This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: yKGrfBdK4EoMY3VMbjeB9/1/0CrqDfEk9ULYWk+9pUo= Subject key identifier: 97:43:53:3C:5D:1A:F0:B9:6D:A4:43:D5:CA:AE:E8:ED:BB:37:0E:B9 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 164FE65642E5037E8E489BBDF6FBD4A56FE996A4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:45:57 +0000 Manifest this update: Sat 24 Jan 2026 15:40:57 +0000 Manifest next update: Sun 25 Jan 2026 17:01:57 +0000 Files and hashes: 1: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) 2: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) 3: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 4: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: zaLaQ5o8N16eg/0sEaQeLiLnS08YnvY0Gi4wTVWx3WU=) 5: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) 6: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) 7: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 8: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) 9: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4f:e6:56:42:e5:03:7e:8e:48:9b:bd:f6:fb:d4:a5:6f:e9:96:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Jan 24 15:40:57 2026 GMT Not After : Jan 25 17:01:57 2026 GMT Subject: CN=9743533C5D1AF0B96DA443D5CAAEE8EDBB370EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:ab:bb:d3:75:f4:de:13:9a:82:83:5c:bb: 0b:97:31:4a:11:b1:f2:96:65:cf:e6:67:b9:c9:90: a2:f3:a5:92:1f:db:d1:4f:2a:74:e3:d2:f8:25:db: 46:14:f9:23:3f:d4:ad:03:38:63:15:62:24:6b:81: ac:94:c7:5b:82:98:fb:06:0c:ed:dc:7d:71:58:c3: b8:80:52:1a:65:8e:a9:f9:8c:dd:5a:6e:24:6b:24: 3b:e3:4d:ef:24:eb:8c:48:18:cb:bc:6a:66:a3:98: 65:9f:ec:93:ee:ef:f6:98:30:90:bf:24:ee:a4:78: be:a0:0b:03:e6:13:77:cf:0d:ba:ee:f0:49:08:83: b3:2d:cf:5c:ae:09:81:81:03:32:0e:d0:ba:94:f9: 90:95:08:32:0f:88:3b:2b:a7:92:d1:55:14:8c:c5: 0f:71:cc:25:55:31:40:db:a1:7a:55:7a:76:5e:e0: 76:fe:d1:cd:84:9b:58:12:d2:01:0f:32:dd:66:c7: c3:02:42:da:7f:bd:05:ed:98:4e:41:80:1d:90:54: 1a:72:a4:09:b5:2f:19:e9:78:60:f7:6e:cc:05:ec: b4:b1:81:aa:14:a8:a8:94:a3:b3:10:75:b9:d9:7c: d3:31:f2:5b:c3:8a:90:be:17:e2:0f:b5:34:8e:6b: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:53:3C:5D:1A:F0:B9:6D:A4:43:D5:CA:AE:E8:ED:BB:37:0E:B9 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:84:5c:63:4e:c6:b6:b8:47:fd:ac:2d:a6:f7:39:8f:c3: 2f:ab:f3:ce:57:f3:0b:0d:78:90:d3:0d:a2:18:ad:58:77:24: 32:2c:e1:7c:df:9b:2a:92:8c:eb:55:62:c0:eb:b6:50:87:56: b9:cb:a6:2b:7d:f7:11:17:91:83:d0:27:27:c8:52:d0:8d:2e: 3c:5e:f3:ba:b6:43:e7:36:d3:08:1c:72:4b:0b:3d:72:0e:ab: 48:b9:2d:72:2b:6c:05:fe:0f:a9:ea:ba:82:91:e4:5b:47:d6: f1:3c:d7:8b:0c:56:1b:aa:1b:94:90:30:d0:f7:53:b9:b9:1d: 52:69:db:1c:b6:91:cd:c2:5d:16:c7:91:ef:d1:ff:6e:5e:13: f4:f1:71:f7:a3:9c:c0:cc:dd:e4:d0:6a:b7:3a:92:f4:c8:0c: a4:20:b9:03:b2:ab:66:2a:2c:86:e2:6a:07:4c:6f:6a:7c:0e: 34:99:7b:15:35:d1:b9:fd:fc:c4:b4:55:14:73:2b:89:f9:cd: 32:21:ba:e3:c4:ef:e5:7b:b2:02:27:f0:ae:40:62:32:d4:03: 83:d2:ab:b7:d7:60:d2:1e:52:52:40:fc:8f:37:2a:76:72:cd: 2b:61:9d:56:4f:85:75:54:ec:3a:f5:e0:37:06:c4:c3:52:61: 19:c4:d4:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFk/mVkLlA36OSJu99vvUpW/plqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAxMjQxNTQwNTdaFw0yNjAxMjUxNzAxNTdaMDMxMTAvBgNV BAMTKDk3NDM1MzNDNUQxQUYwQjk2REE0NDNENUNBQUVFOEVEQkIzNzBFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvqu703X03hOagoNcuwuXMUoR sfKWZc/mZ7nJkKLzpZIf29FPKnTj0vgl20YU+SM/1K0DOGMVYiRrgayUx1uCmPsG DO3cfXFYw7iAUhpljqn5jN1abiRrJDvjTe8k64xIGMu8amajmGWf7JPu7/aYMJC/ JO6keL6gCwPmE3fPDbru8EkIg7Mtz1yuCYGBAzIO0LqU+ZCVCDIPiDsrp5LRVRSM xQ9xzCVVMUDboXpVenZe4Hb+0c2Em1gS0gEPMt1mx8MCQtp/vQXtmE5BgB2QVBpy pAm1LxnpeGD3bswF7LSxgaoUqKiUo7MQdbnZfNMx8lvDipC+F+IPtTSOa/OFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl0NTPF0a8LltpEPVyq7o7bs3DrkwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAKEXGNOxra4 R/2sLab3OY/DL6vzzlfzCw14kNMNohitWHckMizhfN+bKpKM61ViwOu2UIdWucum K333EReRg9AnJ8hS0I0uPF7zurZD5zbTCBxySws9cg6rSLktcitsBf4Pqeq6gpHk W0fW8TzXiwxWG6oblJAw0PdTubkdUmnbHLaRzcJdFseR79H/bl4T9PFx96OcwMzd 5NBqtzqS9MgMpCC5A7KrZioshuJqB0xvanwONJl7FTXRuf38xLRVFHMrifnNMiG6 48Tv5XuyAifwrkBiMtQDg9Krt9dg0h5SUkD8jzcqdnLNK2GdVk+FdVTsOvXgNwbE w1JhGcTUDA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:48 2026 by rpki-client