This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: MYuJ58F9+ro87cA/soQdpfhh67t9sC0WZ9zzXVfh7ag= Subject key identifier: B7:7A:57:AA:72:B5:AB:23:64:6C:88:23:F9:C9:E5:62:98:3C:1F:B8 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 03975C35B2CD41052AAA85E485BD7FA57F75C177 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:00:57 +0000 Manifest this update: Sun 25 Jan 2026 07:55:57 +0000 Manifest next update: Mon 26 Jan 2026 08:03:57 +0000 Files and hashes: 1: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 2: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) 3: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 4: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: 04NnR2/4gqeQQn2GQitsEmedAF7xgiiEnIYUUGsEW4w=) 5: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 6: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 7: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:97:5c:35:b2:cd:41:05:2a:aa:85:e4:85:bd:7f:a5:7f:75:c1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Jan 25 07:55:57 2026 GMT Not After : Jan 26 08:03:57 2026 GMT Subject: CN=B77A57AA72B5AB23646C8823F9C9E562983C1FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:c1:5e:1d:d3:91:44:27:3b:29:70:ef:75: 7e:58:6f:6b:8e:3b:c8:22:35:5b:c3:40:61:13:94: d9:ee:06:ee:55:38:af:91:6f:8b:2b:f2:b1:5f:90: 20:6b:ee:86:3b:75:9e:fc:57:d4:17:6f:4a:fc:e1: b2:83:fe:03:49:b4:0b:fc:43:3c:84:70:07:59:57: e0:8c:7f:67:3b:4c:f6:8a:a0:32:40:5d:f0:5d:3a: 37:d3:90:69:46:10:ca:b6:13:80:b0:67:0b:45:26: 43:98:17:0c:54:54:58:87:22:19:52:84:00:fa:4c: a6:7e:dd:d3:be:65:bf:e0:cd:33:3e:9b:e7:70:d4: 64:5b:f7:e6:83:b8:f3:b4:15:0a:0f:70:8a:2b:cf: 6b:14:a5:6b:76:4b:01:c0:12:97:94:10:ca:e9:e9: 01:92:d5:62:cc:0f:d3:b3:de:f1:7b:f2:b5:66:7a: 81:36:8c:a9:cf:41:a0:1d:2a:91:24:9a:1e:69:66: d9:f5:5c:26:ac:72:f4:33:49:33:d1:fe:6c:58:1f: 80:70:8d:fd:68:1d:5b:c8:77:f1:ee:84:0b:90:b6: f5:2a:4b:e2:42:5c:76:ad:c2:a1:24:3b:bd:86:c7: b2:a1:48:7c:58:18:00:dc:ef:17:cd:d6:dd:b9:fa: 21:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:57:AA:72:B5:AB:23:64:6C:88:23:F9:C9:E5:62:98:3C:1F:B8 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:67:0e:6c:d0:95:55:23:73:ba:d4:f2:f6:99:b5:55:7a:8c: c8:f3:c5:32:e0:04:a0:81:cc:e7:64:0c:ba:1b:d1:fd:ae:09: 7c:a0:e7:fc:f2:dc:27:ed:a1:f4:00:d9:f2:f5:53:d4:ff:11: 10:54:61:00:ae:79:22:b8:24:22:90:87:a6:d2:4e:e2:6c:74: ec:43:66:24:6d:b4:58:cc:d6:20:5c:a7:d9:e3:a1:d4:57:03: 57:97:ed:70:73:11:c9:1d:a2:a8:7f:9c:e7:53:6f:b1:b4:f6: 2a:55:f1:34:01:c2:b0:49:4d:bd:26:a2:62:88:f1:ff:7a:9b: 70:6d:9a:62:4f:cc:34:58:74:6d:d0:7d:73:21:b1:00:e6:f1: 65:d7:fe:16:44:1e:0f:b0:b3:f2:d2:82:8e:af:9c:65:dc:cb: b6:07:24:51:45:21:e2:95:02:f3:c1:77:d9:d7:8c:62:a6:11: 6b:28:bc:5c:f4:cd:2b:2f:2a:1b:9d:11:99:e5:b5:22:f7:a0: 41:34:02:1a:bc:36:2a:9d:3a:28:05:33:cc:0f:91:15:ee:ee: 48:46:6c:67:e7:ce:d7:29:69:06:1c:c6:71:05:32:7a:9d:fd: db:c0:64:e1:1a:74:d9:a3:dd:13:e8:44:54:88:f3:a4:00:72: e7:8e:a6:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA5dcNbLNQQUqqoXkhb1/pX91wXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjAxMjUwNzU1NTdaFw0yNjAxMjYwODAzNTdaMDMxMTAvBgNV BAMTKEI3N0E1N0FBNzJCNUFCMjM2NDZDODgyM0Y5QzlFNTYyOTgzQzFGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzsFeHdORRCc7KXDvdX5Yb2uO O8giNVvDQGETlNnuBu5VOK+Rb4sr8rFfkCBr7oY7dZ78V9QXb0r84bKD/gNJtAv8 QzyEcAdZV+CMf2c7TPaKoDJAXfBdOjfTkGlGEMq2E4CwZwtFJkOYFwxUVFiHIhlS hAD6TKZ+3dO+Zb/gzTM+m+dw1GRb9+aDuPO0FQoPcIorz2sUpWt2SwHAEpeUEMrp 6QGS1WLMD9Oz3vF78rVmeoE2jKnPQaAdKpEkmh5pZtn1XCascvQzSTPR/mxYH4Bw jf1oHVvId/HuhAuQtvUqS+JCXHatwqEkO72Gx7KhSHxYGADc7xfN1t25+iFlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt3pXqnK1qyNkbIgj+cnlYpg8H7gwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2cObNCVVSNz utTy9pm1VXqMyPPFMuAEoIHM52QMuhvR/a4JfKDn/PLcJ+2h9ADZ8vVT1P8REFRh AK55IrgkIpCHptJO4mx07ENmJG20WMzWIFyn2eOh1FcDV5ftcHMRyR2iqH+c51Nv sbT2KlXxNAHCsElNvSaiYojx/3qbcG2aYk/MNFh0bdB9cyGxAObxZdf+FkQeD7Cz 8tKCjq+cZdzLtgckUUUh4pUC88F32deMYqYRayi8XPTNKy8qG50RmeW1IvegQTQC Grw2Kp06KAUzzA+RFe7uSEZsZ+fO1ylpBhzGcQUyep3928Bk4Rp02aPdE+hEVIjz pABy546mYw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:55 2026 by rpki-client