This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: JS4bTBAXohQSTv+T1G5JdsXV13ZN6+gFuytP7u16P+8= Subject key identifier: 15:BC:20:BA:85:4E:3A:94:D8:E5:88:3B:89:4E:6D:B1:82:0F:E1:E2 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 79C8AD6DA7E1F185BCEC0B4F3CE453E78D8BA67E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 09:21:02 +0000 Manifest this update: Sun 25 Jan 2026 09:16:02 +0000 Manifest next update: Mon 26 Jan 2026 11:49:02 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: C+iB8IIXq7u/EeJ4uFcJwcl1x6FJAiDE5VfR8WVoGvg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c8:ad:6d:a7:e1:f1:85:bc:ec:0b:4f:3c:e4:53:e7:8d:8b:a6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Jan 25 09:16:02 2026 GMT Not After : Jan 26 11:49:02 2026 GMT Subject: CN=15BC20BA854E3A94D8E5883B894E6DB1820FE1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:de:89:2f:5f:01:b5:16:59:c8:1b:e4:43: f8:f5:a2:b3:22:1e:b2:f9:69:88:15:eb:d1:ec:6e: ee:68:fe:25:14:3d:e1:f4:c3:e7:19:36:fe:f8:f5: 5e:05:f7:e9:83:30:d0:be:67:cd:d8:de:e3:4e:95: 88:fb:9e:27:b6:55:d4:d8:c9:d7:fc:ce:9e:95:11: 43:d3:d2:c3:37:6e:13:e5:6c:27:15:f3:f6:d9:37: df:40:78:67:a4:9f:7f:30:7f:02:65:39:94:ea:b8: 5f:78:9c:55:ff:58:18:47:8c:58:2c:a4:e4:ed:dd: 6e:f2:94:d0:60:ed:dc:74:23:60:da:20:eb:a8:42: 6d:5b:19:d3:e0:34:6d:e1:90:f8:95:7a:6f:d0:31: 1e:8d:2d:eb:0a:48:2f:8f:49:e8:cc:73:09:72:fc: 2d:ec:1c:1d:8c:e3:bb:07:30:ce:eb:e9:c9:d4:c9: a3:64:02:eb:cd:36:06:4e:a4:a4:ff:e5:30:7c:81: 2b:6f:3e:90:85:0e:7b:03:4b:73:b6:09:52:e2:83: 6b:d4:ec:1d:a7:ef:4e:70:da:64:7f:16:6c:5d:9f: 94:60:85:6a:6c:80:2b:31:ec:9c:11:45:31:03:3f: ee:05:c2:5b:7a:0c:fa:b1:b2:41:73:c7:1d:33:6d: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BC:20:BA:85:4E:3A:94:D8:E5:88:3B:89:4E:6D:B1:82:0F:E1:E2 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:25:c1:9d:09:7d:18:4f:27:26:1b:8a:1f:66:d3:9c:2a:bb: 27:bb:f8:f6:3c:3c:cc:fe:6f:2c:5a:cd:77:3f:d7:de:d0:0f: 0d:eb:7e:e6:b7:e3:2c:06:48:0a:05:50:a4:50:e2:f1:db:ae: b0:ad:5c:17:2e:df:5e:f4:31:3d:bf:e2:be:c1:24:e9:7c:6f: c4:74:cc:33:e1:d0:70:a8:0a:0f:d6:4d:49:90:dc:6e:82:c3: 49:f0:7c:c2:30:1e:6e:69:f8:e4:78:45:e9:f2:bd:2b:4c:c3: 1f:a9:fa:2f:fc:43:f7:e5:3d:30:32:d7:64:d3:be:a4:8d:c6: 6b:1d:84:86:fe:c6:77:40:6f:08:d4:c0:85:e1:d1:fe:a1:47: ba:f7:18:ab:a9:23:1f:bd:53:0e:d2:19:c5:eb:61:88:2c:32: 1f:48:92:7d:1e:11:a0:44:1c:f3:94:c5:f6:c4:a5:f7:6a:81: d0:50:be:82:35:4c:8e:da:4f:6a:5b:a1:e6:7f:39:45:66:7a: a2:c2:e0:48:90:69:4d:bc:39:3d:6f:6c:54:84:d0:76:da:38: 02:bd:82:2d:b5:bd:36:31:dc:44:80:0a:16:a4:d3:dd:82:5e: 8b:0e:78:4f:7b:0a:1e:22:68:e9:5c:5d:d6:fa:f0:c5:ee:a8: e2:bd:78:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUecitbafh8YW87AtPPORT542Lpn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjAxMjUwOTE2MDJaFw0yNjAxMjYxMTQ5MDJaMDMxMTAvBgNV BAMTKDE1QkMyMEJBODU0RTNBOTREOEU1ODgzQjg5NEU2REIxODIwRkUxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNy96JL18BtRZZyBvkQ/j1orMi HrL5aYgV69Hsbu5o/iUUPeH0w+cZNv749V4F9+mDMNC+Z83Y3uNOlYj7nie2VdTY ydf8zp6VEUPT0sM3bhPlbCcV8/bZN99AeGekn38wfwJlOZTquF94nFX/WBhHjFgs pOTt3W7ylNBg7dx0I2DaIOuoQm1bGdPgNG3hkPiVem/QMR6NLesKSC+PSejMcwly /C3sHB2M47sHMM7r6cnUyaNkAuvNNgZOpKT/5TB8gStvPpCFDnsDS3O2CVLig2vU 7B2n705w2mR/Fmxdn5RghWpsgCsx7JwRRTEDP+4Fwlt6DPqxskFzxx0zbUTfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFbwguoVOOpTY5Yg7iU5tsYIP4eIwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSXBnQl9GE8n JhuKH2bTnCq7J7v49jw8zP5vLFrNdz/X3tAPDet+5rfjLAZICgVQpFDi8duusK1c Fy7fXvQxPb/ivsEk6XxvxHTMM+HQcKgKD9ZNSZDcboLDSfB8wjAebmn45HhF6fK9 K0zDH6n6L/xD9+U9MDLXZNO+pI3Gax2Ehv7Gd0BvCNTAheHR/qFHuvcYq6kjH71T DtIZxethiCwyH0iSfR4RoEQc85TF9sSl92qB0FC+gjVMjtpPaluh5n85RWZ6osLg SJBpTbw5PW9sVITQdto4Ar2CLbW9NjHcRIAKFqTT3YJeiw54T3sKHiJo6Vxd1vrw xe6o4r14MQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:13 2026 by rpki-client