This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: r9Z5wMEi1aRSet8pGmgk75iZosYXfrxkwnnOs0pbI6Y= Subject key identifier: FA:BB:A9:A7:4D:CA:D1:A7:55:35:38:39:85:23:FC:AF:E6:1C:6A:BA Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 550B4E7458C7D5280DC672511DFA3F3884026E5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 04:45:57 +0000 Manifest this update: Sun 25 Jan 2026 04:40:57 +0000 Manifest next update: Mon 26 Jan 2026 06:54:57 +0000 Files and hashes: 1: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: gD5gsCLDt7AlO4tpbV9sD5h2WZ4eEKJ9Kw8LjTBS1lw=) 2: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 3: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 4: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0b:4e:74:58:c7:d5:28:0d:c6:72:51:1d:fa:3f:38:84:02:6e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Jan 25 04:40:57 2026 GMT Not After : Jan 26 06:54:57 2026 GMT Subject: CN=FABBA9A74DCAD1A7553538398523FCAFE61C6ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:56:d0:96:50:e4:80:a4:2f:70:38:74:fa: 60:25:83:2e:94:24:a4:18:5d:61:7c:6a:e3:f6:39: dd:7a:34:fc:e2:1a:0c:c2:47:db:15:6d:63:c5:d6: e1:ff:b8:7b:0a:f5:05:39:af:c7:9a:d8:3f:20:21: df:36:47:1c:11:87:23:26:f6:c6:01:2a:7c:39:6a: d5:d0:7c:07:de:de:55:1c:a0:76:31:be:06:35:e9: d8:5d:43:fa:72:af:43:83:34:75:ab:80:f8:3d:d9: 3d:7f:9c:e0:f8:f3:39:d6:fe:10:cd:16:3c:95:6e: 39:44:dc:9d:62:8e:eb:e1:66:23:c5:cd:d1:47:15: 43:40:65:c8:dd:1d:f1:c5:d4:d9:30:87:92:a7:a6: d3:91:d0:31:a9:76:e7:29:ed:30:84:8a:0d:58:3a: 12:56:b5:24:90:0b:21:fa:37:3c:7f:a5:7c:cb:a2: cb:eb:24:2e:a4:44:92:24:a4:90:6d:ce:f0:8a:82: fa:37:4e:f6:97:7f:d2:26:35:ce:37:c1:5f:0d:c1: 53:01:70:8c:1f:39:5f:e7:a9:3a:a0:dc:3d:5b:b8: 8c:aa:1d:e7:17:5e:70:8a:5b:62:af:05:92:f1:8e: 28:fc:7b:17:0e:3f:fe:1a:04:26:09:58:cf:9f:70: 29:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:A9:A7:4D:CA:D1:A7:55:35:38:39:85:23:FC:AF:E6:1C:6A:BA X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:53:38:d3:d9:c1:b6:4c:7b:03:51:fd:a5:93:92:34:09:a2: 05:6e:db:1a:4a:6d:e1:c4:5a:23:76:e0:48:57:02:20:2c:3e: b9:bb:be:b0:2f:17:bd:1b:e7:3e:98:a2:2d:4f:de:9f:69:e6: bf:68:b2:2b:8f:2f:6a:a2:37:15:6c:14:5d:7d:ff:c1:f3:a4: e7:8b:de:d4:e3:04:dc:2c:c2:5b:a6:c5:86:c0:5e:49:3e:e2: 85:3c:1c:79:83:d3:91:fa:61:70:c9:ca:db:ad:5a:1d:33:b5: df:d5:4f:f4:c7:53:fb:8e:93:56:66:2e:34:82:0f:e2:3d:bb: 0d:a2:8d:32:1d:08:78:91:23:8a:6b:92:0a:e8:d1:55:14:a5: 6f:f7:d6:3a:4d:f0:ee:9d:61:1d:1e:51:a7:3f:f2:0c:28:4b: 2e:2d:0e:22:fd:da:62:1b:90:c0:f3:6a:f0:63:d3:9e:f9:ae: 26:bc:f7:c7:e6:51:57:5a:cb:8e:f5:26:57:c5:41:cf:2c:ff: 8a:3e:6a:75:7c:8c:de:43:6a:89:18:24:0d:23:bb:5d:77:85: 41:fb:66:c4:93:db:65:95:7f:8b:92:04:3e:59:26:dc:28:dd: 88:55:89:54:15:bc:5d:75:39:fc:63:c1:3f:e8:22:d0:09:3e: 60:80:a3:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVQtOdFjH1SgNxnJRHfo/OIQCbl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjAxMjUwNDQwNTdaFw0yNjAxMjYwNjU0NTdaMDMxMTAvBgNV BAMTKEZBQkJBOUE3NERDQUQxQTc1NTM1MzgzOTg1MjNGQ0FGRTYxQzZBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL1bQllDkgKQvcDh0+mAlgy6U JKQYXWF8auP2Od16NPziGgzCR9sVbWPF1uH/uHsK9QU5r8ea2D8gId82RxwRhyMm 9sYBKnw5atXQfAfe3lUcoHYxvgY16dhdQ/pyr0ODNHWrgPg92T1/nOD48znW/hDN FjyVbjlE3J1ijuvhZiPFzdFHFUNAZcjdHfHF1Nkwh5KnptOR0DGpducp7TCEig1Y OhJWtSSQCyH6Nzx/pXzLosvrJC6kRJIkpJBtzvCKgvo3TvaXf9ImNc43wV8NwVMB cIwfOV/nqTqg3D1buIyqHecXXnCKW2KvBZLxjij8excOP/4aBCYJWM+fcClFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+rupp03K0adVNTg5hSP8r+YcarowHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1M409nBtkx7 A1H9pZOSNAmiBW7bGkpt4cRaI3bgSFcCICw+ubu+sC8XvRvnPpiiLU/en2nmv2iy K48vaqI3FWwUXX3/wfOk54ve1OME3CzCW6bFhsBeST7ihTwceYPTkfphcMnK261a HTO139VP9MdT+46TVmYuNIIP4j27DaKNMh0IeJEjimuSCujRVRSlb/fWOk3w7p1h HR5Rpz/yDChLLi0OIv3aYhuQwPNq8GPTnvmuJrz3x+ZRV1rLjvUmV8VBzyz/ij5q dXyM3kNqiRgkDSO7XXeFQftmxJPbZZV/i5IEPlkm3CjdiFWJVBW8XXU5/GPBP+gi 0Ak+YICjgw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:58 2026 by rpki-client