This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json) Hash identifier: DMyYQwckLB8OJo28a1rHY8MNDCStEzIwLxxrENEVkgY= Subject key identifier: A0:ED:57:0B:B7:E0:BB:F6:18:BE:19:03:79:28:87:06:04:BE:CF:92 Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Certificate serial: 23A621A49767863E6E9F5B58EA3E5D01226B52AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 13:30:57 +0000 Manifest this update: Sat 24 Jan 2026 13:25:57 +0000 Manifest next update: Sun 25 Jan 2026 15:43:57 +0000 Files and hashes: 1: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: rDWhwll3SSAxDo0bUjdqtM8VFATRdQypq1HnFjbUg3A=) 2: 3130332e3130342e3135322e302f32322d3234203d3e203234343234.roa (hash: Dli5jEBU9Q5KjJmGy5qDqlEwCF16qg7imjDMUPHy1Ec=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a6:21:a4:97:67:86:3e:6e:9f:5b:58:ea:3e:5d:01:22:6b:52:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Validity Not Before: Jan 24 13:25:57 2026 GMT Not After : Jan 25 15:43:57 2026 GMT Subject: CN=A0ED570BB7E0BBF618BE19037928870604BECF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:32:5f:ef:cb:fe:55:cc:50:9d:e4:25:04: 01:05:f8:3f:50:76:2e:91:1c:aa:a8:59:b1:48:f5: 08:37:e8:03:83:e6:7b:01:fe:fd:6f:90:5c:bc:85: bc:1a:ac:7e:e7:05:0d:81:aa:b4:9f:75:d8:05:db: 4a:68:34:a0:0e:09:c5:9a:a9:d2:14:c0:ab:b1:a0: c8:d2:3a:2f:86:3e:1b:4a:70:95:b4:da:c2:c5:fd: 99:3c:d9:29:f8:4b:86:7c:d1:a7:f6:94:3e:21:25: be:bf:ac:be:77:1d:8c:e2:10:50:65:9c:34:ab:8f: 0c:07:bd:0b:ee:1d:bd:7f:13:3a:6f:04:f2:2a:e8: fc:25:cc:ca:f6:78:20:4f:79:9a:3e:b3:92:17:76: 78:c4:86:45:61:bd:45:70:31:f4:23:3f:90:dc:78: 6b:56:22:1a:17:8c:9a:c3:6e:a3:ec:9d:ec:78:87: 21:f2:69:48:da:2c:83:05:f2:75:ea:06:7a:4e:71: bb:df:bf:aa:71:83:9e:4a:1c:37:22:53:67:51:2f: a0:29:c7:6e:5d:78:19:d0:bf:2a:94:3e:5a:1f:52: ad:1b:b9:27:cd:ee:2a:87:fe:aa:85:9a:a5:53:64: d6:64:9a:d8:6f:0d:f2:21:f3:d3:f3:b1:8d:e4:a6: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:57:0B:B7:E0:BB:F6:18:BE:19:03:79:28:87:06:04:BE:CF:92 X509v3 Authority Key Identifier: keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3b:cc:0f:d5:02:3a:44:81:9d:80:f5:0e:ab:56:2b:89:38: 1b:7a:e9:7b:81:14:63:a8:a9:28:56:73:ce:0e:86:71:27:c0: 8c:ff:2a:78:21:fd:88:3a:d8:05:e8:bf:a0:5b:8d:40:46:d7: 6c:c7:76:52:77:a5:06:d7:e2:22:30:4a:d3:47:10:e8:d6:60: f6:46:14:01:e5:6d:c3:9c:e6:ab:89:2e:8e:23:80:9b:4c:4b: 6d:77:ae:c8:e8:a7:95:28:6c:86:8b:e6:08:44:fa:20:09:aa: 21:56:9e:6f:73:46:5a:da:50:95:a1:42:53:5a:95:4b:3b:4e: ee:4b:8c:bd:c6:4b:dc:cd:d6:7d:b9:9a:12:ed:f8:6c:9a:de: 82:6d:cd:fa:d8:23:30:3f:b4:80:f8:48:a5:24:de:65:1a:db: fe:66:6e:a7:c2:24:8c:7f:7d:90:5e:60:a7:bf:e0:c0:96:86: b2:a9:43:fc:e8:e5:5a:24:05:9d:32:22:37:13:25:7f:9a:17: 1c:fe:35:5d:b8:3f:b4:78:8e:a9:54:86:48:37:24:1e:dd:98: 4c:88:52:0c:ab:a3:91:a0:d2:4f:6b:60:05:04:91:74:73:c1: 53:4b:da:7f:1f:06:24:0a:f1:52:67:91:5a:3c:5a:bf:9f:e1: 28:b3:78:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI6YhpJdnhj5un1tY6j5dASJrUqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1 NjhCMDBEODAeFw0yNjAxMjQxMzI1NTdaFw0yNjAxMjUxNTQzNTdaMDMxMTAvBgNV BAMTKEEwRUQ1NzBCQjdFMEJCRjYxOEJFMTkwMzc5Mjg4NzA2MDRCRUNGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRjJf78v+VcxQneQlBAEF+D9Q di6RHKqoWbFI9Qg36AOD5nsB/v1vkFy8hbwarH7nBQ2BqrSfddgF20poNKAOCcWa qdIUwKuxoMjSOi+GPhtKcJW02sLF/Zk82Sn4S4Z80af2lD4hJb6/rL53HYziEFBl nDSrjwwHvQvuHb1/EzpvBPIq6PwlzMr2eCBPeZo+s5IXdnjEhkVhvUVwMfQjP5Dc eGtWIhoXjJrDbqPsnex4hyHyaUjaLIMF8nXqBnpOcbvfv6pxg55KHDciU2dRL6Ap x25deBnQvyqUPlofUq0buSfN7iqH/qqFmqVTZNZkmthvDfIh89PzsY3kps3nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoO1XC7fgu/YYvhkDeSiHBgS+z5IwHwYDVR0j BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDvMD9UCOkSB nYD1DqtWK4k4G3rpe4EUY6ipKFZzzg6GcSfAjP8qeCH9iDrYBei/oFuNQEbXbMd2 UnelBtfiIjBK00cQ6NZg9kYUAeVtw5zmq4kujiOAm0xLbXeuyOinlShshovmCET6 IAmqIVaeb3NGWtpQlaFCU1qVSztO7kuMvcZL3M3WfbmaEu34bJregm3N+tgjMD+0 gPhIpSTeZRrb/mZup8IkjH99kF5gp7/gwJaGsqlD/OjlWiQFnTIiNxMlf5oXHP41 Xbg/tHiOqVSGSDckHt2YTIhSDKujkaDST2tgBQSRdHPBU0vafx8GJArxUmeRWjxa v5/hKLN4+g== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:22 2026 by rpki-client