This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json) Hash identifier: FcyrtNBQj6Ow+gd2ITUqa9pHesDpemd2OtSaW/8bEy8= Subject key identifier: DF:C0:5E:47:A7:6B:10:E7:03:C9:DC:7E:59:02:0D:22:14:F5:E9:A1 Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Certificate serial: 2B342052B1C766A39C6AD5F50B6244721895D8B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:20:57 +0000 Manifest this update: Sun 25 Jan 2026 06:15:57 +0000 Manifest next update: Mon 26 Jan 2026 08:18:57 +0000 Files and hashes: 1: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: pBwER9sTJhTwYDQM7K5BzzFLDuRowL/EfrGMCdxJtro=) 2: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: PnRTCZodwFvvxLNCVBWc71hkMeLqFF+kuYfdErpIm54=) 3: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=) 4: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QHP6i0URLcoEUo8SGK+7kXUZkIMj8cNOFacHv1WMPHU=) 5: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: o77he71Pd9NEXOt9FzzWVFs+/AT0fFHraey01rHb7UQ=) 6: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=) 7: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:34:20:52:b1:c7:66:a3:9c:6a:d5:f5:0b:62:44:72:18:95:d8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Validity Not Before: Jan 25 06:15:57 2026 GMT Not After : Jan 26 08:18:57 2026 GMT Subject: CN=DFC05E47A76B10E703C9DC7E59020D2214F5E9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:2c:cb:9c:c3:7d:87:cf:89:ff:39:75:ee: dd:85:b3:5a:1f:57:56:ad:14:88:c1:69:8a:61:5b: 66:47:48:59:77:92:ec:2e:50:47:83:64:4e:aa:f7: 4e:c3:62:f8:58:73:9e:11:e8:2e:f9:0b:87:e6:ab: f8:e4:f2:d1:f7:1b:f8:a7:e2:c2:12:8c:db:11:cb: 79:9c:83:f0:a9:6b:b1:d1:ff:54:49:db:1c:3f:d4: 65:ac:ec:65:79:ea:27:8f:27:32:30:40:37:7f:e5: 9d:21:57:17:02:58:63:50:c6:61:dc:84:00:4c:c3: 19:ba:97:c4:85:00:78:08:b5:b0:d0:c8:32:d8:6c: fc:1d:03:22:c0:e0:fc:f5:df:16:72:7a:df:c4:98: a9:01:24:42:35:2c:d1:39:a2:43:94:a9:f2:49:e9: fc:d5:e9:54:bd:cc:12:c9:6a:a4:56:f4:11:65:21: 9c:41:65:b0:8d:e4:5d:36:30:4c:0c:ad:3a:64:76: b3:2e:91:80:26:44:21:e3:50:2a:e1:28:a1:e7:b3: cb:02:7a:b4:e3:a0:60:f1:ad:09:78:ad:eb:0f:7d: d0:86:ad:e6:2c:b5:c0:84:7b:00:4f:d7:6f:70:80: 42:f5:a1:7a:a1:f9:f6:f0:95:a1:f6:a2:39:fa:c3: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C0:5E:47:A7:6B:10:E7:03:C9:DC:7E:59:02:0D:22:14:F5:E9:A1 X509v3 Authority Key Identifier: keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:77:90:9d:f5:b2:93:dd:09:e4:bc:2b:89:ff:bd:b8:04: b3:8d:4d:6b:46:6c:7d:4f:9b:4a:3a:94:fd:c9:98:c5:b0:34: 63:ba:5a:a8:b5:05:53:bf:d0:97:3f:f3:97:2b:f4:07:18:f8: 79:70:f9:6a:f1:78:02:49:1d:43:df:d0:b6:3f:98:1c:81:ac: ea:fd:1a:4b:14:1f:bc:8e:0a:2b:75:50:2f:4a:8e:8a:af:ca: 82:89:3f:36:22:41:41:f6:21:0f:e1:7f:e0:8f:cf:3c:dd:96: b3:99:69:f2:6c:50:e5:2d:3d:8a:87:73:1b:70:65:9d:20:ce: 0c:86:7c:6d:65:89:b9:b2:16:e4:35:5a:fa:b7:ad:05:26:cb: c7:30:0b:aa:d7:ad:6a:df:7e:26:03:11:25:31:b0:a0:7c:b7: a9:99:19:82:48:05:0f:e0:6f:e5:83:75:ec:03:70:36:82:e2: ff:55:4c:43:6e:d2:4f:43:38:3a:b5:4b:aa:0f:dd:78:d0:79: 56:3e:d4:ee:69:d1:bd:fe:17:2d:bf:f3:f2:59:cd:21:33:92: 8b:cd:a9:bc:fc:a7:d4:65:a8:28:b0:f3:92:6a:e3:97:fd:00: d2:9c:14:0c:cb:89:b3:f7:16:44:2f:42:51:2a:52:67:10:f3: 03:5f:a9:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKzQgUrHHZqOcatX1C2JEchiV2LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF Njk3MDBCRjAeFw0yNjAxMjUwNjE1NTdaFw0yNjAxMjYwODE4NTdaMDMxMTAvBgNV BAMTKERGQzA1RTQ3QTc2QjEwRTcwM0M5REM3RTU5MDIwRDIyMTRGNUU5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rizLnMN9h8+J/zl17t2Fs1of V1atFIjBaYphW2ZHSFl3kuwuUEeDZE6q907DYvhYc54R6C75C4fmq/jk8tH3G/in 4sISjNsRy3mcg/Cpa7HR/1RJ2xw/1GWs7GV56iePJzIwQDd/5Z0hVxcCWGNQxmHc hABMwxm6l8SFAHgItbDQyDLYbPwdAyLA4Pz13xZyet/EmKkBJEI1LNE5okOUqfJJ 6fzV6VS9zBLJaqRW9BFlIZxBZbCN5F02MEwMrTpkdrMukYAmRCHjUCrhKKHns8sC erTjoGDxrQl4resPfdCGreYstcCEewBP129wgEL1oXqh+fbwlaH2ojn6w8P1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU38BeR6drEOcDydx+WQINIhT16aEwHwYDVR0j BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1 MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzcyNjkyNTAvMC8wQTM3QUM4OEUzMDNG NEJCODM0QzE4MEIwNkYyNTBBREU2OTcwMEJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARp3kJ31spPd CeS8K4n/vbgEs41Na0ZsfU+bSjqU/cmYxbA0Y7paqLUFU7/Qlz/zlyv0Bxj4eXD5 avF4AkkdQ9/Qtj+YHIGs6v0aSxQfvI4KK3VQL0qOiq/Kgok/NiJBQfYhD+F/4I/P PN2Ws5lp8mxQ5S09iodzG3BlnSDODIZ8bWWJubIW5DVa+retBSbLxzALqtetat9+ JgMRJTGwoHy3qZkZgkgFD+Bv5YN17ANwNoLi/1VMQ27ST0M4OrVLqg/deNB5Vj7U 7mnRvf4XLb/z8lnNITOSi82pvPyn1GWoKLDzkmrjl/0A0pwUDMuJs/cWRC9CUSpS ZxDzA1+pIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:18 2026 by rpki-client