This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: LICmaZ3xkErzcj3DszULgFy1y9bNL7nzUdl7blLKiQM= Subject key identifier: 61:49:6F:15:4A:C1:86:07:29:3C:61:68:A5:A2:17:51:B3:01:90:44 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 45899598B4687A7A391111B6DB05E0738679DED3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 11:20:57 +0000 Manifest this update: Sat 24 Jan 2026 11:15:57 +0000 Manifest next update: Sun 25 Jan 2026 14:44:57 +0000 Files and hashes: 1: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 3: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 4: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 5: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: tvSuFmMjXGJ72EFaEDsUm1kt1vH3vyFLN5aOP9iTV6M=) 6: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:89:95:98:b4:68:7a:7a:39:11:11:b6:db:05:e0:73:86:79:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Jan 24 11:15:57 2026 GMT Not After : Jan 25 14:44:57 2026 GMT Subject: CN=61496F154AC18607293C6168A5A21751B3019044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:3b:df:a0:98:ca:22:55:3e:0f:03:c2:32: 4d:b7:cb:1c:e5:c1:08:4b:1b:75:7c:7c:00:d1:1b: 25:49:e9:a0:22:ec:b5:01:99:10:e2:fb:3c:2f:66: ba:3e:f1:35:34:13:45:4d:9a:0d:24:3d:4e:be:06: 1b:2a:84:21:a1:95:68:f7:dc:db:97:5d:06:6f:b1: 66:c6:32:55:c7:0f:fc:2e:64:6c:14:c5:c9:bd:20: 69:74:6e:9e:9d:97:4a:ce:39:a7:7d:68:b9:f1:93: 26:9e:7c:06:70:69:01:4e:64:5b:57:08:6d:72:01: 1d:c6:14:5d:2b:ca:3a:34:7e:ae:be:13:3b:8b:2e: 93:b2:44:b2:9f:50:0d:68:3f:c2:67:51:97:7c:06: 5c:85:99:8e:94:37:a0:00:66:1c:49:b2:4e:ab:2f: da:49:27:5a:db:67:1e:b0:8d:ba:6a:01:1b:67:cc: 3a:83:36:4c:50:56:be:08:55:83:47:a9:63:55:3c: 03:7a:a2:79:cd:2a:bf:f2:52:53:f0:66:8e:57:75: de:3e:4a:bc:7c:81:a3:ed:62:2b:64:f0:fc:c6:ce: e3:c2:2c:89:d8:85:92:47:53:86:94:bf:41:ac:2d: 61:54:a4:26:5b:b0:e7:68:fd:d5:c6:4c:e2:0f:b2: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:6F:15:4A:C1:86:07:29:3C:61:68:A5:A2:17:51:B3:01:90:44 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6c:b7:6e:c8:00:fd:d4:08:31:79:3e:f6:e6:d4:28:b1:5b: 34:75:c7:b0:5b:89:3a:13:f6:74:eb:3d:a5:9a:77:5f:7a:db: 04:6d:8d:4e:85:39:a2:b6:a9:5b:f2:a6:47:ef:7c:8d:92:e4: 10:5e:61:a9:b8:21:5b:04:26:20:4a:41:91:0e:7a:d7:e0:1d: 12:59:40:40:d7:f4:94:41:8d:7d:ae:05:5c:d7:d8:05:cf:8c: 50:ea:09:6f:e3:0c:3e:80:93:72:d4:1b:f0:c9:66:55:71:83: d8:47:a7:fc:65:23:47:6e:3b:92:fd:8d:c7:f9:51:bf:38:62: 5f:8d:e2:49:bf:44:61:fb:5a:dc:76:82:99:f1:b4:75:94:eb: e0:47:c1:83:63:fd:8b:d3:29:6b:0f:ac:fd:3a:9c:5e:6f:f4: da:f5:7b:e4:39:db:28:b4:e0:62:59:f8:74:c3:d5:07:dc:42: 10:20:4c:1a:43:c1:b7:c1:8f:fd:4b:13:e6:ff:bf:f4:88:d3: 90:ca:f6:44:b1:78:5f:68:88:99:bd:44:04:04:e0:4d:34:10: 60:e1:58:50:7a:0b:98:30:37:40:ab:a5:7c:9a:cf:3e:7c:cb: 2b:28:c0:47:ee:3f:57:0f:9c:cf:3d:5e:ce:f7:da:9c:5f:9c: 52:01:7f:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURYmVmLRoeno5ERG22wXgc4Z53tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjAxMjQxMTE1NTdaFw0yNjAxMjUxNDQ0NTdaMDMxMTAvBgNV BAMTKDYxNDk2RjE1NEFDMTg2MDcyOTNDNjE2OEE1QTIxNzUxQjMwMTkwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiDvfoJjKIlU+DwPCMk23yxzl wQhLG3V8fADRGyVJ6aAi7LUBmRDi+zwvZro+8TU0E0VNmg0kPU6+BhsqhCGhlWj3 3NuXXQZvsWbGMlXHD/wuZGwUxcm9IGl0bp6dl0rOOad9aLnxkyaefAZwaQFOZFtX CG1yAR3GFF0ryjo0fq6+EzuLLpOyRLKfUA1oP8JnUZd8BlyFmY6UN6AAZhxJsk6r L9pJJ1rbZx6wjbpqARtnzDqDNkxQVr4IVYNHqWNVPAN6onnNKr/yUlPwZo5Xdd4+ Srx8gaPtYitk8PzGzuPCLInYhZJHU4aUv0GsLWFUpCZbsOdo/dXGTOIPsjttAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYUlvFUrBhgcpPGFopaIXUbMBkEQwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGy3bsgA/dQI MXk+9ubUKLFbNHXHsFuJOhP2dOs9pZp3X3rbBG2NToU5orapW/KmR+98jZLkEF5h qbghWwQmIEpBkQ561+AdEllAQNf0lEGNfa4FXNfYBc+MUOoJb+MMPoCTctQb8Mlm VXGD2Een/GUjR247kv2Nx/lRvzhiX43iSb9EYfta3HaCmfG0dZTr4EfBg2P9i9Mp aw+s/TqcXm/02vV75DnbKLTgYln4dMPVB9xCECBMGkPBt8GP/UsT5v+/9IjTkMr2 RLF4X2iImb1EBATgTTQQYOFYUHoLmDA3QKulfJrPPnzLKyjAR+4/Vw+czz1ezvfa nF+cUgF/5w== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:39 2026 by rpki-client