This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: s2kbTwtNjQBF96Q601bb1IOkU2SnRk6eD04jYZ4iGAw= Subject key identifier: D4:EE:B2:07:30:68:C0:AC:11:45:11:59:2F:C1:7E:87:D7:69:36:6D Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 6A1C21560A587E77E45DB20D482CBB1ACF7F64C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:15:57 +0000 Manifest this update: Sat 24 Jan 2026 15:10:57 +0000 Manifest next update: Sun 25 Jan 2026 16:07:57 +0000 Files and hashes: 1: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: a/6fEvc6TaxdPF/sBdCnXo8JgmI/VT84hE61WGJYN48=) 2: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) 3: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 4: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1c:21:56:0a:58:7e:77:e4:5d:b2:0d:48:2c:bb:1a:cf:7f:64:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: Jan 24 15:10:57 2026 GMT Not After : Jan 25 16:07:57 2026 GMT Subject: CN=D4EEB2073068C0AC114511592FC17E87D769366D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:c0:e7:14:07:e5:6a:ed:8f:9f:f4:85:ff: 9d:18:b8:69:43:ff:8a:f2:d9:32:ef:8f:89:b4:b0: e8:17:9b:a5:27:c4:be:9f:94:8a:ce:27:55:1b:6f: 84:4e:fd:ec:29:93:c5:bb:d6:69:47:e7:3c:6c:4f: 81:0a:dd:21:f1:af:45:cd:31:c6:a0:0d:dc:55:cf: e5:91:86:10:21:e4:81:af:2f:5d:41:54:60:fe:42: 4e:4c:41:af:b2:c3:0c:5c:e4:e6:f9:d4:17:92:10: 59:85:a1:a7:f8:aa:45:92:25:e6:d1:8f:f9:f6:70: 06:12:ea:74:52:81:44:2d:70:f0:da:1c:89:34:3d: 3e:73:78:c4:05:15:1e:37:19:2f:ad:79:1c:0c:82: c2:e8:df:d6:db:f5:c4:70:f4:f0:a9:7a:6c:90:90: 5f:e4:05:8b:5b:60:eb:83:44:88:9e:8c:54:46:38: 63:41:d9:16:a0:02:db:21:9d:45:3a:a9:43:13:6d: d8:88:ae:fb:19:aa:d7:cd:8c:8c:d4:e3:e0:63:17: ef:81:0c:ea:52:6b:8b:12:08:10:52:1f:0e:c2:3f: 0c:cc:83:81:60:ee:50:90:15:61:90:0e:38:e6:5d: 89:0a:39:6b:21:4e:c0:4d:ef:ca:0c:2a:e8:f5:f7: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EE:B2:07:30:68:C0:AC:11:45:11:59:2F:C1:7E:87:D7:69:36:6D X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:84:ba:3c:20:c5:60:e3:0c:bc:6c:ce:76:87:76:3a:f2:06: be:e3:cd:ae:01:41:65:1a:20:0f:39:0e:df:43:5d:ce:91:ef: 19:92:3f:ff:3a:fc:0f:4a:69:7f:05:3a:e2:71:10:a9:d1:c3: 93:bb:43:bd:2f:9d:af:ed:68:de:b4:0f:84:8b:a5:16:a8:a6: 68:b0:70:45:af:e0:0d:13:cf:60:77:d4:29:92:01:6f:80:11: b3:76:1e:83:03:8a:17:8a:c1:df:74:b7:80:44:ed:f4:e1:b5: e4:07:1d:b6:c7:7a:d1:d5:bf:33:f4:f9:8f:ae:77:3d:ea:a2: bb:df:fc:f6:b4:5f:20:f4:d9:58:5b:ee:8c:93:bd:86:a9:00: 8c:3f:2f:8a:90:ec:25:ca:43:5f:80:52:71:74:20:93:0c:5f: aa:a1:4d:f3:3a:c4:b8:c9:a1:0c:cc:14:ab:aa:e1:3f:64:b7: b2:33:4c:fc:82:60:7c:26:55:a8:3b:6e:a2:11:57:e3:cb:32: ef:43:c2:77:7d:25:96:0b:33:51:61:43:ef:6b:4c:65:9f:a7: 4c:60:cc:3b:0e:18:0a:7d:22:4f:26:1d:77:38:b6:ec:e2:43: f7:7f:00:6c:68:36:07:34:f0:13:56:86:79:44:a3:60:b0:53: 82:6f:79:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUahwhVgpYfnfkXbINSCy7Gs9/ZMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjAxMjQxNTEwNTdaFw0yNjAxMjUxNjA3NTdaMDMxMTAvBgNV BAMTKEQ0RUVCMjA3MzA2OEMwQUMxMTQ1MTE1OTJGQzE3RTg3RDc2OTM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QcDnFAflau2Pn/SF/50YuGlD /4ry2TLvj4m0sOgXm6UnxL6flIrOJ1Ubb4RO/ewpk8W71mlH5zxsT4EK3SHxr0XN McagDdxVz+WRhhAh5IGvL11BVGD+Qk5MQa+ywwxc5Ob51BeSEFmFoaf4qkWSJebR j/n2cAYS6nRSgUQtcPDaHIk0PT5zeMQFFR43GS+teRwMgsLo39bb9cRw9PCpemyQ kF/kBYtbYOuDRIiejFRGOGNB2RagAtshnUU6qUMTbdiIrvsZqtfNjIzU4+BjF++B DOpSa4sSCBBSHw7CPwzMg4Fg7lCQFWGQDjjmXYkKOWshTsBN78oMKuj19+BFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1O6yBzBowKwRRRFZL8F+h9dpNm0wHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIS6PCDFYOMM vGzOdod2OvIGvuPNrgFBZRogDzkO30NdzpHvGZI//zr8D0ppfwU64nEQqdHDk7tD vS+dr+1o3rQPhIulFqimaLBwRa/gDRPPYHfUKZIBb4ARs3YegwOKF4rB33S3gETt 9OG15Acdtsd60dW/M/T5j653Peqiu9/89rRfIPTZWFvujJO9hqkAjD8vipDsJcpD X4BScXQgkwxfqqFN8zrEuMmhDMwUq6rhP2S3sjNM/IJgfCZVqDtuohFX48sy70PC d30llgszUWFD72tMZZ+nTGDMOw4YCn0iTyYddzi27OJD938AbGg2BzTwE1aGeUSj YLBTgm95Rw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:44 2026 by rpki-client