This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: 70I/XdwfNL4KVLW18rdIxqrqv07FB4bZUPb45+CTel0= Subject key identifier: 08:F4:C6:11:70:5C:F0:B0:8A:01:E9:B5:D8:D6:18:9A:81:02:A1:94 Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 0CBF6BCE548719EB763108FFDF1C982E8E3C8463 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:45:57 +0000 Manifest this update: Sun 25 Jan 2026 03:40:57 +0000 Manifest next update: Mon 26 Jan 2026 03:49:57 +0000 Files and hashes: 1: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 2: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: I1Unx0s2scIyFtNMEj2q9i+Tx9OubySMGOH9Sx9SZNM=) 3: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 4: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bf:6b:ce:54:87:19:eb:76:31:08:ff:df:1c:98:2e:8e:3c:84:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Jan 25 03:40:57 2026 GMT Not After : Jan 26 03:49:57 2026 GMT Subject: CN=08F4C611705CF0B08A01E9B5D8D6189A8102A194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:af:22:db:2f:47:d4:d1:05:8f:67:28:c3: 75:43:58:6d:0f:6a:59:0e:ed:fa:b9:57:76:a9:f9: 2f:98:da:25:a2:e4:12:8e:4c:4d:e5:a7:5b:53:8f: 43:a0:47:2c:75:30:81:66:aa:9e:ee:ef:35:c8:d0: 99:ed:3c:85:41:9e:e3:23:6e:a3:05:7b:0f:0d:e3: be:b0:72:c4:92:e5:57:c3:f3:c9:c7:f7:2c:c4:4a: c5:56:1d:a1:10:eb:f4:dd:86:c3:6e:7e:0e:b0:b8: 7e:1d:cb:cc:d4:50:19:19:9c:63:da:33:1e:64:fa: 96:04:b6:19:18:84:f6:22:fa:68:30:df:e3:9c:60: c6:48:23:c1:66:19:6d:ac:dc:9f:3b:cd:e3:63:99: c1:5f:0e:52:e0:7d:93:9a:36:0e:ca:6f:53:00:64: a9:ff:f2:11:c3:46:30:b8:a8:4e:01:d1:5d:71:f8: 0e:f9:09:5a:23:01:d5:56:55:f1:85:4b:d7:20:15: 18:8b:64:4c:84:e7:47:33:91:a1:63:9c:26:bf:0a: 68:2b:19:53:03:30:98:ab:49:7c:8c:51:ee:a1:0e: ef:2a:5b:1b:f5:73:9a:20:2a:c8:50:6e:e6:af:c3: 60:3d:58:e1:75:46:d5:fb:83:b9:6c:4e:72:e2:50: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F4:C6:11:70:5C:F0:B0:8A:01:E9:B5:D8:D6:18:9A:81:02:A1:94 X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:4a:54:a8:d2:2c:48:e7:da:2b:96:e9:0e:5b:fb:08:b4:c3: a6:78:0b:89:a6:84:dd:15:80:b1:d2:79:3b:aa:44:a6:0c:91: 37:c9:1a:57:e1:29:b0:a6:81:73:09:03:b9:40:79:68:d3:d5: 92:b6:39:31:c7:89:92:b1:f4:ba:9b:f1:ec:f6:86:d8:e4:c5: 92:72:99:ed:f3:f8:40:cb:5b:75:00:d8:8d:69:fc:01:0c:fc: 66:50:c9:d2:aa:1c:6d:6e:4e:7c:e1:5b:c6:08:a3:a9:3d:37: 05:44:83:3e:4d:e9:f6:31:19:a5:ec:97:84:6d:27:cf:52:f4: 8f:57:6c:9b:4e:58:83:f6:ff:c0:7f:eb:d0:bf:01:27:d6:e3: 20:d7:9b:99:a8:4a:82:1b:82:6b:27:96:d4:eb:e6:90:b7:9b: ff:c5:52:ee:73:d5:e4:4e:84:6c:3a:a7:9b:95:26:40:92:9e: 8d:0b:f5:51:b1:f2:70:1b:bd:df:60:e3:17:61:18:bc:60:da: 76:f3:74:9d:11:05:74:c2:d1:21:40:70:01:fc:0b:dd:8f:53: 63:1d:37:e1:48:26:4f:01:9a:d1:87:f5:9c:4b:30:0a:90:69: 50:a3:70:f0:0e:9d:4d:bc:1a:e0:9e:2e:3c:86:c1:18:b8:3c: e9:fc:b4:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDL9rzlSHGet2MQj/3xyYLo48hGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjAxMjUwMzQwNTdaFw0yNjAxMjYwMzQ5NTdaMDMxMTAvBgNV BAMTKDA4RjRDNjExNzA1Q0YwQjA4QTAxRTlCNUQ4RDYxODlBODEwMkExOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7a8i2y9H1NEFj2cow3VDWG0P alkO7fq5V3ap+S+Y2iWi5BKOTE3lp1tTj0OgRyx1MIFmqp7u7zXI0JntPIVBnuMj bqMFew8N476wcsSS5VfD88nH9yzESsVWHaEQ6/TdhsNufg6wuH4dy8zUUBkZnGPa Mx5k+pYEthkYhPYi+mgw3+OcYMZII8FmGW2s3J87zeNjmcFfDlLgfZOaNg7Kb1MA ZKn/8hHDRjC4qE4B0V1x+A75CVojAdVWVfGFS9cgFRiLZEyE50czkaFjnCa/Cmgr GVMDMJirSXyMUe6hDu8qWxv1c5ogKshQbuavw2A9WOF1RtX7g7lsTnLiUFZXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCPTGEXBc8LCKAem12NYYmoECoZQwHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUpUqNIsSOfa K5bpDlv7CLTDpngLiaaE3RWAsdJ5O6pEpgyRN8kaV+EpsKaBcwkDuUB5aNPVkrY5 MceJkrH0upvx7PaG2OTFknKZ7fP4QMtbdQDYjWn8AQz8ZlDJ0qocbW5OfOFbxgij qT03BUSDPk3p9jEZpeyXhG0nz1L0j1dsm05Yg/b/wH/r0L8BJ9bjINebmahKghuC ayeW1OvmkLeb/8VS7nPV5E6EbDqnm5UmQJKejQv1UbHycBu932DjF2EYvGDadvN0 nREFdMLRIUBwAfwL3Y9TYx034UgmTwGa0Yf1nEswCpBpUKNw8A6dTbwa4J4uPIbB GLg86fy0cg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:28:55 2026 by rpki-client