This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: cMRSh55opl+vtA/0/tf1nRToozP5kNjZbiG8WOrqCyg= Subject key identifier: 77:C6:2D:CD:6E:9B:F8:59:32:8B:D8:7A:0E:00:AF:0D:50:AD:41:4D Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 42D9CDF9B610D64BD2DBDF26BA631B2A376FDA5A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 13:51:02 +0000 Manifest this update: Sun 25 Jan 2026 13:46:02 +0000 Manifest next update: Mon 26 Jan 2026 16:41:02 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: KuzIalFFUHV+Wzg7Br0YqbGWFu96sq6e2g7tmmnwslk=) 3: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d9:cd:f9:b6:10:d6:4b:d2:db:df:26:ba:63:1b:2a:37:6f:da:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Jan 25 13:46:02 2026 GMT Not After : Jan 26 16:41:02 2026 GMT Subject: CN=77C62DCD6E9BF859328BD87A0E00AF0D50AD414D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:2f:08:30:d5:67:1c:e1:aa:87:5b:95:84: b1:26:0c:fb:da:b5:2a:f8:e0:28:5d:82:57:58:7f: d0:35:64:c2:38:19:a1:de:af:fb:e9:a0:f0:e6:1c: 5d:a3:d4:cd:88:d9:97:12:b5:8b:ac:e6:e6:03:fa: 9f:d5:f4:1d:73:d6:25:fc:38:bc:10:d3:48:29:58: 39:f1:12:6d:4d:dc:b2:e3:a6:8e:be:93:92:d5:83: f9:1b:b6:d1:1e:89:ff:a7:15:fe:96:2a:1f:99:72: 81:30:7f:d3:54:00:b9:b8:42:6a:bb:d5:97:3d:ad: e3:12:05:04:76:98:33:a5:0d:1c:7b:a0:34:e5:11: 2e:d3:f7:c8:e3:2c:50:63:15:67:e3:aa:50:7b:17: 49:6b:da:4c:e4:b1:dd:3a:02:a5:ed:a1:84:1c:0a: 35:9e:ab:36:1e:48:63:7b:e7:6c:80:69:37:e3:f9: e8:98:8c:c5:37:48:bf:b9:a7:d8:51:5a:0b:f9:40: 7c:bb:38:0e:e4:0a:21:a2:7f:03:69:51:b3:2b:99: f2:a1:78:06:28:be:5f:2e:36:9a:a7:f7:36:bb:9f: 75:f8:77:ba:d3:07:3f:dd:8c:5d:cc:2e:a5:b3:02: f4:d2:38:f0:35:f0:95:be:4a:57:41:8a:9d:75:da: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C6:2D:CD:6E:9B:F8:59:32:8B:D8:7A:0E:00:AF:0D:50:AD:41:4D X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:80:a0:a6:88:e3:57:80:6e:50:07:90:44:cd:f4:46:5b:6a: c6:45:c9:d3:95:4c:f3:7b:88:70:9f:21:b2:ad:73:c0:eb:56: 8e:31:09:19:e5:79:26:ca:5e:35:80:39:d9:80:9e:b2:5e:99: 0f:d4:25:91:3c:e0:99:a2:57:47:6a:16:a9:5c:ed:a8:14:f9: 54:59:b7:44:62:ca:37:7d:3a:18:e6:94:64:96:10:b8:26:30: 5a:07:33:99:44:19:6e:45:bb:18:8a:be:6b:32:d1:35:e7:ec: eb:48:ef:cd:76:1e:e4:52:26:ff:8d:57:77:ac:b8:e6:3b:16: 7d:77:f8:c6:ad:d7:9e:fe:b6:cb:1b:9e:19:53:c4:59:21:01: 6a:91:49:f7:a8:5e:e2:c7:67:d3:22:ad:39:62:5e:21:a2:f6: 48:07:4f:53:90:13:8e:6f:5a:90:3b:23:64:47:94:02:72:44: 2a:11:f3:a8:88:4d:db:e4:48:07:09:c3:7d:98:60:ed:59:e6: 28:17:17:a1:ac:0a:3f:25:de:65:c6:17:3b:8a:b8:0f:37:3d: ce:5f:ae:49:dd:83:2c:44:32:1c:09:8a:38:ca:b8:be:b7:9d: 72:d0:c5:96:32:62:7e:12:35:0d:96:42:2e:f8:4a:6f:92:0f: 2c:82:50:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQtnN+bYQ1kvS298mumMbKjdv2lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjAxMjUxMzQ2MDJaFw0yNjAxMjYxNjQxMDJaMDMxMTAvBgNV BAMTKDc3QzYyRENENkU5QkY4NTkzMjhCRDg3QTBFMDBBRjBENTBBRDQxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDS8IMNVnHOGqh1uVhLEmDPva tSr44ChdgldYf9A1ZMI4GaHer/vpoPDmHF2j1M2I2ZcStYus5uYD+p/V9B1z1iX8 OLwQ00gpWDnxEm1N3LLjpo6+k5LVg/kbttEeif+nFf6WKh+ZcoEwf9NUALm4Qmq7 1Zc9reMSBQR2mDOlDRx7oDTlES7T98jjLFBjFWfjqlB7F0lr2kzksd06AqXtoYQc CjWeqzYeSGN752yAaTfj+eiYjMU3SL+5p9hRWgv5QHy7OA7kCiGifwNpUbMrmfKh eAYovl8uNpqn9za7n3X4d7rTBz/djF3MLqWzAvTSOPA18JW+SldBip112rDPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd8YtzW6b+Fkyi9h6DgCvDVCtQU0wHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYCgpojjV4Bu UAeQRM30RltqxkXJ05VM83uIcJ8hsq1zwOtWjjEJGeV5JspeNYA52YCesl6ZD9Ql kTzgmaJXR2oWqVztqBT5VFm3RGLKN306GOaUZJYQuCYwWgczmUQZbkW7GIq+azLR Nefs60jvzXYe5FIm/41Xd6y45jsWfXf4xq3Xnv62yxueGVPEWSEBapFJ96he4sdn 0yKtOWJeIaL2SAdPU5ATjm9akDsjZEeUAnJEKhHzqIhN2+RIBwnDfZhg7VnmKBcX oawKPyXeZcYXO4q4Dzc9zl+uSd2DLEQyHAmKOMq4vredctDFljJifhI1DZZCLvhK b5IPLIJQ0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:20 2026 by rpki-client