This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: SB/YnpksgxaqTMhaSaG4DOpgshx1HArwLB8jH7138ZQ= Subject key identifier: 89:EE:76:15:2B:64:63:69:14:2F:A0:3B:55:90:5E:2D:E4:79:BB:5D Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 60A724ADBEC34EF03FE6055232445347DD1C0EB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 0A Signing time: Sat 24 Jan 2026 13:40:57 +0000 Manifest this update: Sat 24 Jan 2026 13:35:57 +0000 Manifest next update: Sun 25 Jan 2026 17:34:57 +0000 Files and hashes: 1: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 2: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) 3: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) 4: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: dJe8CfBCKxG7dTRiDcdNTAWDgm2fgVvNSXz8k786KnI=) 5: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a7:24:ad:be:c3:4e:f0:3f:e6:05:52:32:44:53:47:dd:1c:0e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jan 24 13:35:57 2026 GMT Not After : Jan 25 17:34:57 2026 GMT Subject: CN=89EE76152B646369142FA03B55905E2DE479BB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:8d:7c:a6:c1:8b:2e:a3:55:b5:aa:0b:54: 62:4c:83:e3:ef:8c:c2:73:3f:de:bc:7c:6a:1b:a7: 7b:8e:d9:69:ff:97:8b:7a:df:32:6e:72:a8:3d:42: d8:85:f4:1c:ca:f4:db:f2:06:5c:7c:80:70:c1:46: 89:fb:f5:a9:8a:9e:07:c0:c5:f0:f3:83:ae:d2:a3: af:83:92:21:a2:6d:f6:65:91:e9:28:22:53:6c:19: 70:ce:0c:0f:67:01:af:87:63:04:85:3b:72:7f:84: eb:eb:77:87:b9:40:4f:96:d8:e6:df:e5:eb:9e:0a: 26:01:b8:5f:26:b1:a6:36:fc:35:09:17:f0:d5:a2: f7:f9:ff:77:56:32:12:93:fc:e3:0a:ba:18:f8:c2: 78:b3:fb:ce:8b:52:62:b3:61:75:aa:5a:58:20:5b: 72:7a:51:a7:25:0a:83:38:c3:6b:05:bf:00:2c:69: c9:12:97:58:2c:b6:04:08:e8:67:a4:e0:c5:a0:72: fc:fd:41:75:b8:41:03:7f:57:09:5a:0a:ef:bd:9b: d0:7f:e6:9a:4d:f4:5c:14:c9:e7:b7:f3:23:96:cd: 8c:ba:63:43:11:c9:31:2d:65:e3:ec:db:2c:bc:3f: fb:a2:eb:5b:e9:f4:e1:fa:4d:28:12:44:d4:7d:d9: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EE:76:15:2B:64:63:69:14:2F:A0:3B:55:90:5E:2D:E4:79:BB:5D X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8f:35:57:0d:64:2c:28:cb:fb:f3:03:e2:aa:39:d8:df:28: ac:89:54:2c:a0:81:31:45:a6:3e:2a:b8:da:7b:7d:ea:b8:53: f1:b9:64:1f:da:1e:3f:cf:17:79:aa:88:9d:c1:e9:84:1a:5e: 4d:67:9c:50:ac:86:ca:37:88:ec:67:c3:11:5e:cd:45:5a:3e: a6:fb:36:a9:91:98:d6:f2:d7:ae:b3:37:fc:e2:00:58:17:ff: 0f:12:e1:2b:c3:a3:2f:e7:85:51:f5:3a:30:14:06:f5:b1:b7: ac:e5:1b:0b:79:16:57:15:4f:46:dd:6c:37:50:21:c2:71:35: d5:d0:29:a8:83:3c:ae:41:64:cc:6d:5a:1d:42:12:bc:93:42: 57:f0:19:e8:02:19:59:87:31:30:7e:cd:6c:74:2b:ad:45:84: 0f:e0:b2:0b:dd:e3:e0:e6:38:52:ac:d1:b6:14:e1:3a:7a:f1: 3f:e7:5b:b2:c5:c6:69:51:d3:81:b5:a1:44:26:2c:d8:b6:a6: 5d:2e:1e:a5:24:5d:e1:e3:36:ba:22:2c:6d:d1:d8:bc:e4:2a: 04:6e:37:91:66:01:bf:cc:52:ff:1f:7d:6a:e5:3f:a8:7f:0c: 87:4e:26:c8:b6:07:c8:0e:16:ac:0e:8a:77:39:4d:d8:bd:f0: 20:5f:44:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYKckrb7DTvA/5gVSMkRTR90cDrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjAxMjQxMzM1NTdaFw0yNjAxMjUxNzM0NTdaMDMxMTAvBgNV BAMTKDg5RUU3NjE1MkI2NDYzNjkxNDJGQTAzQjU1OTA1RTJERTQ3OUJCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFI18psGLLqNVtaoLVGJMg+Pv jMJzP968fGobp3uO2Wn/l4t63zJucqg9QtiF9BzK9NvyBlx8gHDBRon79amKngfA xfDzg67So6+DkiGibfZlkekoIlNsGXDODA9nAa+HYwSFO3J/hOvrd4e5QE+W2Obf 5eueCiYBuF8msaY2/DUJF/DVovf5/3dWMhKT/OMKuhj4wniz+86LUmKzYXWqWlgg W3J6UaclCoM4w2sFvwAsackSl1gstgQI6Gek4MWgcvz9QXW4QQN/VwlaCu+9m9B/ 5ppN9FwUyee38yOWzYy6Y0MRyTEtZePs2yy8P/ui61vp9OH6TSgSRNR92Yd1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUie52FStkY2kUL6A7VZBeLeR5u10wHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArY81Vw1kLCjL +/MD4qo52N8orIlULKCBMUWmPiq42nt96rhT8blkH9oeP88XeaqIncHphBpeTWec UKyGyjeI7GfDEV7NRVo+pvs2qZGY1vLXrrM3/OIAWBf/DxLhK8OjL+eFUfU6MBQG 9bG3rOUbC3kWVxVPRt1sN1AhwnE11dApqIM8rkFkzG1aHUISvJNCV/AZ6AIZWYcx MH7NbHQrrUWED+CyC93j4OY4UqzRthThOnrxP+dbssXGaVHTgbWhRCYs2LamXS4e pSRd4eM2uiIsbdHYvOQqBG43kWYBv8xS/x99auU/qH8Mh04myLYHyA4WrA6KdzlN 2L3wIF9EXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:55 2026 by rpki-client