This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json) Hash identifier: LTiHc2zQyQ9WblwRdMAYzWFfOANrkias/VJC8IDUOo0= Subject key identifier: 4E:87:2D:73:A1:1B:56:95:EC:E1:CF:7A:40:3E:59:CA:36:9B:D8:AE Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 408A179BC7F5DCABA3F548ADB75ACA4627E47331 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:20:57 +0000 Manifest this update: Sat 24 Jan 2026 17:15:57 +0000 Manifest next update: Sun 25 Jan 2026 20:41:57 +0000 Files and hashes: 1: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=) 2: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: On2rGCAXJ+O9ap2S0ei/AoBkaMVjAaoXZ71JnsQhhbs=) 3: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=) 4: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8a:17:9b:c7:f5:dc:ab:a3:f5:48:ad:b7:5a:ca:46:27:e4:73:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jan 24 17:15:57 2026 GMT Not After : Jan 25 20:41:57 2026 GMT Subject: CN=4E872D73A11B5695ECE1CF7A403E59CA369BD8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:c1:4a:b2:da:4b:12:a9:95:df:11:c9:c3: 5a:76:51:2d:49:a8:23:e7:10:6a:7d:94:22:ee:c7: 39:5f:6a:4e:41:50:53:4e:de:e6:f1:4a:3e:97:67: 30:57:b8:53:6d:e2:13:f3:a1:d0:aa:e3:a7:fc:d6: ad:45:9b:43:f0:be:5e:3f:58:10:53:c9:d8:59:04: f4:78:1c:a3:73:e9:17:2b:e1:9f:7a:27:5c:ac:40: d8:0a:cc:a3:f7:3f:a1:52:12:e4:98:cd:13:3a:55: 22:24:1a:16:a4:b7:05:74:a3:92:54:2e:80:c4:68: 8e:50:c5:f4:57:8a:b8:0f:e8:b4:fd:5d:37:2c:d2: 33:87:29:9d:5a:04:b9:4b:4d:96:49:70:a5:ac:d3: f9:51:58:63:06:cf:51:4d:a1:dd:1c:15:30:e3:10: 55:69:d6:a3:d6:95:fa:82:6f:02:b9:8d:0f:e2:ec: 9c:95:ef:bd:41:f3:e9:53:c3:43:fe:b6:41:03:d6: f1:d0:c6:d0:0e:82:8d:ce:36:38:70:cd:2c:e2:be: a1:27:7e:76:d1:8a:92:89:00:92:19:5e:93:85:3d: 97:f5:8c:06:5f:b5:3b:90:1e:bf:6d:21:ba:61:19: c0:b1:8a:02:90:29:fd:fe:7c:f2:2e:19:3d:35:06: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:87:2D:73:A1:1B:56:95:EC:E1:CF:7A:40:3E:59:CA:36:9B:D8:AE X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a6:2d:e4:00:4c:8b:48:f4:fc:d0:d6:b0:9d:19:1a:71:10: 02:19:cc:5c:04:16:d9:cb:35:81:60:31:2a:a3:b7:8c:90:f1: 3a:0b:5a:d5:3d:6d:c5:7f:4c:65:89:ac:76:8a:de:0e:09:b2: 1a:ac:2b:de:c4:6e:6e:f0:a6:36:df:3e:12:ad:84:49:2f:d4: ac:f1:bf:78:88:7d:c6:9b:e6:05:63:60:3f:0e:1b:4a:4a:53: c4:6a:cc:57:c0:c5:7b:a2:b1:dd:dc:69:a0:ef:c4:9d:ee:aa: 2a:3e:53:b3:ae:81:1f:e6:ad:7b:ca:bd:13:e0:3b:d5:78:3d: 10:61:d4:90:e1:a3:60:65:a9:af:78:00:28:fb:63:e8:de:a3: 54:5d:2e:97:f2:6c:f1:22:b3:95:65:46:be:f6:ea:61:db:ba: fb:ee:ca:93:64:29:b3:1b:bc:be:dc:8d:e2:b7:86:8f:a7:b1: dc:0d:45:ba:b0:59:89:d2:ea:59:02:f7:49:00:62:2b:38:15: 76:e0:f1:32:bf:ec:36:d8:1f:83:e6:ce:ee:41:33:40:32:56: 07:c7:2c:67:bd:93:df:a8:a9:61:89:17:5e:3c:db:1e:be:88: 32:19:18:3d:8a:9a:6f:e6:6f:74:a9:7f:48:d2:ba:f0:38:f4: 5a:c5:69:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQIoXm8f13Kuj9Uitt1rKRifkczEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjAxMjQxNzE1NTdaFw0yNjAxMjUyMDQxNTdaMDMxMTAvBgNV BAMTKDRFODcyRDczQTExQjU2OTVFQ0UxQ0Y3QTQwM0U1OUNBMzY5QkQ4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+28FKstpLEqmV3xHJw1p2US1J qCPnEGp9lCLuxzlfak5BUFNO3ubxSj6XZzBXuFNt4hPzodCq46f81q1Fm0Pwvl4/ WBBTydhZBPR4HKNz6Rcr4Z96J1ysQNgKzKP3P6FSEuSYzRM6VSIkGhaktwV0o5JU LoDEaI5QxfRXirgP6LT9XTcs0jOHKZ1aBLlLTZZJcKWs0/lRWGMGz1FNod0cFTDj EFVp1qPWlfqCbwK5jQ/i7JyV771B8+lTw0P+tkED1vHQxtAOgo3ONjhwzSzivqEn fnbRipKJAJIZXpOFPZf1jAZftTuQHr9tIbphGcCxigKQKf3+fPIuGT01BnHVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUToctc6EbVpXs4c96QD5Zyjab2K4wHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKYt5ABMi0j0 /NDWsJ0ZGnEQAhnMXAQW2cs1gWAxKqO3jJDxOgta1T1txX9MZYmsdoreDgmyGqwr 3sRubvCmNt8+Eq2ESS/UrPG/eIh9xpvmBWNgPw4bSkpTxGrMV8DFe6Kx3dxpoO/E ne6qKj5Ts66BH+ate8q9E+A71Xg9EGHUkOGjYGWpr3gAKPtj6N6jVF0ul/Js8SKz lWVGvvbqYdu6++7Kk2Qpsxu8vtyN4reGj6ex3A1FurBZidLqWQL3SQBiKzgVduDx Mr/sNtgfg+bO7kEzQDJWB8csZ72T36ipYYkXXjzbHr6IMhkYPYqab+ZvdKl/SNK6 8Dj0WsVp5w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:15 2026 by rpki-client