This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: 1+wmoAYscCcOhwyRZAMMKPpDz0/zfU3YJPjhuH0dslc= Subject key identifier: 71:71:4D:5A:47:79:83:21:C1:66:73:49:C9:D0:BA:0D:81:C5:50:05 Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 35D242F8AC3E610D47D8CA61298AB07922277A21 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 21:35:57 +0000 Manifest this update: Sat 24 Jan 2026 21:30:57 +0000 Manifest next update: Mon 26 Jan 2026 01:16:57 +0000 Files and hashes: 1: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 2: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: NF/D5RH4CKo4kqWtdi/u3jYusw+6loSdprRqdpd6VIE=) 3: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 4: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 5: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) 6: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 7: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:42:f8:ac:3e:61:0d:47:d8:ca:61:29:8a:b0:79:22:27:7a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Jan 24 21:30:57 2026 GMT Not After : Jan 26 01:16:57 2026 GMT Subject: CN=71714D5A47798321C1667349C9D0BA0D81C55005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:4f:c6:7d:e1:c9:11:28:34:4b:d2:36:39: 1c:aa:5d:43:58:92:cf:78:f4:c0:36:a6:cf:86:2c: 4b:d6:80:06:af:f0:86:03:16:6d:a3:2c:f8:6b:4e: d6:78:f4:95:4d:fa:ab:b1:b4:9e:e9:9a:ad:b4:de: a0:81:95:27:6a:5b:06:68:cd:d3:d5:5c:e3:c7:55: a1:ca:eb:ba:c9:a7:4a:d4:40:b0:7c:d8:eb:02:99: 77:7b:d6:3a:b4:1d:45:8b:6f:0b:dd:f5:d8:67:d7: 9b:ea:67:f1:c4:f3:ca:24:c5:f4:39:34:e7:a9:91: f7:e7:f4:76:96:6c:76:95:07:ce:d3:3b:3b:49:f1: cf:1e:7f:6e:30:e9:76:ac:e7:6e:d0:99:91:02:0f: 21:83:32:13:d1:a3:0d:ec:72:ce:73:d0:de:14:40: f5:c6:0d:44:38:80:44:61:a1:0f:08:09:f2:66:39: f0:0d:0e:09:33:0c:22:58:be:ec:2e:3e:76:d4:1e: 9c:e4:4c:cf:3a:ab:5c:7a:db:ea:ca:b7:e6:80:33: da:76:0f:f1:90:57:cf:0d:62:92:16:2b:d0:5c:72: 01:26:3d:f3:53:89:8d:2d:55:ac:76:e8:8f:d5:ba: 2a:32:7e:e5:f7:43:c0:a6:e1:d2:eb:e6:41:57:a9: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:71:4D:5A:47:79:83:21:C1:66:73:49:C9:D0:BA:0D:81:C5:50:05 X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:29:a5:b2:aa:83:38:5c:da:dc:f6:65:c3:86:27:05:08:bd: fc:3c:18:21:38:92:d4:d5:95:da:11:84:82:59:a3:14:09:bb: 74:dc:eb:82:51:21:8f:86:6d:7c:14:1c:f6:e7:84:b1:8e:dc: e7:11:e4:ba:4f:47:b2:11:10:ad:bb:bb:fa:07:06:b9:61:91: df:ea:0f:d9:ef:f3:f2:7b:13:81:75:a6:3d:06:75:1f:d0:21: d8:64:6c:a3:66:c3:46:d1:13:f0:07:26:a2:cc:80:29:34:f6: b1:72:63:87:2b:fb:a9:48:ec:29:0f:9f:e5:c0:d5:9c:cf:c5: 85:c8:c2:8d:ed:db:ed:6a:ac:e8:99:57:9b:7e:1a:eb:2c:34: b8:f5:f0:cb:5a:35:0c:59:de:a2:98:b0:5b:95:35:c9:62:e9: a4:22:4c:e2:a5:65:77:a9:98:29:1f:05:34:f4:b0:80:42:e4: 02:ef:98:a0:75:f6:d6:ca:e2:c8:a4:a7:da:e1:8d:e4:25:d7: 03:89:1e:85:03:f5:37:d5:4d:bb:f6:43:60:4a:5b:38:72:eb: 08:5a:36:79:17:fe:05:0c:99:6e:6a:9b:09:f7:8f:c4:3e:64: b5:38:1d:41:2b:90:44:f7:57:c7:45:4e:3b:59:38:bb:02:d0: b1:b7:0e:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNdJC+Kw+YQ1H2MphKYqweSIneiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjAxMjQyMTMwNTdaFw0yNjAxMjYwMTE2NTdaMDMxMTAvBgNV BAMTKDcxNzE0RDVBNDc3OTgzMjFDMTY2NzM0OUM5RDBCQTBEODFDNTUwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPk/GfeHJESg0S9I2ORyqXUNY ks949MA2ps+GLEvWgAav8IYDFm2jLPhrTtZ49JVN+quxtJ7pmq203qCBlSdqWwZo zdPVXOPHVaHK67rJp0rUQLB82OsCmXd71jq0HUWLbwvd9dhn15vqZ/HE88okxfQ5 NOepkffn9HaWbHaVB87TOztJ8c8ef24w6Xas527QmZECDyGDMhPRow3scs5z0N4U QPXGDUQ4gERhoQ8ICfJmOfANDgkzDCJYvuwuPnbUHpzkTM86q1x62+rKt+aAM9p2 D/GQV88NYpIWK9BccgEmPfNTiY0tVax26I/VuioyfuX3Q8Cm4dLr5kFXqXZpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcXFNWkd5gyHBZnNJydC6DYHFUAUwHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSmlsqqDOFza 3PZlw4YnBQi9/DwYITiS1NWV2hGEglmjFAm7dNzrglEhj4ZtfBQc9ueEsY7c5xHk uk9HshEQrbu7+gcGuWGR3+oP2e/z8nsTgXWmPQZ1H9Ah2GRso2bDRtET8AcmosyA KTT2sXJjhyv7qUjsKQ+f5cDVnM/FhcjCje3b7Wqs6JlXm34a6yw0uPXwy1o1DFne opiwW5U1yWLppCJM4qVld6mYKR8FNPSwgELkAu+YoHX21sriyKSn2uGN5CXXA4ke hQP1N9VNu/ZDYEpbOHLrCFo2eRf+BQyZbmqbCfePxD5ktTgdQSuQRPdXx0VOO1k4 uwLQsbcOrg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:36 2026 by rpki-client