This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: jv8gW2Arw9E4fqI0SCItb8uMmAPhEynpQT8msqNZtgw= Subject key identifier: C6:D4:33:E1:9E:EC:52:0F:56:A8:EB:92:F8:DC:BE:BE:F5:BF:FB:05 Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 7E7DB85C82C2D0B421BE81D036BDE3C99762A620 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:15:57 +0000 Manifest this update: Sat 24 Jan 2026 17:10:57 +0000 Manifest next update: Sun 25 Jan 2026 20:41:57 +0000 Files and hashes: 1: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: V2tEqtdLtJfg2tcvG+1pu3KRPufWtf7qSsB6vg48gro=) 2: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) 3: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 4: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7d:b8:5c:82:c2:d0:b4:21:be:81:d0:36:bd:e3:c9:97:62:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Jan 24 17:10:57 2026 GMT Not After : Jan 25 20:41:57 2026 GMT Subject: CN=C6D433E19EEC520F56A8EB92F8DCBEBEF5BFFB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:9f:d6:91:53:68:a5:c2:03:49:04:4c:70: 91:15:5e:04:16:89:3a:f1:35:70:82:32:e7:0a:ff: 4a:8c:89:30:32:b8:f5:69:83:35:86:45:b6:59:7f: f8:c5:0d:57:a6:f6:c5:03:27:d7:2a:4d:bc:69:ba: e4:49:45:35:1f:03:2d:f2:95:22:58:23:10:1f:0a: 06:db:03:bd:f3:52:2e:93:54:0c:e2:5a:4a:2d:16: c2:c6:79:b9:39:48:78:0a:9c:94:ac:c5:72:e7:e3: 40:6e:ed:22:0f:4f:90:cf:4a:65:79:ce:0a:5a:cc: 44:aa:60:79:4e:de:a4:f7:85:98:24:fe:bd:bf:85: 32:70:9f:42:c4:dc:96:50:cd:f8:cb:d9:8f:43:84: 43:ad:00:8b:46:ce:e5:7f:d3:f8:12:02:47:bb:95: 84:71:51:a9:20:40:ba:42:8a:f0:b2:48:45:0c:dd: 2a:48:42:97:6d:5e:7e:7c:4b:05:a9:97:e7:8c:10: 56:b0:e5:d6:c7:66:1c:2a:f8:b1:69:ff:ac:4e:bb: 6f:f7:7c:26:cb:c7:77:b9:3c:6b:43:87:56:4e:81: 4d:0e:df:7b:ba:30:9c:7f:0e:99:dd:d5:63:1e:3c: 51:e2:bb:ea:62:4f:a3:02:1f:16:c2:99:3c:1a:1b: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:33:E1:9E:EC:52:0F:56:A8:EB:92:F8:DC:BE:BE:F5:BF:FB:05 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0a:d9:06:af:49:bf:25:cb:18:ba:3a:73:60:ee:f1:0a:dc: f4:44:b9:f1:9f:52:29:c9:7b:eb:c8:6a:03:aa:4d:c1:cb:fe: 68:8e:2c:48:9e:4a:d0:0b:a3:be:af:44:f7:59:b6:b4:62:be: 1e:c9:49:9f:df:ea:f5:77:74:0c:f3:fe:4b:d5:cb:61:9b:7c: 84:55:ee:29:5a:c1:27:d4:e3:eb:15:87:e3:b0:e2:dc:f4:bf: 92:8b:d3:58:90:09:76:5f:f5:f4:66:9b:9b:46:b3:02:56:d5: 62:b9:99:66:55:4a:9e:b5:7b:33:85:f7:23:08:e0:c2:f7:c8: 86:04:42:61:78:91:55:33:77:3f:79:5f:99:d2:9b:01:69:88: 4a:52:74:53:7c:07:bc:6c:c0:be:a0:9a:69:38:e8:88:bd:f6: 69:70:ba:0e:ee:0a:6e:24:00:0b:50:8a:74:37:51:ff:27:1c: ce:5f:6b:95:06:1a:15:59:8d:27:b5:3c:1a:dc:84:b3:c0:4a: 8e:c9:0f:4c:4c:ce:5c:5d:a8:04:fd:e0:21:ee:03:c5:bd:02: e1:28:92:10:48:f1:3c:ef:74:32:07:49:7c:e2:d3:0c:ae:b9: 33:bc:a5:7c:29:38:eb:4e:cb:24:b0:20:96:6d:e5:02:46:62: 27:cf:ce:44 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfn24XILC0LQhvoHQNr3jyZdipiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjAxMjQxNzEwNTdaFw0yNjAxMjUyMDQxNTdaMDMxMTAvBgNV BAMTKEM2RDQzM0UxOUVFQzUyMEY1NkE4RUI5MkY4RENCRUJFRjVCRkZCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEZ/WkVNopcIDSQRMcJEVXgQW iTrxNXCCMucK/0qMiTAyuPVpgzWGRbZZf/jFDVem9sUDJ9cqTbxpuuRJRTUfAy3y lSJYIxAfCgbbA73zUi6TVAziWkotFsLGebk5SHgKnJSsxXLn40Bu7SIPT5DPSmV5 zgpazESqYHlO3qT3hZgk/r2/hTJwn0LE3JZQzfjL2Y9DhEOtAItGzuV/0/gSAke7 lYRxUakgQLpCivCySEUM3SpIQpdtXn58SwWpl+eMEFaw5dbHZhwq+LFp/6xOu2/3 fCbLx3e5PGtDh1ZOgU0O33u6MJx/Dpnd1WMePFHiu+piT6MCHxbCmTwaG/VJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxtQz4Z7sUg9WqOuS+Ny+vvW/+wUwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQrZBq9JvyXL GLo6c2Du8Qrc9ES58Z9SKcl768hqA6pNwcv+aI4sSJ5K0Aujvq9E91m2tGK+HslJ n9/q9Xd0DPP+S9XLYZt8hFXuKVrBJ9Tj6xWH47Di3PS/kovTWJAJdl/19Gabm0az AlbVYrmZZlVKnrV7M4X3IwjgwvfIhgRCYXiRVTN3P3lfmdKbAWmISlJ0U3wHvGzA vqCaaTjoiL32aXC6Du4KbiQAC1CKdDdR/ycczl9rlQYaFVmNJ7U8GtyEs8BKjskP TEzOXF2oBP3gIe4Dxb0C4SiSEEjxPO90MgdJfOLTDK65M7ylfCk4607LJLAglm3l AkZiJ8/ORA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:15 2026 by rpki-client