This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json) Hash identifier: ePTbvrbQBO0gdihcSTqfdkm583RwiRdjkB4vi3uIWOU= Subject key identifier: 8B:27:A5:ED:26:D3:B6:20:76:61:01:D6:A8:14:7D:85:A6:6B:B9:48 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 0464984656D01B7BC4ACA2750652514958192FDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft Manifest number: 0A Signing time: Sat 24 Jan 2026 15:20:57 +0000 Manifest this update: Sat 24 Jan 2026 15:15:57 +0000 Manifest next update: Sun 25 Jan 2026 19:02:57 +0000 Files and hashes: 1: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: 07XFk8emtrEu0Y3ytNbAcmmUXjEuP2K4GbU/OCuKfp4=) 2: AS55990.roa (hash: a5TP6E8m+f/gSk2+LLNMHOIimgijDnDREwD1Q5AEFVc=) 3: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:64:98:46:56:d0:1b:7b:c4:ac:a2:75:06:52:51:49:58:19:2f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jan 24 15:15:57 2026 GMT Not After : Jan 25 19:02:57 2026 GMT Subject: CN=8B27A5ED26D3B620766101D6A8147D85A66BB948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:a0:0a:86:e8:06:4b:ff:29:6b:e4:40:72: b8:bf:12:1c:b3:12:03:fd:f0:cb:44:78:62:b9:bb: 31:fb:96:21:bd:78:35:74:42:4f:87:a2:32:e3:25: e1:88:82:46:ad:cd:24:43:fa:6d:13:a9:c2:52:d6: 9f:24:dc:0b:b1:f4:77:d2:6f:d5:ce:be:1f:45:fc: 70:dc:4e:22:f0:a0:8b:f9:55:d5:e0:b1:e5:fa:f7: d8:f4:6a:12:80:a3:27:cc:82:5b:fe:ae:d5:5f:89: 3c:68:f5:42:ad:30:ad:30:83:43:64:3c:d5:1e:c1: 61:ca:c2:d4:c0:7a:b9:54:6d:7e:73:0d:32:24:8f: f0:85:c2:64:72:f7:c3:81:ba:f9:d6:53:49:9a:e4: e6:b4:1b:5f:bb:e3:ee:dd:d1:b1:68:bc:07:c1:67: ce:d5:ae:b2:d0:27:76:05:86:68:5a:e8:04:ca:fa: 33:35:99:84:74:b4:78:63:46:a7:53:5b:2b:83:00: d6:60:38:2b:0c:c0:8e:34:32:21:f0:e2:5a:e8:42: df:98:d8:10:71:81:a2:12:b2:cf:5f:62:63:e1:24: af:8a:7c:be:3f:5e:f4:d1:1d:09:f9:f9:b2:83:77: f7:a7:7f:27:0c:62:75:d2:a6:77:33:c6:90:c0:d2: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:A5:ED:26:D3:B6:20:76:61:01:D6:A8:14:7D:85:A6:6B:B9:48 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ac:09:a5:cf:75:a6:e1:cf:c7:50:87:55:57:79:0a:56:6a: 71:64:f3:55:fe:16:e2:79:81:12:07:2f:11:0d:7a:86:df:83: ea:08:17:d2:14:f0:1c:91:49:4d:f7:50:83:e2:41:02:7a:c2: 3a:7b:a4:f6:95:54:65:25:1b:35:5b:cd:40:01:7c:6c:b8:dc: 14:99:89:c4:d0:b9:ad:fc:db:3d:ad:1e:bf:b1:a1:b1:f9:de: 52:a5:f6:5d:82:94:ae:a8:cf:4e:4a:1f:61:84:60:f3:ee:d6: 57:31:db:37:f1:eb:a8:4c:26:da:50:a4:52:6b:76:43:ca:a9: ce:b7:0d:25:13:bc:c3:0f:6a:64:61:83:e4:5e:9f:cd:b8:9f: ca:08:5e:d8:ed:44:62:5e:61:ef:89:29:94:eb:c6:8c:57:c1: ef:23:8c:89:8c:a8:4c:da:f5:72:48:20:d7:73:98:d1:f7:a1: 22:d2:00:c6:74:7c:e1:e6:bc:19:ec:c0:7f:aa:c0:af:77:4a: d4:57:07:32:c8:82:82:0f:a0:21:e3:b3:ce:36:da:8d:79:60: f6:71:8f:ba:37:bc:b6:78:6d:47:6f:65:37:af:2f:b4:57:bb: e5:b9:7c:f0:0a:80:f0:c8:be:3d:34:6a:3f:8e:bc:c5:24:3d: 72:c3:c5:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBGSYRlbQG3vErKJ1BlJRSVgZL9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjAxMjQxNTE1NTdaFw0yNjAxMjUxOTAyNTdaMDMxMTAvBgNV BAMTKDhCMjdBNUVEMjZEM0I2MjA3NjYxMDFENkE4MTQ3RDg1QTY2QkI5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzw6AKhugGS/8pa+RAcri/Ehyz EgP98MtEeGK5uzH7liG9eDV0Qk+HojLjJeGIgkatzSRD+m0TqcJS1p8k3Aux9HfS b9XOvh9F/HDcTiLwoIv5VdXgseX699j0ahKAoyfMglv+rtVfiTxo9UKtMK0wg0Nk PNUewWHKwtTAerlUbX5zDTIkj/CFwmRy98OBuvnWU0ma5Oa0G1+74+7d0bFovAfB Z87VrrLQJ3YFhmha6ATK+jM1mYR0tHhjRqdTWyuDANZgOCsMwI40MiHw4lroQt+Y 2BBxgaISss9fYmPhJK+KfL4/XvTRHQn5+bKDd/enfycMYnXSpnczxpDA0uYTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiyel7SbTtiB2YQHWqBR9haZruUgwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC85RTA5MjY5RjA0MzM1 Qzk5MjY4NUIxMEU4NzA5RjJDOTVEQzVFOERFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKwJpc91puHP x1CHVVd5ClZqcWTzVf4W4nmBEgcvEQ16ht+D6ggX0hTwHJFJTfdQg+JBAnrCOnuk 9pVUZSUbNVvNQAF8bLjcFJmJxNC5rfzbPa0ev7GhsfneUqX2XYKUrqjPTkofYYRg 8+7WVzHbN/HrqEwm2lCkUmt2Q8qpzrcNJRO8ww9qZGGD5F6fzbifyghe2O1EYl5h 74kplOvGjFfB7yOMiYyoTNr1ckgg13OY0fehItIAxnR84ea8GezAf6rAr3dK1FcH MsiCgg+gIeOzzjbajXlg9nGPuje8tnhtR29lN68vtFe75bl88AqA8Mi+PTRqP468 xSQ9csPFEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:32 2026 by rpki-client