This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: fg6HVouUb55anX/L33/sUtNQ16NQaf2sh974VAS0oJA= Subject key identifier: B3:EC:27:20:F7:B5:50:AC:68:7C:63:45:CE:AB:F1:0A:19:E4:E8:D7 Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 7AED26C1A8EBED7445433586C07EA1BC3BC4606F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 14:35:57 +0000 Manifest this update: Sat 24 Jan 2026 14:30:57 +0000 Manifest next update: Sun 25 Jan 2026 17:41:57 +0000 Files and hashes: 1: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) 2: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: PApMNS8Slm3KNcogPeAykQwWlaCmjG5eAcOGQ0HNuUA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ed:26:c1:a8:eb:ed:74:45:43:35:86:c0:7e:a1:bc:3b:c4:60:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: Jan 24 14:30:57 2026 GMT Not After : Jan 25 17:41:57 2026 GMT Subject: CN=B3EC2720F7B550AC687C6345CEABF10A19E4E8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:04:70:39:0b:82:d1:9c:39:61:f0:c5:c7: 35:33:af:2a:56:44:2c:8e:38:50:8e:47:1f:03:c2: 9a:7a:bd:6c:b3:cf:40:13:24:e8:10:e7:6c:42:1f: f2:72:2f:39:12:bd:8c:4e:60:de:e4:aa:6a:6c:ee: 03:44:aa:a6:71:13:cf:8a:ea:9f:fd:35:4f:5f:b7: 24:c1:dc:40:0d:a7:77:55:aa:34:0b:ee:de:3f:e3: c0:9f:6c:72:08:cd:a5:33:88:a5:e8:0d:c7:a8:86: 96:64:83:d0:cc:cc:f9:c7:98:59:08:46:4e:49:d6: f0:9c:1d:72:85:6c:b5:5f:e8:83:b6:09:eb:f3:3b: 32:80:b4:03:90:7e:ad:fe:5e:96:ff:bc:96:f9:34: d6:83:55:d3:64:c2:50:69:36:74:34:0d:3e:2d:b9: ac:3a:74:6f:71:80:d9:57:e8:2b:52:16:08:71:aa: 1c:ce:5c:47:36:ff:b9:9d:a3:cf:c9:ed:02:bf:b4: 9b:fc:39:b8:fb:4f:c4:1d:32:a1:d3:0a:01:61:09: a2:13:5d:53:16:4c:18:eb:9b:54:91:6d:12:09:da: 0a:17:33:0a:17:fe:ad:e1:97:99:a1:d7:54:01:89: 08:dc:9e:49:e2:dc:6f:56:4b:0f:31:58:11:ea:91: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EC:27:20:F7:B5:50:AC:68:7C:63:45:CE:AB:F1:0A:19:E4:E8:D7 X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4d:b1:7a:94:0d:e9:33:5d:25:25:29:4a:f3:34:23:5b:5b: 6e:a0:45:01:50:12:4b:d3:90:9b:76:33:2a:22:75:3b:be:ae: 15:4a:83:d9:df:d1:b8:eb:e2:2e:ad:3c:da:de:ad:0e:5d:fa: 11:55:e1:7a:de:35:c8:f3:e8:5f:92:53:93:4a:39:97:87:b9: a1:1f:bb:b4:c0:d9:ed:95:e9:16:11:d5:55:45:3c:d2:c6:cb: a2:1d:09:b5:40:76:f1:4b:b7:a1:75:74:4e:96:89:d9:8a:f8: 1e:58:5e:32:ab:69:00:59:26:ad:5e:e2:5f:46:d1:e0:f1:a0: 60:6d:3d:bc:de:3c:18:36:01:de:b4:07:f8:d6:20:20:32:0a: 47:c3:9c:42:dc:76:7e:21:46:a7:20:52:f1:6b:7c:e5:c0:07: ff:c1:6c:73:f3:24:0b:11:af:99:05:ff:2c:9f:f0:25:b9:72: f1:f2:2e:21:d1:e2:16:74:42:a3:86:b4:28:d1:d1:65:82:06: ac:3d:87:d5:7f:8c:bd:2d:05:50:49:cc:15:4f:a2:4e:c5:19: 17:c1:b8:e1:b5:23:f2:c4:58:f0:1c:2a:8f:e9:72:8a:63:26: 6a:23:54:54:6c:32:c6:10:b4:a2:04:da:03:9b:dc:a1:1a:8a: 8c:d0:08:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeu0mwajr7XRFQzWGwH6hvDvEYG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjAxMjQxNDMwNTdaFw0yNjAxMjUxNzQxNTdaMDMxMTAvBgNV BAMTKEIzRUMyNzIwRjdCNTUwQUM2ODdDNjM0NUNFQUJGMTBBMTlFNEU4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1QRwOQuC0Zw5YfDFxzUzrypW RCyOOFCORx8Dwpp6vWyzz0ATJOgQ52xCH/JyLzkSvYxOYN7kqmps7gNEqqZxE8+K 6p/9NU9ftyTB3EANp3dVqjQL7t4/48CfbHIIzaUziKXoDceohpZkg9DMzPnHmFkI Rk5J1vCcHXKFbLVf6IO2CevzOzKAtAOQfq3+Xpb/vJb5NNaDVdNkwlBpNnQ0DT4t uaw6dG9xgNlX6CtSFghxqhzOXEc2/7mdo8/J7QK/tJv8Obj7T8QdMqHTCgFhCaIT XVMWTBjrm1SRbRIJ2goXMwoX/q3hl5mh11QBiQjcnkni3G9WSw8xWBHqkUfVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs+wnIPe1UKxofGNFzqvxChnk6NcwHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE2xepQN6TNd JSUpSvM0I1tbbqBFAVASS9OQm3YzKiJ1O76uFUqD2d/RuOviLq082t6tDl36EVXh et41yPPoX5JTk0o5l4e5oR+7tMDZ7ZXpFhHVVUU80sbLoh0JtUB28Uu3oXV0TpaJ 2Yr4HlheMqtpAFkmrV7iX0bR4PGgYG09vN48GDYB3rQH+NYgIDIKR8OcQtx2fiFG pyBS8Wt85cAH/8Fsc/MkCxGvmQX/LJ/wJbly8fIuIdHiFnRCo4a0KNHRZYIGrD2H 1X+MvS0FUEnMFU+iTsUZF8G44bUj8sRY8Bwqj+lyimMmaiNUVGwyxhC0ogTaA5vc oRqKjNAISQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:16:05 2026 by rpki-client