This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: PeUdgF4BoolMYRsNdsnzoz3b+YJ2xfqyKrVsXSCzUUc= Subject key identifier: 48:E6:5F:C1:BA:A1:6F:17:B7:D8:8A:A1:EB:89:9B:3D:1F:3F:D4:E9 Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 203AA21A3DB724317A3AC0A4793ACC2B3A65A781 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:00:57 +0000 Manifest this update: Sun 25 Jan 2026 07:55:57 +0000 Manifest next update: Mon 26 Jan 2026 10:55:57 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: 32X2yd3XAhmEavcXHEXV3XF74j2C8WvUXdnqFonxcGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3a:a2:1a:3d:b7:24:31:7a:3a:c0:a4:79:3a:cc:2b:3a:65:a7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Jan 25 07:55:57 2026 GMT Not After : Jan 26 10:55:57 2026 GMT Subject: CN=48E65FC1BAA16F17B7D88AA1EB899B3D1F3FD4E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:1b:62:c9:36:3b:5a:f7:eb:5e:9c:2b:14: 67:ba:87:f2:bf:aa:16:c1:d7:53:0b:d1:f2:56:57: 53:28:60:eb:1c:0b:59:e0:86:41:70:0f:04:d8:1a: 05:c7:ba:4c:f1:7f:10:0f:1e:d3:7d:fa:4c:f2:47: f6:93:82:b6:72:45:d6:21:cb:40:af:68:e4:36:99: ff:e9:42:90:91:07:2d:8c:ad:a5:3b:4a:1c:e1:9a: bb:f7:37:14:d2:87:c4:a0:a8:3b:38:a2:25:77:62: d1:f1:e4:3e:0d:47:39:56:48:dd:d5:17:87:2a:62: f6:16:c0:f2:67:05:96:10:6d:77:e0:34:47:88:f9: 71:c4:89:9a:68:61:b7:29:d7:43:c9:1d:26:ae:79: fd:7a:20:b7:e6:fb:48:f4:4e:a3:f8:f6:58:03:99: 2c:cf:1f:c8:e8:78:07:c2:99:a9:b5:8f:31:24:34: 24:cc:5e:8e:e1:ec:f2:20:d5:f3:c9:a6:66:88:c2: d1:9d:b3:b4:b2:9f:af:b8:15:d4:95:68:9e:84:5a: f9:88:0d:97:0f:f2:7e:4f:23:5d:6b:6b:d3:05:8a: 1a:43:d9:2a:16:89:8a:da:2c:0f:c8:27:53:37:56: bc:ed:5f:dd:4a:42:56:b4:0c:02:86:f6:a6:86:ee: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E6:5F:C1:BA:A1:6F:17:B7:D8:8A:A1:EB:89:9B:3D:1F:3F:D4:E9 X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:64:e7:b3:c6:b7:62:4e:9a:91:72:55:5e:43:a1:b4:99:10: de:bf:c9:a7:f9:63:cf:a7:37:87:81:5a:d7:f7:66:73:d9:af: b3:f2:80:5e:90:a9:d8:9f:48:60:e0:a9:e3:5b:75:a4:32:1e: 3f:7e:2b:c9:0d:60:92:28:e6:86:67:c0:61:fe:1e:c8:07:e0: 06:0f:c8:05:b0:09:a3:95:5b:b4:09:9b:20:45:68:d1:7b:39: 11:d7:65:c2:a3:88:18:cb:28:6b:54:e7:04:59:4e:f0:59:fb: 2a:9a:c2:99:68:3c:d2:d6:88:fc:67:d7:d1:f5:38:25:f9:5a: 78:f9:9f:19:c0:1b:a7:56:96:90:f2:25:6e:40:00:5c:af:be: 1f:c9:cd:1b:d0:99:4c:2b:83:19:02:9a:d7:bc:be:22:2c:65: 74:c9:57:75:4b:8d:af:d3:c9:2b:aa:34:db:5d:ac:ef:46:f9: 0b:55:0d:7d:cc:fb:41:4e:1a:62:66:b6:8a:03:c3:ac:dc:a7: 5e:ec:7d:45:59:f2:06:2f:9f:93:b9:fc:ec:7a:fa:aa:99:28: c3:d8:7e:80:49:56:b7:e6:e6:24:d7:c5:27:f4:46:d6:aa:0c: 10:43:13:9f:35:7f:49:d1:17:a0:a0:63:a5:82:2e:f8:33:86: de:be:bd:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIDqiGj23JDF6OsCkeTrMKzplp4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjAxMjUwNzU1NTdaFw0yNjAxMjYxMDU1NTdaMDMxMTAvBgNV BAMTKDQ4RTY1RkMxQkFBMTZGMTdCN0Q4OEFBMUVCODk5QjNEMUYzRkQ0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYxtiyTY7WvfrXpwrFGe6h/K/ qhbB11ML0fJWV1MoYOscC1nghkFwDwTYGgXHukzxfxAPHtN9+kzyR/aTgrZyRdYh y0CvaOQ2mf/pQpCRBy2MraU7Shzhmrv3NxTSh8SgqDs4oiV3YtHx5D4NRzlWSN3V F4cqYvYWwPJnBZYQbXfgNEeI+XHEiZpoYbcp10PJHSauef16ILfm+0j0TqP49lgD mSzPH8joeAfCmam1jzEkNCTMXo7h7PIg1fPJpmaIwtGds7Syn6+4FdSVaJ6EWvmI DZcP8n5PI11ra9MFihpD2SoWiYraLA/IJ1M3VrztX91KQla0DAKG9qaG7lJ/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSOZfwbqhbxe32Iqh64mbPR8/1OkwHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWTns8a3Yk6a kXJVXkOhtJkQ3r/Jp/ljz6c3h4Fa1/dmc9mvs/KAXpCp2J9IYOCp41t1pDIeP34r yQ1gkijmhmfAYf4eyAfgBg/IBbAJo5VbtAmbIEVo0Xs5EddlwqOIGMsoa1TnBFlO 8Fn7KprCmWg80taI/GfX0fU4JflaePmfGcAbp1aWkPIlbkAAXK++H8nNG9CZTCuD GQKa17y+IixldMlXdUuNr9PJK6o0212s70b5C1UNfcz7QU4aYma2igPDrNynXux9 RVnyBi+fk7n87Hr6qpkow9h+gElWt+bmJNfFJ/RG1qoMEEMTnzV/SdEXoKBjpYIu +DOG3r69KQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:07 2026 by rpki-client