This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: Kjx+Rr6da9/YKIAa0R326U9N8QqMX0EhiDJyRShDCCQ= Subject key identifier: 2F:4B:8C:B5:18:7C:98:CB:DE:4F:C5:C5:69:98:E4:C8:76:C5:10:D5 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 5777ABDE0F727600D958E6EE796A1FDE20F7B28A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:15:57 +0000 Manifest this update: Sun 25 Jan 2026 06:10:57 +0000 Manifest next update: Mon 26 Jan 2026 06:27:57 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: T+uAW5LqNiaHBVmWe7xs36POhF/zWE1jR25G35oEUF4=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:77:ab:de:0f:72:76:00:d9:58:e6:ee:79:6a:1f:de:20:f7:b2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jan 25 06:10:57 2026 GMT Not After : Jan 26 06:27:57 2026 GMT Subject: CN=2F4B8CB5187C98CBDE4FC5C56998E4C876C510D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:3d:c8:5b:84:a5:81:3a:06:d2:5f:76:00: 18:82:81:c6:8d:ed:32:bd:55:50:fa:7c:c7:f8:f8: c1:36:26:3f:49:e4:4a:75:37:f1:2f:69:e0:f7:1f: 9b:11:9a:f2:04:ab:27:57:f6:3a:ed:3b:f7:2c:a1: 1e:02:5e:e3:b0:02:8b:3b:7b:e9:03:70:be:8d:12: 2a:fc:b0:81:87:89:dc:aa:5e:c7:95:64:91:d8:49: 8f:5f:a7:07:14:6e:43:c3:71:0b:d6:1c:36:aa:12: 97:5c:fe:d9:fc:f1:ff:3e:44:9d:ce:29:18:22:a1: 09:28:f7:0f:ad:e8:58:a3:ff:ef:15:24:f6:5a:70: 0b:16:46:5d:64:89:26:7f:3d:c5:65:66:55:93:f6: d4:09:e5:b3:98:09:47:ff:10:e7:a8:4b:82:4e:26: e3:bb:5c:0b:1b:19:f8:59:d9:22:06:8b:73:1a:cb: 57:0d:f0:0c:ac:fa:0b:c3:48:e7:d3:2d:ab:f5:c3: a4:c8:a9:58:6b:96:f3:8f:8b:43:05:48:cd:49:fc: ff:8a:f7:17:e3:8c:59:e2:57:f7:be:a8:24:c3:52: 22:c7:b9:54:86:a7:21:a5:d6:f6:38:a5:1f:9f:8f: 5b:ae:8d:33:4a:5e:ce:81:70:26:8e:c1:f2:9f:ab: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4B:8C:B5:18:7C:98:CB:DE:4F:C5:C5:69:98:E4:C8:76:C5:10:D5 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:44:dd:1f:ca:93:d3:9a:5a:90:7f:24:d8:03:53:dd:42:0f: 9f:11:5a:cb:b1:8a:c4:9d:3d:6c:bb:b6:f3:f2:fb:1f:25:aa: 9e:ac:a1:45:a5:5b:5f:19:59:1d:52:cc:29:d8:2d:25:1d:e8: 0e:dc:77:4e:7c:d7:13:a6:74:4c:ba:15:3d:19:a3:90:7d:60: c7:cc:8f:18:e9:d4:19:ca:79:5d:1c:90:de:e7:59:d7:8f:04: 7f:a0:1a:c6:10:ea:fe:15:b5:cd:97:50:37:78:33:43:bb:cd: af:10:4d:87:51:5f:37:dd:e5:38:a2:7e:f1:ec:71:fd:90:73: f1:8e:c8:ce:b5:b3:67:41:d5:cc:3f:a9:bb:8f:da:d2:23:fb: 1f:d9:0f:17:fb:64:6c:72:fb:6a:bf:c5:b4:7c:35:7b:3e:11: 15:dd:34:22:e8:0f:f6:d5:1f:4d:50:4a:1e:9d:0f:9d:9e:31: 08:c8:b5:48:ee:66:3a:fe:67:d7:35:10:dc:77:20:c9:1a:83: 2b:52:0a:aa:8e:76:3e:b6:c6:74:1b:5d:31:af:ed:28:0d:b5: bf:4c:c0:a0:78:30:81:ea:3a:2f:57:fd:46:a4:9a:97:90:8e: 31:c9:ed:2c:97:15:ec:04:bf:8d:c3:72:7f:f3:8f:cc:27:f0: 84:83:c3:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV3er3g9ydgDZWObueWof3iD3soowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjAxMjUwNjEwNTdaFw0yNjAxMjYwNjI3NTdaMDMxMTAvBgNV BAMTKDJGNEI4Q0I1MTg3Qzk4Q0JERTRGQzVDNTY5OThFNEM4NzZDNTEwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Yj3IW4SlgToG0l92ABiCgcaN 7TK9VVD6fMf4+ME2Jj9J5Ep1N/EvaeD3H5sRmvIEqydX9jrtO/csoR4CXuOwAos7 e+kDcL6NEir8sIGHidyqXseVZJHYSY9fpwcUbkPDcQvWHDaqEpdc/tn88f8+RJ3O KRgioQko9w+t6Fij/+8VJPZacAsWRl1kiSZ/PcVlZlWT9tQJ5bOYCUf/EOeoS4JO JuO7XAsbGfhZ2SIGi3May1cN8Ays+gvDSOfTLav1w6TIqVhrlvOPi0MFSM1J/P+K 9xfjjFniV/e+qCTDUiLHuVSGpyGl1vY4pR+fj1uujTNKXs6BcCaOwfKfq79jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL0uMtRh8mMveT8XFaZjkyHbFENUwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYETdH8qT05pa kH8k2ANT3UIPnxFay7GKxJ09bLu28/L7HyWqnqyhRaVbXxlZHVLMKdgtJR3oDtx3 TnzXE6Z0TLoVPRmjkH1gx8yPGOnUGcp5XRyQ3udZ148Ef6AaxhDq/hW1zZdQN3gz Q7vNrxBNh1FfN93lOKJ+8exx/ZBz8Y7IzrWzZ0HVzD+pu4/a0iP7H9kPF/tkbHL7 ar/FtHw1ez4RFd00IugP9tUfTVBKHp0PnZ4xCMi1SO5mOv5n1zUQ3HcgyRqDK1IK qo52PrbGdBtdMa/tKA21v0zAoHgwgeo6L1f9RqSal5COMcntLJcV7AS/jcNyf/OP zCfwhIPD8A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:00 2026 by rpki-client