This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json) Hash identifier: yYCGP1+sQBKZJwxz4amHJkBGb0ShZycNhszRzcQFuO0= Subject key identifier: 8A:15:4E:83:AB:DB:9F:82:B0:8B:2C:5E:A8:07:F3:8E:0A:07:3C:73 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 42C0DE737905FD99BC65F2723ED9A8C98726A6F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 09:16:02 +0000 Manifest this update: Sun 25 Jan 2026 09:11:02 +0000 Manifest next update: Mon 26 Jan 2026 11:45:02 +0000 Files and hashes: 1: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: MyGWq6cg2BQyFw4BSjy2ZTMX1bBXcILjMPGzkIYJZFA=) 2: 3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa (hash: y9Nb3BhAesAhC0Yz2nuugVvW5UakXURGQvAzLngRYos=) 3: 3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa (hash: m2V99zSF93yuAoBUSJ81tqRCkxDUa+Q9dv+b/3LsrzA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c0:de:73:79:05:fd:99:bc:65:f2:72:3e:d9:a8:c9:87:26:a6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jan 25 09:11:02 2026 GMT Not After : Jan 26 11:45:02 2026 GMT Subject: CN=8A154E83ABDB9F82B08B2C5EA807F38E0A073C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:da:b9:d4:27:44:47:49:f3:dd:cf:8c:9e: c2:93:aa:1b:f0:a9:a5:eb:12:7d:dd:5f:e0:26:51: e0:bf:8a:f4:c7:ce:ea:ae:d1:3b:cd:ec:fc:c8:d7: 6d:a4:62:b4:72:f0:08:6f:be:9d:af:5b:d7:9c:94: 28:c1:07:6a:e3:b8:02:33:73:af:2e:d0:68:21:3c: a2:bd:30:11:82:1e:0a:b9:59:fe:b4:12:30:74:4b: 4b:a5:9e:ac:09:ea:93:c3:1e:1c:d9:d5:95:ce:29: d8:9d:79:a9:a6:ac:bb:34:0e:c3:de:ea:c5:fa:71: 38:a6:df:f0:6c:da:1c:7c:bc:a2:9a:73:80:c7:74: c7:39:06:6d:69:20:9d:e8:fc:e6:5f:ab:32:fa:f3: be:56:6e:60:93:52:80:85:88:9c:6a:03:48:b2:00: 4b:ca:19:4f:58:ef:2c:a9:23:4a:df:7a:31:f2:af: ad:75:8c:15:3d:62:22:17:12:7d:01:5d:47:6a:6d: 74:6e:85:5d:f3:3c:03:39:19:ec:07:d7:2a:cd:93: ea:af:c0:0c:22:f7:4a:31:2a:59:08:07:4c:37:2d: 3c:23:78:fc:f2:3c:85:38:6e:f5:7a:f8:23:b6:ed: bc:bf:e9:0a:48:72:4a:1d:ce:bc:01:cd:6e:1d:09: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:15:4E:83:AB:DB:9F:82:B0:8B:2C:5E:A8:07:F3:8E:0A:07:3C:73 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:33:0b:fc:5c:ca:a2:51:7f:47:a5:fe:c2:71:13:e9:09:e1: ec:e7:9c:56:4f:51:af:54:1b:6a:e2:c9:8a:6d:c2:95:19:31: 4d:8d:76:37:a4:45:e2:0e:d3:5f:88:b3:8d:45:01:11:33:cb: da:c2:85:ae:46:fd:31:51:a0:6b:5d:1d:08:7a:22:73:3c:c0: 21:33:83:03:7f:ef:35:e3:aa:03:b7:13:4b:fc:c7:cd:8a:6b: 9e:70:a0:06:bb:3e:d2:fe:2c:32:74:2a:b8:68:da:39:07:72: 5e:69:5c:9d:3b:be:28:e0:ad:a3:ab:03:5f:f8:bb:d7:1f:f9: 29:81:35:52:8a:31:19:52:78:1f:32:18:a5:66:93:66:b6:1f: 60:61:0c:af:76:4b:ae:96:a5:1c:91:51:a1:52:bc:dd:76:97: 66:54:31:60:be:bb:54:27:63:dd:7b:7d:1c:51:c9:56:c4:92: 41:db:f3:61:36:bf:e5:f4:42:4a:d9:36:fe:22:f1:05:be:5f: 70:54:98:07:38:de:e0:9d:d7:fb:09:d3:be:12:3a:96:0a:90: 07:a4:58:5b:52:bf:ba:51:6d:a9:1e:4a:a0:5e:bf:da:97:91: fb:cb:aa:5f:ee:f3:52:b8:f5:35:28:20:ca:2c:2f:ee:c9:73: a8:6b:fb:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQsDec3kF/Zm8ZfJyPtmoyYcmpvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjAxMjUwOTExMDJaFw0yNjAxMjYxMTQ1MDJaMDMxMTAvBgNV BAMTKDhBMTU0RTgzQUJEQjlGODJCMDhCMkM1RUE4MDdGMzhFMEEwNzNDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3dq51CdER0nz3c+MnsKTqhvw qaXrEn3dX+AmUeC/ivTHzuqu0TvN7PzI122kYrRy8Ahvvp2vW9eclCjBB2rjuAIz c68u0GghPKK9MBGCHgq5Wf60EjB0S0ulnqwJ6pPDHhzZ1ZXOKdideammrLs0DsPe 6sX6cTim3/Bs2hx8vKKac4DHdMc5Bm1pIJ3o/OZfqzL6875WbmCTUoCFiJxqA0iy AEvKGU9Y7yypI0rfejHyr611jBU9YiIXEn0BXUdqbXRuhV3zPAM5GewH1yrNk+qv wAwi90oxKlkIB0w3LTwjePzyPIU4bvV6+CO27by/6QpIckodzrwBzW4dCbpLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUihVOg6vbn4KwiyxeqAfzjgoHPHMwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zRDAxQ0Q2OTI4RERF OEQyNkFDOTYyNjVGMUY5MDRDNzJGMUExMkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzML/FzKolF/ R6X+wnET6Qnh7OecVk9Rr1QbauLJim3ClRkxTY12N6RF4g7TX4izjUUBETPL2sKF rkb9MVGga10dCHoiczzAITODA3/vNeOqA7cTS/zHzYprnnCgBrs+0v4sMnQquGja OQdyXmlcnTu+KOCto6sDX/i71x/5KYE1UooxGVJ4HzIYpWaTZrYfYGEMr3ZLrpal HJFRoVK83XaXZlQxYL67VCdj3Xt9HFHJVsSSQdvzYTa/5fRCStk2/iLxBb5fcFSY Bzje4J3X+wnTvhI6lgqQB6RYW1K/ulFtqR5KoF6/2peR+8uqX+7zUrj1NSggyiwv 7slzqGv7rQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:53 2026 by rpki-client