This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: 7n6NRs5nZ4/8b2aPlhRKPuN8hpZUlgfm3Fb5goi5jjU= Subject key identifier: 79:AB:5E:1F:61:9C:F6:4B:0C:2F:6F:D5:91:D0:74:E9:66:D0:E1:D1 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 41BFA029076D63DDE2765AAC9B652CF33A61CB51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 10:35:57 +0000 Manifest this update: Sat 24 Jan 2026 10:30:57 +0000 Manifest next update: Sun 25 Jan 2026 14:31:57 +0000 Files and hashes: 1: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: xHoSiyeZPFWvKJiWjBPRI6DSnxgxTLzG2DxiIT8gz/Y=) 2: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bf:a0:29:07:6d:63:dd:e2:76:5a:ac:9b:65:2c:f3:3a:61:cb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Jan 24 10:30:57 2026 GMT Not After : Jan 25 14:31:57 2026 GMT Subject: CN=79AB5E1F619CF64B0C2F6FD591D074E966D0E1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:e3:27:63:d7:94:6e:eb:1b:0e:69:23:d7: 7b:3d:1d:ab:ae:3d:20:e5:56:46:2e:29:d9:5a:02: bd:73:5b:e1:6a:6e:ab:4f:1e:0f:db:65:a2:27:b4: e8:00:5a:1f:3f:2f:f3:3b:7c:f6:91:8e:78:25:8f: ae:24:f4:99:8d:8f:1b:28:f5:23:ae:2d:fa:a8:92: 28:59:4b:44:7b:74:d8:8a:23:07:93:1a:aa:44:78: 7f:e8:9f:af:9b:3a:bc:5e:d3:40:79:ac:06:6c:20: 91:27:cb:1f:c8:5c:9c:6c:3b:32:91:0d:df:3b:a0: 5d:7b:33:fc:70:5d:a8:05:ca:ad:5a:26:f2:53:98: 35:ec:fa:c3:e5:55:25:a0:f4:bf:ca:26:4c:33:2b: 79:2e:15:be:c2:3b:11:e7:cc:c7:3f:60:f6:71:66: a7:35:90:ed:3c:59:a6:48:43:c5:85:ff:5c:40:56: 6a:da:3a:6a:03:d5:07:da:14:8e:15:23:39:29:ab: e3:7b:b8:9c:4b:ac:a2:f2:fc:94:c7:36:5c:99:21: cd:aa:3e:05:21:5e:ca:1f:ed:22:8e:cf:a8:df:78: 6e:09:bb:9f:5d:0c:3d:4e:ff:35:0f:f7:72:f9:6f: 3a:3a:64:07:61:98:96:2a:d4:1c:13:13:59:3b:6e: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AB:5E:1F:61:9C:F6:4B:0C:2F:6F:D5:91:D0:74:E9:66:D0:E1:D1 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:dc:e0:83:a3:47:54:57:ab:9c:2f:24:a7:f3:c2:3c:bc:82: cb:a7:f2:89:43:4e:3e:3a:4d:52:5f:17:0e:d9:6b:36:ea:36: 0d:17:e3:3f:6f:19:45:29:a6:a4:b3:13:5c:95:a5:e0:bc:50: e4:42:3b:bd:67:3d:67:d3:9c:b3:99:e1:72:7d:6f:d1:62:bd: 54:0f:b0:fb:d7:6c:4e:24:b4:ad:7d:91:b1:2a:d5:d5:11:92: 8c:27:fb:64:c1:6d:97:63:7a:1d:45:d3:34:04:14:b1:62:57: 92:97:09:03:96:1d:c0:46:8a:05:a7:1d:55:81:2b:5c:33:1c: e9:80:34:94:2c:fe:27:15:3a:49:2c:5f:d4:10:1c:b0:bc:7d: 44:f2:76:6d:63:0d:ab:36:f6:4a:f9:af:9c:51:d2:f8:f9:a9: fb:7c:70:85:fe:f0:53:52:8d:70:36:13:11:68:e6:bc:5a:a7: 6a:99:7b:b5:f3:0e:4e:27:df:ff:73:36:1c:87:dd:ca:85:28: 05:14:78:cc:22:d2:d0:3b:32:0f:ed:0d:e4:a3:5b:53:c2:92: 1a:28:e8:44:88:81:c9:2b:4c:9e:47:68:f1:d9:3f:94:78:ef: 33:e2:6d:84:b4:dc:e3:e0:fc:61:2d:91:51:f0:62:7a:e2:98: 51:5f:0f:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQb+gKQdtY93idlqsm2Us8zphy1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjAxMjQxMDMwNTdaFw0yNjAxMjUxNDMxNTdaMDMxMTAvBgNV BAMTKDc5QUI1RTFGNjE5Q0Y2NEIwQzJGNkZENTkxRDA3NEU5NjZEMEUxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIeMnY9eUbusbDmkj13s9Hauu PSDlVkYuKdlaAr1zW+FqbqtPHg/bZaIntOgAWh8/L/M7fPaRjnglj64k9JmNjxso 9SOuLfqokihZS0R7dNiKIweTGqpEeH/on6+bOrxe00B5rAZsIJEnyx/IXJxsOzKR Dd87oF17M/xwXagFyq1aJvJTmDXs+sPlVSWg9L/KJkwzK3kuFb7COxHnzMc/YPZx Zqc1kO08WaZIQ8WF/1xAVmraOmoD1QfaFI4VIzkpq+N7uJxLrKLy/JTHNlyZIc2q PgUhXsof7SKOz6jfeG4Ju59dDD1O/zUP93L5bzo6ZAdhmJYq1BwTE1k7buDfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeateH2Gc9ksML2/VkdB06WbQ4dEwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9zgg6NHVFer nC8kp/PCPLyCy6fyiUNOPjpNUl8XDtlrNuo2DRfjP28ZRSmmpLMTXJWl4LxQ5EI7 vWc9Z9Ocs5nhcn1v0WK9VA+w+9dsTiS0rX2RsSrV1RGSjCf7ZMFtl2N6HUXTNAQU sWJXkpcJA5YdwEaKBacdVYErXDMc6YA0lCz+JxU6SSxf1BAcsLx9RPJ2bWMNqzb2 SvmvnFHS+Pmp+3xwhf7wU1KNcDYTEWjmvFqnapl7tfMOTiff/3M2HIfdyoUoBRR4 zCLS0DsyD+0N5KNbU8KSGijoRIiByStMnkdo8dk/lHjvM+JthLTc4+D8YS2RUfBi euKYUV8Plw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:56 2026 by rpki-client