc1btjdIeRpaMs/HFadLFex9K/fzWaqRssZ70G pUJpu1TD65+cAwnEdTYNdUPzc/a7KvPJhJOQOQR7zeQBYWZiBaR1BiE2I/SVxXl8 dOt36Ucz2uwUsSLYlBzPKyuXaW3l+EJS31aBXyaQEaEBnMoCvaTt9WpK9nNQI6HR orLQ6YvnXwZlOPBAtHNNs7ehfxC4v2SMcnlDw1nqTNJHLivBsOFych2BrvcxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnFR33MAj4+TGYi4IFmJ0pyJjSQwwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRCCXsodxgIw W6Uxjh27OFGRD28y6dPiH+Wxf7QvjVy/ttcgnnooz5gtkVxpn9BB8cRu7dkv5AeC 8ZfuZj2rbFK1hPpFo+AXeHmDl64bD2A4OgKENhaGm+j3Q0j820sAFivQN0vyO1H/ xkDgumQIDz7H5BDCU0OF+DG+tr7StwouGsNZ2UrdR7yY6Wntf9TMOW3BqvHG3afb v/eOGydwsWoH51LXn9T0Y5+J8P4vsXKJycQuA2PLyPAjzVU1dVr0UgDni6+JMgcn AfXS6CZoxb6Z6+PNbOQ52jTluFgUGJMYDHHC0QfJKqakImEJ+h8jE71i7gIcywSc ltOWMOvPFg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:22 2026 by rpki-client