This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json) Hash identifier: iJ2AjuhO9h0oOBLJf8d3Vk/G7ktsy95KdHm+KY3wtNk= Subject key identifier: 18:34:1B:B1:3D:27:0E:B8:1C:C9:90:7E:F4:D2:2B:84:5A:4B:B7:2E Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036 Certificate serial: 67CC351D3FBD2BD71E65DF2956DA8F34E0226472 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:06:02 +0000 Manifest this update: Sun 25 Jan 2026 10:01:02 +0000 Manifest next update: Mon 26 Jan 2026 13:02:02 +0000 Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: r2QJtqY+QdrEepMiAVVzSFwJOQDgmICSY42160wQXkY=) 2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cc:35:1d:3f:bd:2b:d7:1e:65:df:29:56:da:8f:34:e0:22:64:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036 Validity Not Before: Jan 25 10:01:02 2026 GMT Not After : Jan 26 13:02:02 2026 GMT Subject: CN=18341BB13D270EB81CC9907EF4D22B845A4BB72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:2a:ea:8c:bc:a6:52:2b:98:a5:0c:99:9f: 4f:90:ca:0a:e7:ca:82:a5:33:a5:79:86:f7:95:d2: e2:7f:22:ca:ba:18:84:02:52:9e:09:65:0d:55:d1: 26:e5:d7:eb:b0:99:04:43:60:ff:a0:ec:ef:a6:84: c1:69:63:c0:36:2f:e5:46:0a:a1:d6:74:64:5b:78: 8e:e7:e0:b7:5e:8c:54:4b:15:4e:8b:5c:bc:7d:9a: a8:56:5b:68:e0:b5:48:ac:3d:b0:7c:dd:e4:e2:66: 50:da:3e:1a:df:df:74:83:e6:54:77:37:11:85:8a: d4:24:b0:02:63:9c:05:ce:69:91:a9:04:8c:de:2c: 4b:e2:96:69:e9:72:a7:a9:1c:f2:c2:63:e9:36:3d: ef:d2:d3:02:1f:fb:9a:d3:d3:b2:94:15:36:50:7e: ac:db:62:20:d8:00:81:72:a5:ce:a7:94:04:fd:cd: fe:b1:83:03:b9:e1:2f:e6:af:2d:12:48:9c:14:53: f2:21:58:31:98:72:56:e2:f7:b0:cc:8d:53:bf:e9: 18:98:8c:3c:c3:60:bf:9a:2b:83:46:8f:27:ec:53: 34:8c:72:7d:57:99:3d:77:3d:bb:f8:75:ee:e0:de: 71:f5:f3:10:a3:d8:cc:18:2a:a3:74:b1:c7:96:02: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:34:1B:B1:3D:27:0E:B8:1C:C9:90:7E:F4:D2:2B:84:5A:4B:B7:2E X509v3 Authority Key Identifier: keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9b:ff:44:f0:5b:b7:0b:3c:35:75:24:93:77:3e:e0:1d:40: 54:4d:11:65:00:f2:c8:2f:93:c3:6d:32:a5:b3:6a:89:d4:22: dc:11:13:d1:69:91:4c:7c:8a:d1:32:22:e8:28:2f:1f:c4:3e: e9:75:63:10:f3:45:bf:03:46:5b:71:d9:96:7e:89:6c:a6:19: 43:d7:ab:3f:d3:62:25:a0:df:a1:aa:a1:1b:bc:7f:79:87:fe: 1f:0c:ac:d9:9b:ef:11:59:2d:85:dd:c5:cc:e9:3f:9f:0f:2f: bc:4e:a1:94:44:f6:e2:76:84:bb:94:65:1b:6b:e5:f7:c4:c1: 3e:07:14:e8:7e:08:69:a9:9d:ce:f8:ee:42:05:df:b7:74:78: a3:19:22:c9:a6:d7:04:43:11:04:4a:63:6f:34:0c:97:40:51: ec:3c:7f:cc:ad:ff:31:91:3a:f6:fd:3c:16:a4:f6:00:82:d1: ca:68:2c:f2:a0:6a:e0:4b:b4:1d:2f:1e:8a:06:13:84:d6:1b: b3:7c:39:09:9c:eb:6e:fb:f3:7e:22:04:55:84:49:37:6a:3d: 45:c7:f9:df:01:72:90:e5:66:ea:c5:99:d8:fb:27:0a:7c:9c: 7f:3d:9d:6b:fd:e8:67:d3:dd:b3:56:92:ad:9b:f4:ed:b1:b9: 70:37:8a:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ8w1HT+9K9ceZd8pVtqPNOAiZHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2 ODc3NjAzNjAeFw0yNjAxMjUxMDAxMDJaFw0yNjAxMjYxMzAyMDJaMDMxMTAvBgNV BAMTKDE4MzQxQkIxM0QyNzBFQjgxQ0M5OTA3RUY0RDIyQjg0NUE0QkI3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCirqjLymUiuYpQyZn0+Qygrn yoKlM6V5hveV0uJ/Isq6GIQCUp4JZQ1V0Sbl1+uwmQRDYP+g7O+mhMFpY8A2L+VG CqHWdGRbeI7n4LdejFRLFU6LXLx9mqhWW2jgtUisPbB83eTiZlDaPhrf33SD5lR3 NxGFitQksAJjnAXOaZGpBIzeLEvilmnpcqepHPLCY+k2Pe/S0wIf+5rT07KUFTZQ fqzbYiDYAIFypc6nlAT9zf6xgwO54S/mry0SSJwUU/IhWDGYclbi97DMjVO/6RiY jDzDYL+aK4NGjyfsUzSMcn1XmT13Pbv4de7g3nH18xCj2MwYKqN0sceWAgGtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGDQbsT0nDrgcyZB+9NIrhFpLty4wHwYDVR0j BBgwFoAUlOcQ7L0raZSYx1+pJZNHrGh3YDYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDYxODg4MS8wLzk0RTcxMEVDQkQyQjY5OTQ5OEM3NUZBOTI1OTM0 N0FDNjg3NzYwMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2ODc3NjAzNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2MTg4ODEvMC85NEU3MTBFQ0JEMkI2 OTk0OThDNzVGQTkyNTkzNDdBQzY4Nzc2MDM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpv/RPBbtws8 NXUkk3c+4B1AVE0RZQDyyC+Tw20ypbNqidQi3BET0WmRTHyK0TIi6CgvH8Q+6XVj EPNFvwNGW3HZln6JbKYZQ9erP9NiJaDfoaqhG7x/eYf+Hwys2ZvvEVkthd3FzOk/ nw8vvE6hlET24naEu5RlG2vl98TBPgcU6H4IaamdzvjuQgXft3R4oxkiyabXBEMR BEpjbzQMl0BR7Dx/zK3/MZE69v08FqT2AILRymgs8qBq4Eu0HS8eigYThNYbs3w5 CZzrbvvzfiIEVYRJN2o9Rcf53wFykOVm6sWZ2PsnCnycfz2da/3oZ9Pds1aSrZv0 7bG5cDeKtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:53 2026 by rpki-client