This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json) Hash identifier: P/i0bj9YDfe3tTzbR3WkyKP7Nz2qQeAHfoqoemyaOFg= Subject key identifier: 56:05:FD:2A:52:7E:E4:CA:13:56:C4:73:00:15:D3:29:C9:5E:BE:DB Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Certificate serial: 7AE3E92F709E9693BF07F585C6AF75D07FCB86AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft Manifest number: 0A Signing time: Sun 25 Jan 2026 19:56:02 +0000 Manifest this update: Sun 25 Jan 2026 19:51:02 +0000 Manifest next update: Mon 26 Jan 2026 20:15:02 +0000 Files and hashes: 1: 34352e3131322e3233322e302f32342d3234203d3e20313531323631.roa (hash: IOZwuMEqrOSqCjp4OdE4qWo28zAgS1iGgWf7fe/RtoQ=) 2: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: Kg97tl/yRrL/r71zkIIG2tlIkmT+rLEbzZ6QoHwg+1A=) 3: 34352e3131332e31362e302f32332d3332203d3e20313531323631.roa (hash: LQqTuamZJecJVVqiprVHJhT1U57uhuSeYxVF1Jp6NjU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e3:e9:2f:70:9e:96:93:bf:07:f5:85:c6:af:75:d0:7f:cb:86:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Validity Not Before: Jan 25 19:51:02 2026 GMT Not After : Jan 26 20:15:02 2026 GMT Subject: CN=5605FD2A527EE4CA1356C4730015D329C95EBEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:7d:ff:23:82:28:87:9f:c9:fb:e7:0c:81: cb:71:5d:34:4b:bb:03:ff:9c:9d:77:e7:37:38:c4: f5:1c:97:43:a1:32:a2:74:e9:55:f1:62:15:4e:d8: a4:ba:84:f1:e5:7c:a3:87:c3:2f:f3:6e:93:cc:c0: a4:a8:da:28:ae:a4:61:96:11:4f:e7:51:ba:e1:2b: 6b:1a:dd:12:bd:fc:32:fb:f8:3e:ae:2b:42:ab:c7: 6e:2e:81:ce:be:b3:4f:fe:10:2f:e7:32:95:9d:b4: d0:bd:e4:db:03:19:80:7d:ab:98:1a:8e:eb:ec:df: 79:ce:44:e7:9e:dc:86:9d:1c:4f:e2:ae:d7:17:d9: b5:e8:25:5d:13:5e:f6:ec:b7:64:7c:9c:ec:9e:c9: 06:4d:f4:07:33:e0:e8:a6:31:03:0b:e2:16:99:86: 54:b9:08:10:7d:4c:dc:3b:89:38:46:89:4f:0a:2b: 60:38:4f:94:3e:b6:60:ff:93:17:63:57:f3:2b:0d: 72:86:85:55:12:e1:a4:9f:e6:59:3a:6b:a2:79:fe: b7:39:64:b7:44:5a:72:a8:bd:56:97:fb:d7:36:d3: 02:cd:8a:16:09:42:7a:59:ee:e7:7b:34:1f:29:9d: cd:30:70:4b:e6:98:1c:a9:07:75:ad:90:35:7e:68: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:05:FD:2A:52:7E:E4:CA:13:56:C4:73:00:15:D3:29:C9:5E:BE:DB X509v3 Authority Key Identifier: keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:49:81:5a:58:0e:19:99:b1:8b:96:ef:90:fb:c2:23:67:8f: 7c:1b:3a:76:59:5e:bc:be:d8:ee:3b:48:88:3e:9a:89:31:68: df:3b:5b:7c:38:a6:24:0a:2f:28:99:a0:86:9b:24:40:08:b5: 51:84:aa:1c:25:62:f2:52:dc:49:ea:fd:af:fe:92:92:b6:0e: 3e:c3:59:7e:1f:3b:20:7a:85:f2:fe:3b:66:cc:e8:ff:84:ef: 1a:dd:86:eb:b5:c8:3a:b1:2e:55:6c:29:d9:7a:d3:00:ee:55: 95:b7:8b:dd:f9:fb:4a:92:aa:43:fb:0b:4e:75:f5:23:d7:f9: 4f:9b:dd:65:5c:87:c8:c4:16:23:18:f1:24:7f:9c:af:c7:46: 45:c7:a6:e3:34:08:47:18:3a:69:3f:88:c0:88:06:36:75:0f: c3:aa:35:d4:c8:ed:e1:de:90:d3:10:c3:a4:ff:07:6c:b7:ed: 99:8a:71:5a:7d:7c:d5:4d:85:57:9a:36:75:27:22:97:58:a0: f7:a5:c7:a9:f1:93:89:71:7c:ee:68:de:1a:69:8f:b0:05:3e: 89:38:c9:4e:9d:5f:09:b5:9d:73:ff:28:13:3c:d9:59:14:f6: f4:fa:bb:6e:02:d3:25:b4:59:e1:53:b6:ec:75:88:46:fb:50: df:2a:e7:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeuPpL3CelpO/B/WFxq910H/Lhq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcx MzM1RTRFOTAeFw0yNjAxMjUxOTUxMDJaFw0yNjAxMjYyMDE1MDJaMDMxMTAvBgNV BAMTKDU2MDVGRDJBNTI3RUU0Q0ExMzU2QzQ3MzAwMTVEMzI5Qzk1RUJFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zX3/I4Ioh5/J++cMgctxXTRL uwP/nJ135zc4xPUcl0OhMqJ06VXxYhVO2KS6hPHlfKOHwy/zbpPMwKSo2iiupGGW EU/nUbrhK2sa3RK9/DL7+D6uK0Krx24ugc6+s0/+EC/nMpWdtNC95NsDGYB9q5ga juvs33nOROee3IadHE/irtcX2bXoJV0TXvbst2R8nOyeyQZN9Acz4OimMQML4haZ hlS5CBB9TNw7iThGiU8KK2A4T5Q+tmD/kxdjV/MrDXKGhVUS4aSf5lk6a6J5/rc5 ZLdEWnKovVaX+9c20wLNihYJQnpZ7ud7NB8pnc0wcEvmmBypB3WtkDV+aFh9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVgX9KlJ+5MoTVsRzABXTKclevtswHwYDVR0j BBgwFoAU5EoRJFuEpiae7CPXMh8RlxM15OkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8wL0U0NEExMTI0NUI4NEE2MjY5RUVDMjNENzMyMUYx MTk3MTMzNUU0RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcxMzM1RTRFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMC9FNDRBMTEyNDVCODRB NjI2OUVFQzIzRDczMjFGMTE5NzEzMzVFNEU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEmBWlgOGZmx i5bvkPvCI2ePfBs6dllevL7Y7jtIiD6aiTFo3ztbfDimJAovKJmghpskQAi1UYSq HCVi8lLcSer9r/6SkrYOPsNZfh87IHqF8v47Zszo/4TvGt2G67XIOrEuVWwp2XrT AO5VlbeL3fn7SpKqQ/sLTnX1I9f5T5vdZVyHyMQWIxjxJH+cr8dGRcem4zQIRxg6 aT+IwIgGNnUPw6o11Mjt4d6Q0xDDpP8HbLftmYpxWn181U2FV5o2dScil1ig96XH qfGTiXF87mjeGmmPsAU+iTjJTp1fCbWdc/8oEzzZWRT29Pq7bgLTJbRZ4VO27HWI RvtQ3yrnZw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:12 2026 by rpki-client