This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: HxrSWLH72cEBXVqQLPM57OutDFPmvJA4cMf7qITtVfc= Subject key identifier: E5:A4:A0:96:6E:10:A6:1D:87:FC:5F:F7:76:BB:FA:A6:A4:CA:DB:C2 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 695F07CE95398473237B7A8190EEACEAF6111BE2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:40:57 +0000 Manifest this update: Sun 25 Jan 2026 06:35:57 +0000 Manifest next update: Mon 26 Jan 2026 07:10:57 +0000 Files and hashes: 1: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 2: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: eeZb0P0xSrcg5Cjxa/bgXi9iR/IPXsUS7R+SJ86i19Y=) 3: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 4: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 5: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5f:07:ce:95:39:84:73:23:7b:7a:81:90:ee:ac:ea:f6:11:1b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Jan 25 06:35:57 2026 GMT Not After : Jan 26 07:10:57 2026 GMT Subject: CN=E5A4A0966E10A61D87FC5FF776BBFAA6A4CADBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:9b:1d:cd:5b:76:a6:33:4a:c0:a9:fe:47: d6:5e:3c:0c:15:1f:12:25:1a:7e:d9:6f:a8:17:0b: 22:b7:d5:48:ae:c9:9f:b8:5a:44:99:2d:42:76:81: 7f:60:dd:0b:58:cb:66:14:b9:a6:3c:ef:eb:40:61: 5d:d4:fc:56:e5:d4:5f:58:a0:8b:b8:3c:c3:c4:4c: 4c:f6:15:c5:99:3d:cd:96:f7:fb:c1:f3:f2:ea:c2: 9f:49:4b:00:cb:76:64:38:7a:3e:2e:f4:04:c2:26: 9d:4d:66:94:19:a8:a6:96:5f:e8:52:0f:a6:25:61: cd:b6:cd:29:e4:3c:9b:ff:31:30:d4:a3:ab:09:ea: 28:9a:b1:3f:84:33:32:31:5e:f4:52:14:93:8d:a7: aa:3e:91:4c:b2:f0:b0:ee:f0:a0:1a:5e:b5:5c:80: fc:c1:4a:9b:86:27:f5:18:40:ce:0b:69:a0:5c:60: ff:64:17:58:7f:0b:d1:ba:d9:a5:4c:49:a7:bc:e8: e6:56:d7:f6:37:cf:22:89:19:b3:17:83:9d:af:35: 68:b3:9a:db:bc:57:b1:4e:8d:6d:9b:72:8a:84:17: 52:96:cb:1d:79:ed:61:a2:fc:70:a0:f9:2b:54:df: 1a:3b:db:ec:d2:32:7a:63:ad:07:a9:d0:4e:f6:25: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A4:A0:96:6E:10:A6:1D:87:FC:5F:F7:76:BB:FA:A6:A4:CA:DB:C2 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:15:6f:03:75:de:72:21:c4:43:d4:2b:77:e6:84:78:4d:10: 93:3c:8a:7d:f6:a7:a7:03:2c:4a:52:3e:74:ee:dc:cc:4b:b8: 3a:3f:a8:e0:e0:86:3a:52:95:b1:7d:b0:a7:3a:e7:91:c0:87: 41:62:2d:07:18:f9:8e:9c:8c:e1:e4:d4:99:28:42:97:83:53: f7:56:0a:5e:a4:7a:02:0a:fa:93:fa:d3:4f:87:68:ad:10:f6: 7c:48:24:f4:f3:48:a9:f0:a4:61:4a:0b:78:1e:7b:74:a2:fe: df:26:c0:d5:88:ab:d3:6c:ba:e6:94:f5:fd:38:0f:3c:42:5a: f8:57:22:3b:42:e3:c0:77:e4:1e:b8:aa:a4:f6:90:c0:f1:d2: a0:f6:59:ed:8c:ec:b5:94:6e:cd:4a:19:3f:dc:05:13:03:6e: 57:70:cb:6d:5b:31:0b:79:a1:42:7b:fe:57:ab:7e:21:a3:ce: 3c:cc:bf:0e:93:1b:df:4e:47:6b:a5:81:7b:a3:5b:2a:50:0b: 67:a1:7e:95:be:21:96:8d:97:fc:67:66:61:d3:78:58:47:96: 24:59:a5:ee:5f:89:8e:82:cc:f2:6e:33:c5:ed:84:e3:1d:3c: 65:45:b7:76:b2:a9:9c:20:a9:82:46:e6:de:0b:a2:56:4c:53: 97:5f:c6:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaV8HzpU5hHMje3qBkO6s6vYRG+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjAxMjUwNjM1NTdaFw0yNjAxMjYwNzEwNTdaMDMxMTAvBgNV BAMTKEU1QTRBMDk2NkUxMEE2MUQ4N0ZDNUZGNzc2QkJGQUE2QTRDQURCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeeZsdzVt2pjNKwKn+R9ZePAwV HxIlGn7Zb6gXCyK31UiuyZ+4WkSZLUJ2gX9g3QtYy2YUuaY87+tAYV3U/Fbl1F9Y oIu4PMPETEz2FcWZPc2W9/vB8/Lqwp9JSwDLdmQ4ej4u9ATCJp1NZpQZqKaWX+hS D6YlYc22zSnkPJv/MTDUo6sJ6iiasT+EMzIxXvRSFJONp6o+kUyy8LDu8KAaXrVc gPzBSpuGJ/UYQM4LaaBcYP9kF1h/C9G62aVMSae86OZW1/Y3zyKJGbMXg52vNWiz mtu8V7FOjW2bcoqEF1KWyx157WGi/HCg+StU3xo72+zSMnpjrQep0E72Jcg5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5aSglm4Qph2H/F/3drv6pqTK28IwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhVvA3XeciHE Q9Qrd+aEeE0QkzyKffanpwMsSlI+dO7czEu4Oj+o4OCGOlKVsX2wpzrnkcCHQWIt Bxj5jpyM4eTUmShCl4NT91YKXqR6Agr6k/rTT4dorRD2fEgk9PNIqfCkYUoLeB57 dKL+3ybA1Yir02y65pT1/TgPPEJa+FciO0LjwHfkHriqpPaQwPHSoPZZ7YzstZRu zUoZP9wFEwNuV3DLbVsxC3mhQnv+V6t+IaPOPMy/DpMb305Ha6WBe6NbKlALZ6F+ lb4hlo2X/GdmYdN4WEeWJFml7l+JjoLM8m4zxe2E4x08ZUW3drKpnCCpgkbm3gui VkxTl1/GsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:52 2026 by rpki-client