This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: y78lT+FJXprGL+IX4GqVUo8zysqX/45seqb2hTZwmoM= Subject key identifier: 64:91:83:A9:E2:C9:F6:71:20:8A:AE:03:E5:D0:E2:16:4B:A8:A1:A0 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 412BEE101077EF99ED3C7890A8EE57A40A25CBBB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 05:20:57 +0000 Manifest this update: Sun 25 Jan 2026 05:15:57 +0000 Manifest next update: Mon 26 Jan 2026 06:27:57 +0000 Files and hashes: 1: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: ZQfaBuAOEcKxIX2wfp+IAa5rnC/n5r5ym9a3K+Zm/is=) 2: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 3: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2b:ee:10:10:77:ef:99:ed:3c:78:90:a8:ee:57:a4:0a:25:cb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Jan 25 05:15:57 2026 GMT Not After : Jan 26 06:27:57 2026 GMT Subject: CN=649183A9E2C9F671208AAE03E5D0E2164BA8A1A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:9b:56:00:1f:7d:57:86:25:f2:1c:6d:f4: 32:e7:55:41:67:4e:55:43:46:9b:97:44:9e:5f:b2: aa:b2:7c:b9:31:63:8f:0d:90:45:f1:de:ad:18:4d: 4e:f4:16:7c:e9:ef:28:a5:56:62:17:7f:ef:1a:97: 3c:2f:63:fe:35:a0:e5:e7:a1:5f:c8:b7:ad:72:c8: 72:8b:89:09:0f:fb:9a:45:6d:86:3a:84:8e:76:78: 37:80:63:66:38:c5:28:47:8b:35:57:24:4f:54:f4: c5:33:ac:ec:20:26:c8:7e:1a:52:e6:a3:40:fe:70: 3e:45:5a:15:e4:b4:bb:21:81:86:63:bc:9a:79:64: 9b:49:bf:35:fd:7e:44:41:82:f8:48:f2:6d:75:40: 83:56:fa:7c:00:60:c0:46:49:2e:f8:e7:2d:fc:ce: 7a:29:53:7b:b9:45:84:d2:39:9d:dd:4e:7c:3a:c2: e4:7c:ed:e2:ef:92:75:47:c6:8a:49:bc:87:f7:48: 06:3c:fb:51:3a:f5:12:28:99:e2:d9:31:dc:2c:09: 42:b1:8f:02:12:e8:a6:dc:3e:95:bf:4f:4a:b3:6c: 81:81:49:0c:2a:8a:53:ae:34:09:0a:5c:31:17:ba: 70:c7:dd:f7:d0:5a:4f:e0:ca:26:2d:49:05:33:a9: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:83:A9:E2:C9:F6:71:20:8A:AE:03:E5:D0:E2:16:4B:A8:A1:A0 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:9e:4e:56:99:31:a4:50:14:64:a5:71:ab:1b:87:0d:1e:c9: f4:61:2b:ca:80:aa:73:3a:3e:90:d8:99:31:0e:8d:f8:88:c9: 10:7b:8c:e0:fc:d2:e6:40:1e:a5:05:38:fd:a5:67:cc:c1:e8: 2c:cc:a5:a7:92:ad:b9:8f:59:58:bb:d7:87:39:a7:9a:71:e9: 18:f4:b0:42:a5:da:88:45:55:e3:38:c4:57:c9:9a:f7:ef:3f: b5:a4:aa:48:4c:d7:7e:dd:48:11:1b:3c:93:47:bc:1e:9c:32: e6:07:18:25:58:3d:a6:65:47:2b:ac:f8:d9:95:41:77:9e:72: 10:f7:b7:a7:96:6e:e3:64:3c:66:88:28:8a:61:db:6f:24:f1: d5:57:45:81:4b:81:07:38:1d:18:08:66:1c:08:e0:c1:fe:92: 4e:b4:2d:4b:ef:98:2d:03:43:1f:39:e9:da:3f:67:d4:40:2a: 20:a3:03:54:ed:d8:c2:f6:b8:48:b8:2c:58:12:cf:3d:4b:04: ca:ff:89:89:ab:22:f9:34:96:94:31:cf:07:0a:af:09:29:47: ba:68:c0:a4:0f:fd:cc:93:50:fd:7d:e8:fb:ce:77:34:a9:9c: a3:3a:ef:c7:ba:41:b4:95:ab:26:86:38:39:2f:2f:37:9c:79: 0d:c6:8a:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQSvuEBB375ntPHiQqO5XpAoly7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjAxMjUwNTE1NTdaFw0yNjAxMjYwNjI3NTdaMDMxMTAvBgNV BAMTKDY0OTE4M0E5RTJDOUY2NzEyMDhBQUUwM0U1RDBFMjE2NEJBOEExQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aJtWAB99V4Yl8hxt9DLnVUFn TlVDRpuXRJ5fsqqyfLkxY48NkEXx3q0YTU70Fnzp7yilVmIXf+8alzwvY/41oOXn oV/It61yyHKLiQkP+5pFbYY6hI52eDeAY2Y4xShHizVXJE9U9MUzrOwgJsh+GlLm o0D+cD5FWhXktLshgYZjvJp5ZJtJvzX9fkRBgvhI8m11QINW+nwAYMBGSS745y38 znopU3u5RYTSOZ3dTnw6wuR87eLvknVHxopJvIf3SAY8+1E69RIomeLZMdwsCUKx jwIS6KbcPpW/T0qzbIGBSQwqilOuNAkKXDEXunDH3ffQWk/gyiYtSQUzqd/PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZJGDqeLJ9nEgiq4D5dDiFkuooaAwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4J5OVpkxpFAU ZKVxqxuHDR7J9GEryoCqczo+kNiZMQ6N+IjJEHuM4PzS5kAepQU4/aVnzMHoLMyl p5KtuY9ZWLvXhzmnmnHpGPSwQqXaiEVV4zjEV8ma9+8/taSqSEzXft1IERs8k0e8 Hpwy5gcYJVg9pmVHK6z42ZVBd55yEPe3p5Zu42Q8ZogoimHbbyTx1VdFgUuBBzgd GAhmHAjgwf6STrQtS++YLQNDHznp2j9n1EAqIKMDVO3Ywva4SLgsWBLPPUsEyv+J iasi+TSWlDHPBwqvCSlHumjApA/9zJNQ/X3o+853NKmcozrvx7pBtJWrJoY4OS8v N5x5DcaKJg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:10 2026 by rpki-client