This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: 6flIGJV5GruthnbD2qXolXyeyjKvYJTnPD1Qc1QJexQ= Subject key identifier: 55:B7:9E:CB:3A:20:3A:A2:15:79:94:F9:C4:EB:36:58:43:01:8D:CC Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 7EA0047D21DA7403D5F55D42BF3D237B8F707DE2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:00:58 +0000 Manifest this update: Sun 25 Jan 2026 07:55:58 +0000 Manifest next update: Mon 26 Jan 2026 09:16:58 +0000 Files and hashes: 1: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 2: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 3: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 4: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: xEeEZmZTVn1NQQQL0AH18jX4ifDqHUkjmVfb56uFe2k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a0:04:7d:21:da:74:03:d5:f5:5d:42:bf:3d:23:7b:8f:70:7d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jan 25 07:55:58 2026 GMT Not After : Jan 26 09:16:58 2026 GMT Subject: CN=55B79ECB3A203AA2157994F9C4EB365843018DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:6c:36:fc:77:70:44:0d:c9:12:9b:d4:c1: 30:3f:17:cf:b8:52:d9:52:4c:ea:08:a3:17:37:66: 01:30:ed:30:13:c6:c2:29:49:54:a6:61:f7:08:40: 63:e0:94:1a:de:a2:e0:be:b2:0c:83:68:5e:39:e9: f8:cc:00:c1:f8:7b:05:e3:17:f5:a9:5d:86:68:c4: b7:13:0a:2d:0e:30:b3:d3:a9:67:29:91:3a:29:47: 2a:22:21:aa:39:56:a4:f4:8e:35:6a:2b:49:06:9b: d9:46:1f:14:45:a1:01:a6:e3:12:81:53:de:cd:e9: 70:31:33:63:86:69:b0:38:79:8f:a6:e1:de:ce:57: 42:e6:23:43:90:39:f0:cc:28:31:3d:e2:2f:c6:93: 16:09:e1:08:c8:f3:2b:5a:22:cd:48:79:02:b6:c5: 5a:5a:ae:ea:31:67:20:84:8d:08:30:b7:c6:aa:17: 25:1d:2d:96:02:7e:a4:e5:3c:e9:ae:43:a4:a6:d3: a4:cb:19:69:18:b4:2d:10:c4:bb:f0:2b:08:0c:6c: c9:35:83:ab:2f:cf:76:2e:bf:b0:43:f1:ab:dc:54: 4a:a2:88:19:c1:c7:a8:21:f4:9b:c3:f6:34:82:4e: 54:0d:62:81:88:aa:1f:71:e3:52:ce:b1:33:e2:a3: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:9E:CB:3A:20:3A:A2:15:79:94:F9:C4:EB:36:58:43:01:8D:CC X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b7:bb:b3:6f:3c:75:b1:be:d2:92:46:dc:40:28:52:ea:a0: 32:c4:b7:9d:fe:12:65:da:99:97:00:ab:4c:da:ee:ba:c5:68: 11:41:c7:bb:2e:80:36:11:76:8f:55:33:6e:aa:94:e8:8b:f7: 1c:99:bc:c1:ce:98:07:12:08:ce:65:90:12:46:e4:64:39:bf: 0c:a9:38:9f:b3:6a:c4:d7:1b:a1:7d:a7:43:4e:4a:3b:cb:c1: 18:ec:90:79:79:85:2f:19:f1:4b:a9:3a:ba:9e:e8:3c:bf:ee: 78:35:88:b8:91:f9:4a:06:c0:a3:a3:54:0d:82:30:07:be:bb: b8:86:56:12:28:e0:9c:35:0e:68:ed:de:6e:8e:1e:52:06:32: 7e:d6:68:aa:bb:64:90:e0:7a:96:da:48:82:46:41:72:0c:42: d0:93:58:3e:8a:a6:f8:46:b9:d1:bf:9b:e1:7c:6c:9f:6c:29: 6b:e2:eb:64:01:51:c9:42:b3:a4:b0:ee:9d:2c:cc:92:e8:6c: 47:5c:a3:67:6d:82:b9:e1:8e:64:1a:90:e4:e7:9a:7f:84:38: f5:98:c3:cd:06:30:2b:05:78:70:a3:61:ae:b6:a7:41:4b:5a: 95:9b:c3:47:57:87:00:b2:7c:c5:6e:01:b5:ec:21:ca:00:f4: d8:09:b3:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfqAEfSHadAPV9V1Cvz0je49wfeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjAxMjUwNzU1NThaFw0yNjAxMjYwOTE2NThaMDMxMTAvBgNV BAMTKDU1Qjc5RUNCM0EyMDNBQTIxNTc5OTRGOUM0RUIzNjU4NDMwMThEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRWw2/HdwRA3JEpvUwTA/F8+4 UtlSTOoIoxc3ZgEw7TATxsIpSVSmYfcIQGPglBreouC+sgyDaF456fjMAMH4ewXj F/WpXYZoxLcTCi0OMLPTqWcpkTopRyoiIao5VqT0jjVqK0kGm9lGHxRFoQGm4xKB U97N6XAxM2OGabA4eY+m4d7OV0LmI0OQOfDMKDE94i/GkxYJ4QjI8ytaIs1IeQK2 xVparuoxZyCEjQgwt8aqFyUdLZYCfqTlPOmuQ6Sm06TLGWkYtC0QxLvwKwgMbMk1 g6svz3Yuv7BD8avcVEqiiBnBx6gh9JvD9jSCTlQNYoGIqh9x41LOsTPio3wtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVbeeyzogOqIVeZT5xOs2WEMBjcwwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7e7s288dbG+ 0pJG3EAoUuqgMsS3nf4SZdqZlwCrTNruusVoEUHHuy6ANhF2j1UzbqqU6Iv3HJm8 wc6YBxIIzmWQEkbkZDm/DKk4n7NqxNcboX2nQ05KO8vBGOyQeXmFLxnxS6k6up7o PL/ueDWIuJH5SgbAo6NUDYIwB767uIZWEijgnDUOaO3ebo4eUgYyftZoqrtkkOB6 ltpIgkZBcgxC0JNYPoqm+Ea50b+b4Xxsn2wpa+LrZAFRyUKzpLDunSzMkuhsR1yj Z22CueGOZBqQ5Oeaf4Q49ZjDzQYwKwV4cKNhrranQUtalZvDR1eHALJ8xW4Btewh ygD02Amzmg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:41 2026 by rpki-client