This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: W6Ihz3v5l0dFT+r6xkmiW9jmBIV7aVqB51yQSTLKwrI= Subject key identifier: B1:E5:66:8A:36:FF:2B:A3:6B:C1:0D:B9:1D:25:91:FC:B3:FC:14:8A Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 7FEFA421D2422383B18AE1B51E263E7304D459BE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:05:57 +0000 Manifest this update: Sun 25 Jan 2026 06:00:57 +0000 Manifest next update: Mon 26 Jan 2026 09:14:57 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: soj5MGrIRMkyEyYdhy2/AdtvdRmbiWkiPQBEm78MRtQ=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ef:a4:21:d2:42:23:83:b1:8a:e1:b5:1e:26:3e:73:04:d4:59:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Jan 25 06:00:57 2026 GMT Not After : Jan 26 09:14:57 2026 GMT Subject: CN=B1E5668A36FF2BA36BC10DB91D2591FCB3FC148A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:d2:0d:00:8a:db:48:93:15:f5:f1:1b:3d: 56:00:16:50:86:cb:d3:f8:b8:48:d8:9e:a9:c0:16: 52:4e:86:03:74:e6:3c:6a:78:fb:4f:6d:bf:f2:b7: 95:8a:7c:23:3b:4c:90:0e:ce:e1:09:c1:69:f0:1d: 35:04:f2:7a:7b:94:38:e8:13:d0:b2:78:ce:24:07: b0:1d:7b:90:b3:46:7c:68:f3:61:83:2d:ac:c6:45: d1:fe:95:a8:84:fa:62:f9:ff:7b:75:e4:34:a3:e1: e7:1f:6e:4c:3a:2b:3b:31:f9:dd:8b:49:2c:d7:6d: ee:ad:f6:85:22:07:04:79:e9:9e:cc:4e:44:05:15: d1:fc:0d:a3:9d:aa:09:35:5c:8a:3c:90:a0:c9:d5: 96:2f:66:71:1a:0c:74:79:35:56:15:75:60:15:8d: 18:0a:95:53:cc:fb:70:a8:70:07:85:6e:ca:b5:3d: 72:9c:02:f1:38:af:2c:62:80:69:48:70:78:ca:55: 4f:0d:97:dd:2f:2f:0c:7c:84:6c:3a:31:28:76:8a: a4:c2:d0:da:a3:fa:f0:2b:18:d1:71:15:57:4f:76: d0:0d:c4:24:0a:0a:c4:b7:e0:e4:f0:14:6b:a2:17: 50:7d:c0:13:15:28:6d:8f:24:7b:d3:26:f5:80:0c: d2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E5:66:8A:36:FF:2B:A3:6B:C1:0D:B9:1D:25:91:FC:B3:FC:14:8A X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0d:57:b2:99:80:35:f7:67:f4:1e:12:3c:84:33:f3:4a:3a: 48:13:78:4f:37:ff:cc:7b:03:e7:d7:52:6f:77:f1:ec:0c:9b: 7b:02:33:a8:8d:79:59:0c:a6:f8:46:db:f8:b2:a5:d6:a5:78: 8d:0e:2f:99:0c:e0:95:2b:0c:cb:9c:0a:92:75:97:06:b9:ac: ad:9d:49:30:27:98:05:db:7c:36:f4:d2:c2:90:ce:1f:12:a2: 44:69:78:00:1e:4e:27:ee:0d:ea:f4:74:df:e7:17:16:c2:f7: a1:7f:04:12:2d:34:a9:d8:0a:2d:be:88:b9:2e:bc:92:06:2c: a9:8d:34:8c:0a:b3:fa:b0:8a:f6:8f:3d:0e:d8:6d:d7:e0:c0: c9:49:23:0d:a3:3e:23:25:40:65:ae:9e:4e:a8:5d:fd:5e:f0: 74:96:55:62:42:33:62:7c:b4:34:8d:14:1b:2c:00:90:b2:cb: 44:85:6e:4f:9a:9a:25:fb:de:0e:9e:ec:ca:7d:d1:37:19:39: bf:57:a8:e7:35:c1:9a:15:37:8e:66:46:49:64:5d:86:29:aa: 42:a7:c8:de:7a:9c:1c:4f:ec:99:71:c8:70:75:c5:9c:33:03: ce:78:1e:f9:1b:e4:47:5c:af:fb:ac:21:51:c6:9c:50:c2:3d: 5f:32:32:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf++kIdJCI4OxiuG1HiY+cwTUWb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjAxMjUwNjAwNTdaFw0yNjAxMjYwOTE0NTdaMDMxMTAvBgNV BAMTKEIxRTU2NjhBMzZGRjJCQTM2QkMxMERCOTFEMjU5MUZDQjNGQzE0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhNINAIrbSJMV9fEbPVYAFlCG y9P4uEjYnqnAFlJOhgN05jxqePtPbb/yt5WKfCM7TJAOzuEJwWnwHTUE8np7lDjo E9CyeM4kB7Ade5CzRnxo82GDLazGRdH+laiE+mL5/3t15DSj4ecfbkw6Kzsx+d2L SSzXbe6t9oUiBwR56Z7MTkQFFdH8DaOdqgk1XIo8kKDJ1ZYvZnEaDHR5NVYVdWAV jRgKlVPM+3CocAeFbsq1PXKcAvE4ryxigGlIcHjKVU8Nl90vLwx8hGw6MSh2iqTC 0Nqj+vArGNFxFVdPdtANxCQKCsS34OTwFGuiF1B9wBMVKG2PJHvTJvWADNKZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUseVmijb/K6NrwQ25HSWR/LP8FIowHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKg1XspmANfdn 9B4SPIQz80o6SBN4Tzf/zHsD59dSb3fx7AybewIzqI15WQym+Ebb+LKl1qV4jQ4v mQzglSsMy5wKknWXBrmsrZ1JMCeYBdt8NvTSwpDOHxKiRGl4AB5OJ+4N6vR03+cX FsL3oX8EEi00qdgKLb6IuS68kgYsqY00jAqz+rCK9o89Dtht1+DAyUkjDaM+IyVA Za6eTqhd/V7wdJZVYkIzYny0NI0UGywAkLLLRIVuT5qaJfveDp7syn3RNxk5v1eo 5zXBmhU3jmZGSWRdhimqQqfI3nqcHE/smXHIcHXFnDMDznge+RvkR1yv+6whUcac UMI9XzIy3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:09 2026 by rpki-client