This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: VgjtuVZjIqVQnPK6bVMeczGytldSkV1GVLOj+1Z5gfg= Subject key identifier: 60:E6:96:27:9C:A8:05:CE:A3:FB:34:C3:CF:79:6B:9D:34:48:76:77 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 66922742533FF5637D65918F6AE27A4BA56B2B67 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 16:25:57 +0000 Manifest this update: Sat 24 Jan 2026 16:20:57 +0000 Manifest next update: Sun 25 Jan 2026 19:58:57 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 2: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 3: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: h9GMNXrkozmgQ3hrBJNlahj5wz5s9DYg2d0GAJQglh0=) 4: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 5: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:92:27:42:53:3f:f5:63:7d:65:91:8f:6a:e2:7a:4b:a5:6b:2b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jan 24 16:20:57 2026 GMT Not After : Jan 25 19:58:57 2026 GMT Subject: CN=60E696279CA805CEA3FB34C3CF796B9D34487677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:2c:53:4f:6f:1a:fb:34:5a:90:e3:53:cd: 97:a7:92:d6:24:b5:08:26:25:91:6b:8e:6d:ff:f0: 55:dc:41:0d:69:0d:e0:99:2b:a0:48:48:13:f4:20: 27:d4:c7:88:a9:a6:2f:22:d8:e8:d9:6c:9b:92:56: 7a:db:3d:69:72:d6:35:7a:f9:a4:fd:ae:87:35:38: e4:ce:57:d5:cd:10:37:f3:db:d4:3b:bd:ef:e1:a9: e3:01:d0:f3:ac:3e:dd:d9:59:40:d2:61:e5:9d:5d: e0:68:e7:3d:e2:3d:11:ad:c6:0b:bc:ea:c5:9a:3a: e4:fa:4d:4e:bf:17:04:3b:fa:06:90:3f:d3:72:c0: af:c8:bd:7c:29:03:e5:c7:9f:bc:56:ab:3c:99:16: 69:11:e8:34:a2:24:71:35:86:67:58:e6:65:a1:cf: a2:c8:9b:2c:7e:c1:36:9e:88:73:ee:a7:1c:6d:95: 49:13:e7:90:99:4c:09:49:74:d0:4f:e7:95:c8:0c: 33:2a:52:45:4d:b1:51:5d:d2:b8:b5:43:4e:8a:18: 11:29:24:d2:89:fd:44:87:8b:ee:c5:2b:5b:07:bb: 61:e5:c5:a5:56:ed:33:c2:f8:b5:4e:5a:a2:91:b3: 15:85:85:9c:8a:9b:49:79:79:24:fd:18:27:f3:c5: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:96:27:9C:A8:05:CE:A3:FB:34:C3:CF:79:6B:9D:34:48:76:77 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:37:ff:5d:09:48:e3:e9:77:5d:e4:22:9c:98:3e:33:38:6c: 56:3b:7f:d2:54:70:dc:df:db:31:dd:a7:34:29:1c:55:32:f2: e3:6c:1b:5b:d8:01:c9:24:31:6c:39:16:8a:b6:cf:c7:08:16: 54:e3:8e:07:15:07:2d:87:d4:94:4d:88:64:34:51:80:47:bf: d6:ec:66:b6:d9:9f:d1:8b:50:24:99:c6:c1:4b:b0:ad:22:69: 5a:09:47:b5:f4:4c:13:48:ed:60:d7:b3:68:9b:13:5e:10:c2: 81:a8:24:40:b8:66:e5:ce:50:31:e9:8d:e6:52:61:6f:0c:f3: 60:97:3a:a5:ab:27:f2:61:eb:10:f3:39:86:b2:11:2e:f9:65: 7e:c2:2f:fb:05:53:7f:4e:84:2a:de:32:bf:24:c2:9a:21:b4: b6:64:2f:47:13:c9:86:73:9a:f2:85:46:7b:54:e3:df:a9:5a: c7:92:78:ab:11:a8:37:f3:d6:70:18:c9:5f:d1:7b:40:28:b2: 9e:e1:2d:e7:15:25:f3:c3:9e:6f:18:4e:da:fd:67:48:55:28: f8:01:d2:64:f1:0b:d0:ce:ce:65:63:3d:46:22:3a:1b:67:97: 11:4a:96:c0:9e:88:24:f2:ac:72:44:8d:d2:38:c3:16:b2:4e: 5b:5a:ce:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZpInQlM/9WN9ZZGPauJ6S6VrK2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAxMjQxNjIwNTdaFw0yNjAxMjUxOTU4NTdaMDMxMTAvBgNV BAMTKDYwRTY5NjI3OUNBODA1Q0VBM0ZCMzRDM0NGNzk2QjlEMzQ0ODc2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zixTT28a+zRakONTzZenktYk tQgmJZFrjm3/8FXcQQ1pDeCZK6BISBP0ICfUx4ippi8i2OjZbJuSVnrbPWly1jV6 +aT9roc1OOTOV9XNEDfz29Q7ve/hqeMB0POsPt3ZWUDSYeWdXeBo5z3iPRGtxgu8 6sWaOuT6TU6/FwQ7+gaQP9NywK/IvXwpA+XHn7xWqzyZFmkR6DSiJHE1hmdY5mWh z6LImyx+wTaeiHPupxxtlUkT55CZTAlJdNBP55XIDDMqUkVNsVFd0ri1Q06KGBEp JNKJ/USHi+7FK1sHu2HlxaVW7TPC+LVOWqKRsxWFhZyKm0l5eST9GCfzxcLdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYOaWJ5yoBc6j+zTDz3lrnTRIdncwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTf/XQlI4+l3 XeQinJg+MzhsVjt/0lRw3N/bMd2nNCkcVTLy42wbW9gBySQxbDkWirbPxwgWVOOO BxUHLYfUlE2IZDRRgEe/1uxmttmf0YtQJJnGwUuwrSJpWglHtfRME0jtYNezaJsT XhDCgagkQLhm5c5QMemN5lJhbwzzYJc6pasn8mHrEPM5hrIRLvllfsIv+wVTf06E Kt4yvyTCmiG0tmQvRxPJhnOa8oVGe1Tj36lax5J4qxGoN/PWcBjJX9F7QCiynuEt 5xUl88OebxhO2v1nSFUo+AHSZPEL0M7OZWM9RiI6G2eXEUqWwJ6IJPKsckSN0jjD FrJOW1rOLw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:48 2026 by rpki-client