This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: qGo22jp/3b9Cv2VKW3IL5XtTP2UYPJQdH5TXBIOV/lE= Subject key identifier: D7:93:0B:89:02:F1:85:0D:7D:D4:35:84:00:66:A9:9E:40:C0:15:B6 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 764C7D70FA423EDC33958D9E1EB68A611460CDEA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 05:20:57 +0000 Manifest this update: Sun 25 Jan 2026 05:15:57 +0000 Manifest next update: Mon 26 Jan 2026 08:09:57 +0000 Files and hashes: 1: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) 2: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: 0P7QlQWSwsLs5fOfB86zE+jJFITUzWmLPJNozFJ/9Do=) 3: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4c:7d:70:fa:42:3e:dc:33:95:8d:9e:1e:b6:8a:61:14:60:cd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Jan 25 05:15:57 2026 GMT Not After : Jan 26 08:09:57 2026 GMT Subject: CN=D7930B8902F1850D7DD435840066A99E40C015B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:a4:89:f8:4a:9c:fd:6f:dd:57:6b:71:b6: d4:5d:d7:4c:6a:78:7d:26:d1:18:ea:11:ca:dd:b8: 8e:56:e8:01:38:d4:ee:3b:96:5b:8b:4c:41:09:fa: 52:8f:87:bc:7b:63:2f:e0:87:a7:90:f7:62:58:da: 53:3c:ba:81:a1:32:ee:93:b3:08:39:f2:22:a6:ac: 49:12:c5:10:8a:07:a8:90:93:db:2f:63:91:d9:25: f2:8c:02:05:de:b9:62:b0:ea:04:6e:42:87:cb:e4: 02:b1:f7:ee:db:a0:f7:3e:91:06:2e:32:87:a0:4f: 6e:42:67:bd:77:4f:02:26:5c:04:5d:e1:93:cf:22: d5:72:2a:86:2b:87:e0:e4:c3:1f:e8:5f:0b:06:ef: 73:37:a1:4b:2e:04:2d:d8:dd:4b:16:21:4d:dd:25: d2:e3:3d:d0:27:14:9c:ba:81:ff:b6:f3:d2:f7:16: 34:c0:4c:6c:02:ae:cb:2a:0f:ff:be:77:07:53:e8: 3f:a3:c9:fb:80:33:51:98:e9:64:8a:97:3a:97:ee: b2:93:0c:97:e8:12:82:e5:f2:58:07:e9:70:fd:47: 17:93:8b:c8:aa:b1:8f:08:3c:80:5a:10:0e:f0:37: fb:32:ed:0a:1c:9e:9b:6d:ef:8a:e3:2e:a7:37:87: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:93:0B:89:02:F1:85:0D:7D:D4:35:84:00:66:A9:9E:40:C0:15:B6 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0a:17:c6:53:5c:03:6a:7d:e1:54:e6:46:08:13:c9:93:f4: 05:16:35:de:34:01:e4:00:41:9f:05:bd:4b:4b:84:ee:71:95: e1:ed:36:35:88:f8:bf:98:7d:9c:04:47:69:e6:d8:49:11:1b: 3a:f7:5f:55:8b:42:58:31:97:7a:d3:82:22:1e:fa:b8:a7:92: ed:79:2d:5a:99:9c:ce:0f:a1:ce:19:48:ea:db:80:c2:f4:7e: 13:db:cb:ed:9c:5a:fe:17:62:16:3e:e5:60:9f:1c:2c:2f:82: 12:22:d7:09:82:54:a6:86:06:37:36:96:18:5a:f1:dd:0d:39: 31:57:5b:a5:f1:a6:07:17:13:9a:4d:e5:b0:a4:e0:b5:1d:72: 13:01:9f:32:3f:af:68:02:68:52:50:4f:44:12:3e:a6:c5:d2: a0:13:5d:29:6b:29:08:c5:92:41:e9:2c:93:81:59:f8:00:2d: 01:d4:30:e2:09:50:46:ff:ab:8c:ae:bc:2b:0e:69:8a:a4:3e: c2:d7:45:0e:0a:8c:41:dc:68:67:b9:8d:52:1e:28:02:17:51: 89:9f:58:e8:f1:2d:c1:64:37:f3:f4:4d:ef:df:9b:4f:85:d0: 1c:81:ae:60:6a:27:5a:56:1b:53:57:82:ea:c8:c7:0b:d0:9a: 2a:39:c4:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdkx9cPpCPtwzlY2eHraKYRRgzeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjAxMjUwNTE1NTdaFw0yNjAxMjYwODA5NTdaMDMxMTAvBgNV BAMTKEQ3OTMwQjg5MDJGMTg1MEQ3REQ0MzU4NDAwNjZBOTlFNDBDMDE1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgT6SJ+Eqc/W/dV2txttRd10xq eH0m0RjqEcrduI5W6AE41O47lluLTEEJ+lKPh7x7Yy/gh6eQ92JY2lM8uoGhMu6T swg58iKmrEkSxRCKB6iQk9svY5HZJfKMAgXeuWKw6gRuQofL5AKx9+7boPc+kQYu MoegT25CZ713TwImXARd4ZPPItVyKoYrh+Dkwx/oXwsG73M3oUsuBC3Y3UsWIU3d JdLjPdAnFJy6gf+289L3FjTATGwCrssqD/++dwdT6D+jyfuAM1GY6WSKlzqX7rKT DJfoEoLl8lgH6XD9RxeTi8iqsY8IPIBaEA7wN/sy7Qocnptt74rjLqc3hxw7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU15MLiQLxhQ191DWEAGapnkDAFbYwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAoXxlNcA2p9 4VTmRggTyZP0BRY13jQB5ABBnwW9S0uE7nGV4e02NYj4v5h9nARHaebYSREbOvdf VYtCWDGXetOCIh76uKeS7XktWpmczg+hzhlI6tuAwvR+E9vL7Zxa/hdiFj7lYJ8c LC+CEiLXCYJUpoYGNzaWGFrx3Q05MVdbpfGmBxcTmk3lsKTgtR1yEwGfMj+vaAJo UlBPRBI+psXSoBNdKWspCMWSQeksk4FZ+AAtAdQw4glQRv+rjK68Kw5piqQ+wtdF DgqMQdxoZ7mNUh4oAhdRiZ9Y6PEtwWQ38/RN79+bT4XQHIGuYGonWlYbU1eC6sjH C9CaKjnE0A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:00 2026 by rpki-client