This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: nccv1SVrWK5ifGsDgwFbVt1HK0QACxp0R07DhIkpOQ8= Subject key identifier: 51:8C:41:DF:F4:31:C0:2A:A6:DC:48:D1:92:75:B8:17:D5:15:AE:2B Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 3CF64F1EDB1FF44879CA0690AB784A66793D2DF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:40:57 +0000 Manifest this update: Sun 25 Jan 2026 07:35:57 +0000 Manifest next update: Mon 26 Jan 2026 11:09:57 +0000 Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: BEb6iFxQpQH3EtRvRS6HsxLWkz78hrM91rlJPgJ4+6A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:4f:1e:db:1f:f4:48:79:ca:06:90:ab:78:4a:66:79:3d:2d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Jan 25 07:35:57 2026 GMT Not After : Jan 26 11:09:57 2026 GMT Subject: CN=518C41DFF431C02AA6DC48D19275B817D515AE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:a3:21:8d:8b:5e:13:46:8a:98:24:80:54: d8:88:f3:a7:4a:0c:a5:3d:94:82:b7:8c:2e:2e:6e: 90:be:c0:88:c1:39:7a:08:54:5e:83:c4:97:36:20: 0b:ca:4e:b4:bc:35:8b:28:af:05:87:07:e0:09:69: 17:38:fb:0a:98:db:a1:76:07:55:6c:da:7c:51:3d: 65:16:46:97:90:d3:1c:c9:a5:a5:66:3f:0a:9f:6a: bc:45:64:5c:5e:37:36:9d:50:53:2c:ad:9a:df:10: ac:69:80:66:7f:4a:d5:02:de:f2:bd:4d:65:4d:b4: c3:2e:53:69:41:42:e8:47:55:92:93:77:93:ba:fd: 8f:34:50:48:cc:0e:40:05:c6:93:88:8f:20:fa:7b: f6:4b:11:47:e9:bc:a2:88:12:22:be:31:37:3b:bb: 63:17:f5:ce:14:39:11:83:5a:8e:88:f5:9b:3e:fa: a2:4b:78:4b:b3:8b:74:30:46:3a:5d:2b:dc:1d:e2: 19:68:b3:39:54:4d:b1:fb:af:d9:a8:df:e0:d7:8c: ba:2d:39:67:e5:05:ef:4f:09:df:3c:bd:68:54:41: 24:57:47:46:21:b5:0f:c2:5b:91:38:4e:eb:2a:55: ef:fd:11:dd:7d:72:a3:4b:36:67:07:5a:de:b9:e1: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8C:41:DF:F4:31:C0:2A:A6:DC:48:D1:92:75:B8:17:D5:15:AE:2B X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:43:b5:f7:86:7f:9b:e3:3f:2f:09:0d:92:db:d8:33:d3:a7: 91:30:1f:d1:76:bb:10:51:50:b4:13:25:7c:7d:bb:77:33:5b: 90:f2:e6:cd:0b:6d:18:e3:08:0c:f5:ef:f8:b6:d3:97:42:ce: ea:1d:a5:10:f8:89:41:1b:f0:52:33:6c:08:dd:4c:da:87:99: dc:31:55:e5:6b:97:da:3b:5d:9d:e3:2e:26:6c:2f:04:ec:4a: 20:96:3f:39:62:0b:8a:b6:91:8a:69:40:cf:5c:9b:a7:cc:1c: 04:99:58:e6:71:8b:5c:a2:3a:74:51:71:9e:ce:4d:51:bd:c4: 03:3a:f2:84:22:59:b1:69:bf:f9:08:45:b1:00:5a:92:0e:8e: d8:b6:38:6e:9f:a4:f6:e4:f7:3f:2a:b7:7b:9c:71:c9:ad:d6: 22:ab:0b:6c:0e:70:60:c8:00:c2:6e:64:5a:9f:c5:2e:41:71: ed:04:0c:46:41:54:67:b1:d8:d4:74:4c:bc:8b:69:e4:ad:b4: ea:c7:be:f6:0f:1e:13:76:e7:3f:25:3f:83:22:b7:32:18:73: 09:e9:1e:bb:0e:41:50:5e:01:ea:38:14:c9:37:fb:e8:66:13: 08:a6:2b:60:92:ef:6c:da:9e:20:09:ec:52:c1:e6:12:ee:92: 4f:be:d7:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPPZPHtsf9Eh5ygaQq3hKZnk9LfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjAxMjUwNzM1NTdaFw0yNjAxMjYxMTA5NTdaMDMxMTAvBgNV BAMTKDUxOEM0MURGRjQzMUMwMkFBNkRDNDhEMTkyNzVCODE3RDUxNUFFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4aMhjYteE0aKmCSAVNiI86dK DKU9lIK3jC4ubpC+wIjBOXoIVF6DxJc2IAvKTrS8NYsorwWHB+AJaRc4+wqY26F2 B1Vs2nxRPWUWRpeQ0xzJpaVmPwqfarxFZFxeNzadUFMsrZrfEKxpgGZ/StUC3vK9 TWVNtMMuU2lBQuhHVZKTd5O6/Y80UEjMDkAFxpOIjyD6e/ZLEUfpvKKIEiK+MTc7 u2MX9c4UORGDWo6I9Zs++qJLeEuzi3QwRjpdK9wd4hloszlUTbH7r9mo3+DXjLot OWflBe9PCd88vWhUQSRXR0YhtQ/CW5E4TusqVe/9Ed19cqNLNmcHWt654Z3fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUYxB3/QxwCqm3EjRknW4F9UVriswHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUO194Z/m+M/ LwkNktvYM9OnkTAf0Xa7EFFQtBMlfH27dzNbkPLmzQttGOMIDPXv+LbTl0LO6h2l EPiJQRvwUjNsCN1M2oeZ3DFV5WuX2jtdneMuJmwvBOxKIJY/OWILiraRimlAz1yb p8wcBJlY5nGLXKI6dFFxns5NUb3EAzryhCJZsWm/+QhFsQBakg6O2LY4bp+k9uT3 Pyq3e5xxya3WIqsLbA5wYMgAwm5kWp/FLkFx7QQMRkFUZ7HY1HRMvItp5K206se+ 9g8eE3bnPyU/gyK3MhhzCekeuw5BUF4B6jgUyTf76GYTCKYrYJLvbNqeIAnsUsHm Eu6ST77X3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:53 2026 by rpki-client