This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: bw81kTqFa6b7MC4zAh2gM79NSnRYSpu2Var3zxLbSWc= Subject key identifier: 12:A0:A3:93:F7:9D:80:05:E3:EA:BC:4C:ED:CA:B8:6F:BB:C0:FA:DA Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 7F00CBD3653427686F191E85D021CDBF6EF63456 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:01:02 +0000 Manifest this update: Sun 25 Jan 2026 09:56:02 +0000 Manifest next update: Mon 26 Jan 2026 13:45:02 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: GEu5w4eDDYezicYBEpN137uYue+h9BFFvga3Lynre7c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:00:cb:d3:65:34:27:68:6f:19:1e:85:d0:21:cd:bf:6e:f6:34:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Jan 25 09:56:02 2026 GMT Not After : Jan 26 13:45:02 2026 GMT Subject: CN=12A0A393F79D8005E3EABC4CEDCAB86FBBC0FADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:ca:5f:f6:4b:e7:2e:20:f2:63:df:c5:81: 72:2d:0f:40:18:09:82:9d:38:d1:ef:bd:c9:b8:3d: e3:80:e0:5f:5d:f9:34:87:32:88:64:93:15:65:fe: 64:b4:0a:f6:f3:82:70:b7:4d:7f:39:15:4c:d1:40: 91:9c:c6:5f:07:ca:e5:74:78:1f:f2:0a:0b:3c:45: 69:b2:ec:9e:33:e3:54:90:60:c2:93:ab:60:3c:f5: e8:2f:cb:13:b5:5d:59:dc:16:13:00:ba:4a:f2:4c: fc:be:8e:85:e0:63:6b:9c:32:72:f6:22:70:86:00: cb:36:18:09:14:b4:2f:e1:2a:e9:90:2a:60:6a:0a: 2e:82:fa:ee:2d:03:23:73:59:16:52:21:9b:cb:fe: a8:45:80:e5:b3:65:62:99:a8:f9:26:f7:07:3d:9f: 2c:29:80:d2:0f:1d:0a:91:0a:98:91:d4:c6:a4:d7: 05:4b:25:d2:03:54:02:dd:23:0c:87:9c:a9:50:ec: 7a:40:22:90:76:a3:95:de:c1:01:5d:f1:a2:ee:2c: 34:11:f4:f0:7a:de:38:33:58:b6:6d:6a:5d:ae:d1: 32:4f:24:05:09:25:25:4c:55:07:44:4a:09:9b:fb: f6:66:66:0b:f0:04:09:06:b5:eb:4a:69:46:94:85: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:A3:93:F7:9D:80:05:E3:EA:BC:4C:ED:CA:B8:6F:BB:C0:FA:DA X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ed:4d:df:0c:10:d5:20:81:24:99:e6:9a:f5:b4:3a:ed:f8: 2c:51:22:c1:05:42:b5:54:3a:32:d6:7e:c2:90:0a:a0:2e:48: bf:d2:73:cf:60:d3:8f:25:72:08:66:bd:4d:8a:f5:a2:92:b7: a0:67:ef:1a:b2:f4:a6:30:af:ef:89:c6:92:d7:01:94:64:6a: 6f:86:87:a4:92:99:77:3e:1d:14:63:57:12:96:a7:7e:c1:cc: f3:16:6c:2a:ff:c4:9f:ca:a2:84:44:2c:df:58:b5:95:d0:5c: 9e:46:22:2e:c4:79:b3:25:0e:01:0b:01:b1:8e:a0:e4:a6:cb: 26:9d:1f:dd:ae:f5:5e:ed:ed:b8:fd:ff:e7:1a:f7:57:e2:c4: 60:6c:a6:5d:65:6c:e2:06:46:ac:69:7b:7b:1d:2b:da:c9:3c: 3f:8f:a1:77:18:3a:97:f5:f9:bf:6e:20:09:33:ee:fd:a3:30: 6e:59:29:44:78:70:a0:63:1d:1d:f4:3a:88:33:a3:9f:32:56: e0:67:1e:44:8d:d5:0b:dd:0e:3d:2a:9b:92:f9:65:04:d9:59: be:bc:4d:2f:51:45:ca:44:a9:0a:d5:46:ac:5a:a0:17:b3:58: 43:a5:86:6d:97:b8:33:77:43:bb:2e:06:da:ee:cb:07:48:de: ed:00:ee:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfwDL02U0J2hvGR6F0CHNv272NFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjAxMjUwOTU2MDJaFw0yNjAxMjYxMzQ1MDJaMDMxMTAvBgNV BAMTKDEyQTBBMzkzRjc5RDgwMDVFM0VBQkM0Q0VEQ0FCODZGQkJDMEZBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8spf9kvnLiDyY9/FgXItD0AY CYKdONHvvcm4PeOA4F9d+TSHMohkkxVl/mS0CvbzgnC3TX85FUzRQJGcxl8HyuV0 eB/yCgs8RWmy7J4z41SQYMKTq2A89egvyxO1XVncFhMAukryTPy+joXgY2ucMnL2 InCGAMs2GAkUtC/hKumQKmBqCi6C+u4tAyNzWRZSIZvL/qhFgOWzZWKZqPkm9wc9 nywpgNIPHQqRCpiR1Mak1wVLJdIDVALdIwyHnKlQ7HpAIpB2o5XewQFd8aLuLDQR 9PB63jgzWLZtal2u0TJPJAUJJSVMVQdESgmb+/ZmZgvwBAkGtetKaUaUhYKrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEqCjk/edgAXj6rxM7cq4b7vA+towHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATO1N3wwQ1SCB JJnmmvW0Ou34LFEiwQVCtVQ6MtZ+wpAKoC5Iv9Jzz2DTjyVyCGa9TYr1opK3oGfv GrL0pjCv74nGktcBlGRqb4aHpJKZdz4dFGNXEpanfsHM8xZsKv/En8qihEQs31i1 ldBcnkYiLsR5syUOAQsBsY6g5KbLJp0f3a71Xu3tuP3/5xr3V+LEYGymXWVs4gZG rGl7ex0r2sk8P4+hdxg6l/X5v24gCTPu/aMwblkpRHhwoGMdHfQ6iDOjnzJW4Gce RI3VC90OPSqbkvllBNlZvrxNL1FFykSpCtVGrFqgF7NYQ6WGbZe4M3dDuy4G2u7L B0je7QDunw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:34 2026 by rpki-client