This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft File: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft (raw, json) Hash identifier: Pgyeod3mbkvAjKiM1Iid7G4z8WTQwGnTUA0hXOSa+xs= Subject key identifier: 23:CB:CD:80:DC:7E:D6:37:3B:21:0E:BA:5C:AE:E6:78:8A:92:AA:F5 Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Certificate serial: 3E8F7D5D74CC0478E9C997B7EB7396B0C38A5BB9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:25:57 +0000 Manifest this update: Sat 24 Jan 2026 15:20:57 +0000 Manifest next update: Sun 25 Jan 2026 17:39:57 +0000 Files and hashes: 1: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl (hash: u/PEp6h+u061rNKAhS6Om8Mz7cciN5wNhwj+AoOMapo=) 2: 3130332e3131362e39322e302f32342d3234203d3e20313337373938.roa (hash: GxDjwoGwXNDMqifO5LMnh9aEKS7YfWtIczricIBrf7c=) 3: 323430323a663863303a3a2f34382d3438203d3e20313337373938.roa (hash: cIxqlfd0QethhWMdV0g5VZkMAaNT0U3dpU5si9dWPEw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8f:7d:5d:74:cc:04:78:e9:c9:97:b7:eb:73:96:b0:c3:8a:5b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Validity Not Before: Jan 24 15:20:57 2026 GMT Not After : Jan 25 17:39:57 2026 GMT Subject: CN=23CBCD80DC7ED6373B210EBA5CAEE6788A92AAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:cb:85:ab:f1:f7:c7:4c:7c:f2:29:3e:90: 61:7a:25:1a:fb:44:4c:3e:70:45:3b:62:8a:cb:55: ad:1b:7d:dc:e2:73:8d:24:24:8f:fc:f4:bd:d5:cf: d8:3e:0e:1c:88:0b:5b:a9:2e:12:15:b4:65:49:b6: c4:8b:44:88:82:7f:23:17:6a:cd:d2:7d:bc:58:82: ac:8d:bf:35:c2:f9:3a:17:80:1a:29:04:a4:9d:12: d3:79:7b:08:a4:d2:15:e8:71:05:ac:cb:b6:65:2f: 2c:9c:8c:6e:a9:9d:f1:c5:7d:d0:5d:47:a2:3d:ce: 29:91:8f:2a:de:13:d0:f8:6e:19:b3:e7:9c:22:e4: 4a:d9:03:e0:d0:fb:bd:ec:ef:65:7c:07:e2:12:24: ac:c7:69:6a:6d:e0:e1:b2:aa:5e:67:5e:72:23:fe: 0e:51:79:9b:86:21:72:c1:7d:6e:c7:31:1c:fa:e3: 19:88:9d:34:b1:c9:32:3a:28:8b:a3:5a:3a:8e:c5: 25:f0:6d:59:92:2e:e1:41:0e:48:8b:48:59:41:91: 1a:87:eb:c1:e7:5b:81:2b:f0:26:07:93:bc:64:3e: 1a:b3:3c:a7:9e:bf:c3:da:0f:d8:fc:36:78:30:4b: 58:0e:c4:2b:65:1a:1b:49:41:e6:c7:8d:ca:df:81: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CB:CD:80:DC:7E:D6:37:3B:21:0E:BA:5C:AE:E6:78:8A:92:AA:F5 X509v3 Authority Key Identifier: keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:cf:8e:5a:b0:3f:b7:fc:6e:9f:f0:23:c5:22:04:c4:c8:fd: 81:35:34:e2:d6:77:79:13:83:2e:75:87:7d:b4:0b:7e:a1:20: 9d:02:2a:82:ed:f1:3c:ea:1a:71:b3:f5:41:c7:ae:87:ec:c0: d5:fe:93:d4:a5:b9:4c:47:aa:8d:61:c2:1d:da:9c:40:ec:c7: 53:39:4d:f1:b5:f7:aa:5a:aa:60:dc:4d:54:28:54:d7:99:b2: ac:9a:4b:2c:96:aa:7c:52:f1:11:90:b1:c8:e6:db:d9:92:d9: 13:a7:c9:2f:7a:aa:72:a2:9b:0a:75:69:0d:e1:c6:12:e2:58: df:c3:a2:70:82:b2:1e:9b:1e:b0:6b:c9:85:6a:9c:3a:69:0b: 6b:dd:78:67:62:22:ee:11:c3:5f:6d:98:e3:0e:34:fa:02:7b: 15:a1:44:ae:e2:a0:0b:97:f8:74:cc:c3:5f:d4:37:14:29:55: e2:f3:0a:f3:c5:4c:d1:49:b4:2a:e0:92:68:82:8b:be:c0:1d: 53:6c:07:ce:b2:05:04:7f:46:16:41:94:8c:75:70:1c:f1:71: e7:55:6f:bc:38:78:89:ba:e0:0a:ee:a7:25:c7:26:1b:72:9e: f4:f4:e8:ef:ac:58:7f:70:32:d0:80:57:f2:3e:59:d8:a5:fd: 86:57:78:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPo99XXTMBHjpyZe363OWsMOKW7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURF RjRDMkNFNjAeFw0yNjAxMjQxNTIwNTdaFw0yNjAxMjUxNzM5NTdaMDMxMTAvBgNV BAMTKDIzQ0JDRDgwREM3RUQ2MzczQjIxMEVCQTVDQUVFNjc4OEE5MkFBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxsuFq/H3x0x88ik+kGF6JRr7 REw+cEU7YorLVa0bfdzic40kJI/89L3Vz9g+DhyIC1upLhIVtGVJtsSLRIiCfyMX as3SfbxYgqyNvzXC+ToXgBopBKSdEtN5ewik0hXocQWsy7ZlLyycjG6pnfHFfdBd R6I9zimRjyreE9D4bhmz55wi5ErZA+DQ+73s72V8B+ISJKzHaWpt4OGyql5nXnIj /g5ReZuGIXLBfW7HMRz64xmInTSxyTI6KIujWjqOxSXwbVmSLuFBDkiLSFlBkRqH 68HnW4Er8CYHk7xkPhqzPKeev8PaD9j8NngwS1gOxCtlGhtJQebHjcrfgcsrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI8vNgNx+1jc7IQ66XK7meIqSqvUwHwYDVR0j BBgwFoAURa5R8xjTVTK+tv/8Yioqre9MLOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzA2MTI0OS8wLzQ1QUU1MUYzMThEMzU1MzJCRUI2RkZGQzYyMkEy QUFERUY0QzJDRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURFRjRDMkNFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcwNjEyNDkvMC80NUFFNTFGMzE4RDM1 NTMyQkVCNkZGRkM2MjJBMkFBREVGNEMyQ0U2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAus+OWrA/t/xu n/AjxSIExMj9gTU04tZ3eRODLnWHfbQLfqEgnQIqgu3xPOoacbP1Qceuh+zA1f6T 1KW5TEeqjWHCHdqcQOzHUzlN8bX3qlqqYNxNVChU15myrJpLLJaqfFLxEZCxyObb 2ZLZE6fJL3qqcqKbCnVpDeHGEuJY38OicIKyHpsesGvJhWqcOmkLa914Z2Ii7hHD X22Y4w40+gJ7FaFEruKgC5f4dMzDX9Q3FClV4vMK88VM0Um0KuCSaIKLvsAdU2wH zrIFBH9GFkGUjHVwHPFx51VvvDh4ibrgCu6nJccmG3Ke9PTo76xYf3Ay0IBX8j5Z 2KX9hld4hA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:53 2026 by rpki-client