This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: fWPEMMIkYZ1nZzYLOnkwAQf7AnEYv4cj9xtjeVu9B/w= Subject key identifier: CC:71:75:6E:DD:83:6E:DE:68:02:65:D8:EF:94:63:8E:23:DD:AF:BB Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 193986D0738DAEC3CB345ACA230F5F55B433BB54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 02:50:57 +0000 Manifest this update: Sun 25 Jan 2026 02:45:57 +0000 Manifest next update: Mon 26 Jan 2026 03:51:57 +0000 Files and hashes: 1: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: UwJ+eaiK+cWqKBTlkveq+/jmIiRK38ajPUR1WVnmWnU=) 2: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) 3: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) 4: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 5: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:39:86:d0:73:8d:ae:c3:cb:34:5a:ca:23:0f:5f:55:b4:33:bb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Jan 25 02:45:57 2026 GMT Not After : Jan 26 03:51:57 2026 GMT Subject: CN=CC71756EDD836EDE680265D8EF94638E23DDAFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:2e:63:68:d7:8a:72:e4:a3:c8:70:b2:e5: 37:75:8d:6f:55:9b:3a:cb:ac:6f:54:bb:39:b1:fb: c9:4e:d9:c5:4e:96:8c:b1:cc:84:6e:f7:d6:55:9a: de:ee:a6:4e:56:5b:33:5f:78:21:b4:a4:63:60:36: be:bb:50:6b:3f:66:c4:f2:26:5f:75:48:ea:88:da: cf:41:c2:d7:b4:f2:dd:d2:87:7e:8d:1b:15:98:d4: a7:30:2c:e8:6f:27:b4:5a:ca:d3:69:07:6f:a1:e5: 3f:23:5c:c3:80:96:bc:fb:db:42:06:a7:3f:95:1c: d2:aa:73:3f:cb:7c:fe:df:81:3c:0e:c2:be:e9:f2: e2:0f:24:71:83:cf:6e:82:c0:a6:38:4d:b9:8d:74: ee:b3:7e:d6:29:01:99:cc:fa:dc:f9:19:de:3b:bd: 64:2e:f6:3a:b9:59:fb:2b:7d:64:09:60:95:20:9c: f9:86:8a:47:66:ec:f3:46:c0:42:39:c4:38:de:a1: 17:d2:24:ff:c8:3d:41:78:69:8a:d4:de:17:22:1b: 00:99:9a:56:1f:ea:a8:ac:a7:65:1b:81:a5:9a:7f: df:71:d3:2c:e1:33:db:13:74:ae:d2:e4:f1:c2:83: 20:ab:18:fa:14:ef:89:96:fe:c8:44:7d:2c:16:13: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:71:75:6E:DD:83:6E:DE:68:02:65:D8:EF:94:63:8E:23:DD:AF:BB X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1a:89:a1:8b:3f:b0:9a:56:41:e6:de:8f:d5:da:0d:62:8e: 6b:70:9e:de:60:8b:90:4b:02:37:f7:c5:aa:65:94:3d:7e:36: 6f:89:fc:55:fe:14:d1:32:91:5c:66:3c:bc:f5:f8:0d:ae:cb: 83:a7:3f:1a:67:b9:ac:c9:23:34:07:00:2a:29:a7:92:b4:17: 71:9e:27:c6:91:e9:0e:a0:f5:87:6f:0a:73:6a:1b:de:3f:8d: 1e:81:e4:ed:71:9f:ed:fb:0f:da:55:22:fa:d5:ee:ce:23:da: 65:c2:2c:bc:14:b2:b0:0c:19:a0:7c:7c:18:e6:25:78:8b:d2: 5a:4d:6f:ee:37:12:f4:c1:02:a2:c1:43:c0:f4:fc:51:54:d4: 93:b0:1a:46:81:3e:86:d1:85:ae:05:17:df:32:11:22:55:43: f1:7c:aa:f1:fd:95:b0:da:26:4c:d5:32:8a:2e:d4:e5:2a:d2: 45:e0:3d:73:9a:32:63:d7:7e:13:2d:12:f1:65:35:8f:22:b0: 49:c9:bc:c7:9d:e5:3a:f4:6a:47:49:57:9b:c4:da:64:0e:bb: 08:91:52:6e:81:61:0d:54:f9:aa:33:39:ec:67:81:b4:1a:a0: c3:47:cc:72:e4:81:96:1b:84:7e:6d:c7:b2:58:df:39:a3:cf: e1:a1:99:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGTmG0HONrsPLNFrKIw9fVbQzu1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjAxMjUwMjQ1NTdaFw0yNjAxMjYwMzUxNTdaMDMxMTAvBgNV BAMTKENDNzE3NTZFREQ4MzZFREU2ODAyNjVEOEVGOTQ2MzhFMjNEREFGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68y5jaNeKcuSjyHCy5Td1jW9V mzrLrG9Uuzmx+8lO2cVOloyxzIRu99ZVmt7upk5WWzNfeCG0pGNgNr67UGs/ZsTy Jl91SOqI2s9Bwte08t3Sh36NGxWY1KcwLOhvJ7RaytNpB2+h5T8jXMOAlrz720IG pz+VHNKqcz/LfP7fgTwOwr7p8uIPJHGDz26CwKY4TbmNdO6zftYpAZnM+tz5Gd47 vWQu9jq5WfsrfWQJYJUgnPmGikdm7PNGwEI5xDjeoRfSJP/IPUF4aYrU3hciGwCZ mlYf6qisp2UbgaWaf99x0yzhM9sTdK7S5PHCgyCrGPoU74mW/shEfSwWEzkPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzHF1bt2Dbt5oAmXY75RjjiPdr7swHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBqJoYs/sJpW Qebej9XaDWKOa3Ce3mCLkEsCN/fFqmWUPX42b4n8Vf4U0TKRXGY8vPX4Da7Lg6c/ Gme5rMkjNAcAKimnkrQXcZ4nxpHpDqD1h28Kc2ob3j+NHoHk7XGf7fsP2lUi+tXu ziPaZcIsvBSysAwZoHx8GOYleIvSWk1v7jcS9MECosFDwPT8UVTUk7AaRoE+htGF rgUX3zIRIlVD8Xyq8f2VsNomTNUyii7U5SrSReA9c5oyY9d+Ey0S8WU1jyKwScm8 x53lOvRqR0lXm8TaZA67CJFSboFhDVT5qjM57GeBtBqgw0fMcuSBlhuEfm3Hsljf OaPP4aGZQA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:28 2026 by rpki-client