This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: gyuLidu8VlJWFu1luBKpedCvdtDG1N3xpNueIRDQGE4= Subject key identifier: AB:AA:1D:FB:0A:33:B6:97:15:A7:A2:19:90:49:0A:DD:59:73:7D:C2 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 45A553266D894D1777DF9B66986C91F2B9D1342A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 02:30:57 +0000 Manifest this update: Sun 25 Jan 2026 02:25:57 +0000 Manifest next update: Mon 26 Jan 2026 04:56:57 +0000 Files and hashes: 1: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: BRwVq8arjCWC7jHpXH+aQ1AXqqRxxnc1YvSAP46bDPI=) 2: 3130332e34342e3134342e302f32322d3232203d3e203535393931.roa (hash: 9QpEwcLlTSumOVyS9dHL6HMKkLj+qy0YVIHIa2L518I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a5:53:26:6d:89:4d:17:77:df:9b:66:98:6c:91:f2:b9:d1:34:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Jan 25 02:25:57 2026 GMT Not After : Jan 26 04:56:57 2026 GMT Subject: CN=ABAA1DFB0A33B69715A7A21990490ADD59737DC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:94:39:a1:21:84:81:3a:2e:e6:6e:6c:f3: 9b:d6:b8:d1:11:40:e3:7a:e4:d7:e1:e0:c5:5c:73: 61:85:75:de:89:60:92:c5:10:73:b8:6a:63:e0:87: db:d4:3f:93:8d:6c:07:72:d9:07:be:2d:fa:af:b0: 7a:05:9f:3f:9e:5b:8b:c6:04:ef:7f:72:34:17:31: dd:5b:33:1a:31:f9:ab:14:87:b4:26:db:04:fd:fe: 6b:5f:4f:81:d2:9b:45:08:b8:e8:d3:ae:12:f7:40: a8:83:09:27:03:28:a0:4c:60:65:1f:48:cb:e3:ca: 7b:d4:fa:c6:20:22:ef:f8:6d:96:c4:91:0a:07:73: 12:ed:0b:4c:fd:4c:79:53:fa:78:d1:fb:41:22:3d: 58:d2:c1:40:e5:95:a7:fb:01:fc:96:ea:ae:3d:ee: 7d:b5:82:27:da:21:a0:c0:99:0a:7b:8a:d2:1f:af: 90:ac:59:79:ff:e6:54:fe:f6:81:a8:0a:b6:7c:2d: ed:82:07:d9:9d:b8:d8:55:54:02:da:19:56:c0:52: f6:b6:83:e3:05:4d:ba:38:72:6a:f5:68:45:c7:ac: 4e:3a:fb:77:6d:ea:58:54:96:d1:50:9f:2e:7c:fe: 41:6e:e8:1c:14:63:aa:db:d8:2b:22:b0:22:53:bb: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AA:1D:FB:0A:33:B6:97:15:A7:A2:19:90:49:0A:DD:59:73:7D:C2 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:71:5a:44:66:31:d7:c4:d5:58:52:b2:16:7e:6a:b0:6b:7f: 13:43:e5:e3:44:f5:d2:59:9b:e2:82:ee:ee:3d:3c:93:0b:4d: ee:9f:9a:70:0c:b5:d9:10:19:3b:75:f7:83:a3:6d:60:49:8f: d8:66:1c:ce:db:7d:a6:07:ea:dc:f2:be:50:e7:40:74:30:3d: 10:5f:16:a2:4f:14:7c:62:c8:32:90:fb:a8:29:0a:a4:25:7f: 10:fd:f1:45:a8:c2:9a:6a:1e:90:3b:7a:bf:af:1f:60:4a:5b: b1:65:3c:d1:31:55:55:8d:33:fc:e8:c8:ea:a4:0d:58:78:4f: be:4e:56:ac:ab:d7:f4:cc:18:a2:6a:5e:e6:8f:2d:ab:15:7c: 6f:be:15:0a:21:ed:e5:c1:f7:80:86:3a:8c:5b:23:1c:30:74: c9:96:c8:b3:7a:08:b6:8e:b6:0e:1b:76:9d:e4:81:2a:b3:20: 61:9b:cc:8f:8f:0c:18:c3:d3:2e:4a:4b:8f:f7:31:27:89:7a: 13:37:9c:65:d9:11:a7:d4:f7:af:bd:93:b0:ab:cc:9b:dc:fc: d8:ca:72:eb:96:3e:ce:6f:2d:b9:cc:00:79:97:93:be:5a:c5: 48:2a:d5:f2:20:dc:6d:7c:a2:b6:e1:d3:c3:e4:70:11:f9:50: a4:ee:93:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURaVTJm2JTRd335tmmGyR8rnRNCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjAxMjUwMjI1NTdaFw0yNjAxMjYwNDU2NTdaMDMxMTAvBgNV BAMTKEFCQUExREZCMEEzM0I2OTcxNUE3QTIxOTkwNDkwQURENTk3MzdEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbr5Q5oSGEgTou5m5s85vWuNER QON65Nfh4MVcc2GFdd6JYJLFEHO4amPgh9vUP5ONbAdy2Qe+LfqvsHoFnz+eW4vG BO9/cjQXMd1bMxox+asUh7Qm2wT9/mtfT4HSm0UIuOjTrhL3QKiDCScDKKBMYGUf SMvjynvU+sYgIu/4bZbEkQoHcxLtC0z9THlT+njR+0EiPVjSwUDllaf7AfyW6q49 7n21gifaIaDAmQp7itIfr5CsWXn/5lT+9oGoCrZ8Le2CB9mduNhVVALaGVbAUva2 g+MFTbo4cmr1aEXHrE46+3dt6lhUltFQny58/kFu6BwUY6rb2CsisCJTu9ovAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUq6od+woztpcVp6IZkEkK3VlzfcIwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXFaRGYx18TV WFKyFn5qsGt/E0Pl40T10lmb4oLu7j08kwtN7p+acAy12RAZO3X3g6NtYEmP2GYc ztt9pgfq3PK+UOdAdDA9EF8Wok8UfGLIMpD7qCkKpCV/EP3xRajCmmoekDt6v68f YEpbsWU80TFVVY0z/OjI6qQNWHhPvk5WrKvX9MwYompe5o8tqxV8b74VCiHt5cH3 gIY6jFsjHDB0yZbIs3oIto62Dht2neSBKrMgYZvMj48MGMPTLkpLj/cxJ4l6Ezec ZdkRp9T3r72TsKvMm9z82Mpy65Y+zm8tucwAeZeTvlrFSCrV8iDcbXyituHTw+Rw EflQpO6TLw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:55 2026 by rpki-client