This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: YBGponzQK7SZDEknhg3Lv1acPKpQN3rAb2h+MXs3bVk= Subject key identifier: E6:8A:AB:C6:95:6E:AE:97:DA:D7:89:AD:26:A9:34:59:CB:53:D1:46 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 3CF68138B5489EDFF3A9DFE2DDBE3C496B3E23B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 20:40:57 +0000 Manifest this update: Sat 24 Jan 2026 20:35:57 +0000 Manifest next update: Sun 25 Jan 2026 23:47:57 +0000 Files and hashes: 1: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 2: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 3: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: nmK6quP3neUaQdI2Xnx4706X9h0ZQTTGc7ucgW6vHx8=) 4: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:81:38:b5:48:9e:df:f3:a9:df:e2:dd:be:3c:49:6b:3e:23:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Jan 24 20:35:57 2026 GMT Not After : Jan 25 23:47:57 2026 GMT Subject: CN=E68AABC6956EAE97DAD789AD26A93459CB53D146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:16:d2:2f:bd:60:10:71:b9:24:76:52:67:ea: 75:a5:7a:51:32:d9:ec:a7:82:d7:2a:64:36:5b:a5: 98:94:4d:1e:ea:5d:c3:17:10:0f:70:77:c5:c0:57: 1f:bf:3b:ff:6e:fd:fd:97:bc:5a:c8:d3:0a:44:6c: e5:67:ec:14:83:b7:36:d8:8a:e3:c2:cc:43:b0:e3: 8c:c3:a5:d8:13:69:99:60:04:5d:19:45:ab:48:81: 6b:3f:c7:20:20:dc:1c:76:c9:6b:0b:82:57:9a:03: 94:de:dc:b0:56:a5:21:f4:b9:16:d8:03:1d:29:d1: 4d:1a:e8:eb:68:5d:00:b1:8e:eb:1c:03:9f:8d:17: 27:99:e5:42:df:e0:7b:01:68:fa:12:68:87:1e:c8: 06:8a:05:87:8b:3f:cb:12:31:87:d5:b9:b7:af:ab: 1b:a9:4f:eb:c4:95:43:96:ca:bb:64:50:18:9c:16: ce:0c:65:16:3d:35:25:bd:42:e3:17:48:05:92:c3: f2:ae:32:ca:27:cf:a0:bf:e7:1a:c5:df:8d:1f:04: f0:0b:db:0a:3f:a4:9a:a0:88:eb:2d:eb:94:6d:89: 05:7b:6c:f0:e6:83:ba:c2:f6:c8:f9:98:ec:b4:09: af:8f:26:49:14:09:76:49:bf:40:3a:0e:93:52:4b: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8A:AB:C6:95:6E:AE:97:DA:D7:89:AD:26:A9:34:59:CB:53:D1:46 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a2:13:cd:72:df:f8:29:42:57:7b:44:a2:69:3d:de:83:f2: c5:35:aa:56:2d:0d:74:3f:be:19:b7:6a:d5:f1:89:2d:f7:f4: 71:fb:31:28:d2:21:3a:73:4b:a3:07:27:08:d5:de:23:16:f7: 94:ee:8f:47:72:a6:ae:ac:6e:f6:cc:44:30:ab:b1:fa:46:e4: b8:59:d7:05:54:21:33:51:b6:82:a8:ed:38:34:47:d0:f2:be: 85:c3:35:b8:fe:9e:17:02:06:51:c4:0d:44:d5:86:0c:3a:1b: b7:d7:b1:a9:c7:b6:d0:f4:09:3c:83:b7:87:b6:90:55:19:76: 88:82:69:d0:b9:e0:b6:6d:dc:b9:54:88:e3:42:8d:b5:51:51: 85:d3:3e:8e:92:13:04:5a:5f:14:8e:a4:41:c6:b8:5f:01:ca: be:fd:fc:30:f0:76:f2:a6:61:71:2e:9a:ca:9e:ea:1e:19:06: 93:fe:61:e1:b7:21:b3:35:72:73:e5:58:62:2e:60:ae:39:f5: db:58:24:54:a7:f4:bf:79:20:c4:e9:5c:41:6c:45:a5:04:2b: ae:9f:87:4e:2f:5d:a5:3f:bb:ea:bd:ba:00:97:29:09:cd:89: cd:c1:12:0b:df:8f:bf:1d:85:29:9e:bd:fe:ef:3f:9d:70:8f: d0:cb:f6:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPPaBOLVInt/zqd/i3b48SWs+I7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAxMjQyMDM1NTdaFw0yNjAxMjUyMzQ3NTdaMDMxMTAvBgNV BAMTKEU2OEFBQkM2OTU2RUFFOTdEQUQ3ODlBRDI2QTkzNDU5Q0I1M0QxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FtIvvWAQcbkkdlJn6nWlelEy 2eyngtcqZDZbpZiUTR7qXcMXEA9wd8XAVx+/O/9u/f2XvFrI0wpEbOVn7BSDtzbY iuPCzEOw44zDpdgTaZlgBF0ZRatIgWs/xyAg3Bx2yWsLgleaA5Te3LBWpSH0uRbY Ax0p0U0a6OtoXQCxjuscA5+NFyeZ5ULf4HsBaPoSaIceyAaKBYeLP8sSMYfVubev qxupT+vElUOWyrtkUBicFs4MZRY9NSW9QuMXSAWSw/KuMsonz6C/5xrF340fBPAL 2wo/pJqgiOst65RtiQV7bPDmg7rC9sj5mOy0Ca+PJkkUCXZJv0A6DpNSSxC/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5oqrxpVurpfa14mtJqk0WctT0UYwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaITzXLf+ClC V3tEomk93oPyxTWqVi0NdD++Gbdq1fGJLff0cfsxKNIhOnNLowcnCNXeIxb3lO6P R3Kmrqxu9sxEMKux+kbkuFnXBVQhM1G2gqjtODRH0PK+hcM1uP6eFwIGUcQNRNWG DDobt9exqce20PQJPIO3h7aQVRl2iIJp0Lngtm3cuVSI40KNtVFRhdM+jpITBFpf FI6kQca4XwHKvv38MPB28qZhcS6ayp7qHhkGk/5h4bchszVyc+VYYi5grjn121gk VKf0v3kgxOlcQWxFpQQrrp+HTi9dpT+76r26AJcpCc2JzcESC9+Pvx2FKZ69/u8/ nXCP0Mv2sA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:49 2026 by rpki-client