This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: YHzUrG6Id4HEOlGBLwzjhjNyUjTCXK/jx8NH3fWufOs= Subject key identifier: F3:F8:FA:4A:9B:5F:D0:B7:68:D3:CF:97:FA:86:8E:AD:91:E9:D7:D6 Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 4A9A302A20883D0414B64A7144F7DFECDAE3A5B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:35:57 +0000 Manifest this update: Sun 25 Jan 2026 03:30:57 +0000 Manifest next update: Mon 26 Jan 2026 06:21:57 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: z+mWfLlz5Iu7GM6jo7uzOc8KtfqQD3gvbf3VZ+GaMN4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9a:30:2a:20:88:3d:04:14:b6:4a:71:44:f7:df:ec:da:e3:a5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Jan 25 03:30:57 2026 GMT Not After : Jan 26 06:21:57 2026 GMT Subject: CN=F3F8FA4A9B5FD0B768D3CF97FA868EAD91E9D7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:b0:8f:d1:d1:f7:9a:a6:f5:c6:9e:34:e2: e1:d9:b7:3a:5a:22:c4:c2:0d:c9:44:30:dc:60:a0: 16:f8:86:4e:58:5f:d7:aa:c5:f6:85:e4:fd:56:fa: 59:a7:24:42:d8:0f:73:7a:3d:20:86:0e:33:96:c8: 90:6a:59:f9:66:3f:8b:c7:65:6f:84:c9:a7:fa:c4: 1f:4e:26:b7:de:c9:45:ed:4b:d8:be:ab:f4:59:ee: c5:b6:85:14:f4:ee:38:f8:9c:f3:f1:d0:30:ad:aa: b4:19:ff:fc:5e:6b:1c:cd:a0:41:45:1c:80:8a:d0: 71:bc:c8:34:d0:bc:6f:5a:60:57:ae:06:05:d6:4b: 9d:51:6e:ee:5f:69:94:3b:48:49:2d:31:08:77:46: bd:c5:4c:35:7d:c5:b0:0e:44:67:7b:8f:6c:f1:dc: 76:37:36:2a:b0:ab:e2:ce:93:4e:7f:74:f4:f1:7a: 72:44:c0:11:30:8f:f0:34:69:c9:a3:c8:56:97:af: f1:c9:29:d3:f9:0f:c7:df:68:4f:7d:af:45:a8:dd: 04:5a:92:98:90:6c:5b:e1:b5:23:4f:1c:b0:68:81: 10:f5:95:86:ab:b3:6b:e5:17:f6:85:69:e7:6b:d6: b0:ea:d6:b4:68:04:a5:d9:48:30:fe:70:56:7d:42: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F8:FA:4A:9B:5F:D0:B7:68:D3:CF:97:FA:86:8E:AD:91:E9:D7:D6 X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:96:37:39:63:09:03:2c:e6:30:2e:f7:07:95:aa:5c:ff:5e: 9f:0a:c7:13:75:84:e8:db:36:ed:ef:20:42:82:52:2e:47:b5: 72:4d:7f:c0:38:5d:7c:22:0f:34:9f:b1:3b:44:3b:cb:f9:78: 2e:39:f4:4d:05:a9:af:f0:8f:48:e6:94:ad:1a:6b:6a:f4:27: a4:a0:55:ff:43:37:29:e5:51:9e:cf:7a:70:b6:46:be:9e:3f: 69:9c:36:b4:e0:43:1d:60:8a:29:e9:27:e2:d3:2e:0c:27:a5: 4f:47:11:87:e7:c5:d0:58:11:61:a0:78:8f:4a:9d:4a:67:57: e5:20:43:c5:20:a4:64:89:3d:08:e8:11:0c:51:d6:5e:8f:97: 93:c9:a5:f0:09:f6:6a:9a:cb:03:a0:6a:b3:8c:3d:a4:17:40: 4a:ea:4c:55:d2:6f:57:45:c8:90:55:06:bc:c5:ec:68:43:ae: 02:93:e2:51:ed:09:4d:81:f5:36:38:2c:a7:8f:b6:d1:f2:7e: e3:57:90:bf:0a:df:b2:e7:88:f5:3c:3e:4c:37:fd:87:3c:aa: f1:6b:5b:53:eb:2a:2e:40:76:7c:6f:00:5a:c6:0a:62:7d:59: bb:d6:f8:3d:cc:49:08:d6:f6:bd:51:16:3a:c3:ca:a5:eb:58: 8c:2b:f3:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSpowKiCIPQQUtkpxRPff7NrjpbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjAxMjUwMzMwNTdaFw0yNjAxMjYwNjIxNTdaMDMxMTAvBgNV BAMTKEYzRjhGQTRBOUI1RkQwQjc2OEQzQ0Y5N0ZBODY4RUFEOTFFOUQ3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSS7CP0dH3mqb1xp404uHZtzpa IsTCDclEMNxgoBb4hk5YX9eqxfaF5P1W+lmnJELYD3N6PSCGDjOWyJBqWflmP4vH ZW+Eyaf6xB9OJrfeyUXtS9i+q/RZ7sW2hRT07jj4nPPx0DCtqrQZ//xeaxzNoEFF HICK0HG8yDTQvG9aYFeuBgXWS51Rbu5faZQ7SEktMQh3Rr3FTDV9xbAORGd7j2zx 3HY3Niqwq+LOk05/dPTxenJEwBEwj/A0acmjyFaXr/HJKdP5D8ffaE99r0Wo3QRa kpiQbFvhtSNPHLBogRD1lYars2vlF/aFaedr1rDq1rRoBKXZSDD+cFZ9QtCJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8/j6Sptf0Ldo08+X+oaOrZHp19YwHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpY3OWMJAyzm MC73B5WqXP9enwrHE3WE6Ns27e8gQoJSLke1ck1/wDhdfCIPNJ+xO0Q7y/l4Ljn0 TQWpr/CPSOaUrRpravQnpKBV/0M3KeVRns96cLZGvp4/aZw2tOBDHWCKKekn4tMu DCelT0cRh+fF0FgRYaB4j0qdSmdX5SBDxSCkZIk9COgRDFHWXo+Xk8ml8An2aprL A6Bqs4w9pBdASupMVdJvV0XIkFUGvMXsaEOuApPiUe0JTYH1Njgsp4+20fJ+41eQ vwrfsueI9Tw+TDf9hzyq8WtbU+sqLkB2fG8AWsYKYn1Zu9b4PcxJCNb2vVEWOsPK petYjCvz9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:48 2026 by rpki-client