This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: 3bEyCuNasDHYYtBoqmCcVyfgup+kGWtfOAvvUQ27PnQ= Subject key identifier: D3:54:BA:43:9A:17:5F:8A:BD:BF:30:62:90:8D:5D:2B:35:1F:04:17 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 0C45D7B82393DD4CD13DCAC95E0C8479E79E9AE8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:15:57 +0000 Manifest this update: Sun 25 Jan 2026 07:10:57 +0000 Manifest next update: Mon 26 Jan 2026 09:26:57 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: YYhwf6qM/XjWkmHoXEGis6zMF+84Og5SrKWffvlqG1c=) 2: 3136302e31392e38322e302f32342d3332203d3e20313531323631.roa (hash: wIryNUkq+SQIuh9QyxK3ngEMwqyiwq3cbzW2X3MdysU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:45:d7:b8:23:93:dd:4c:d1:3d:ca:c9:5e:0c:84:79:e7:9e:9a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Jan 25 07:10:57 2026 GMT Not After : Jan 26 09:26:57 2026 GMT Subject: CN=D354BA439A175F8ABDBF3062908D5D2B351F0417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:ca:1d:34:2d:32:2b:7c:15:c0:d9:34:86: 36:11:3e:c8:16:a1:c3:4a:66:9f:c9:b0:03:0f:db: 98:c9:9d:09:c8:94:1f:e8:b3:d0:b3:41:d3:c1:b8: 8a:59:9b:16:3d:94:b0:b2:66:87:a0:aa:6d:7b:8b: d0:fa:a0:98:6a:84:64:22:7c:a4:5c:0b:22:ae:87: 37:48:6a:98:84:6e:04:65:a5:d1:8c:ac:64:04:ee: a4:62:af:be:e1:63:40:4c:c6:68:b7:0b:2a:24:0c: cf:6b:33:f0:8f:05:c4:08:11:1e:a4:3a:4d:b3:24: 7b:6c:ff:8d:71:0c:48:6c:fa:54:45:51:a0:12:8e: 0b:f2:e6:97:30:a5:30:b2:df:55:9a:d4:88:09:b8: 90:29:43:55:a2:e7:20:95:12:bd:b9:72:ce:d2:8a: 76:05:87:d1:6c:d0:fc:15:2c:d4:85:0e:e3:45:fa: 86:43:a0:5a:00:b0:23:51:c3:bc:ee:5b:93:63:eb: a1:c7:44:a9:f4:8b:ef:02:90:81:04:b0:ba:39:d0: f8:e1:f2:bb:59:4d:4b:03:ac:9d:f8:6f:e5:67:ee: d6:82:ec:2c:6f:06:06:e9:30:95:6c:85:b9:d1:1a: eb:5c:99:c3:58:6e:cf:ee:17:97:30:21:17:0b:e9: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:BA:43:9A:17:5F:8A:BD:BF:30:62:90:8D:5D:2B:35:1F:04:17 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d7:e9:d8:59:51:97:fa:ff:1a:5a:76:ef:f4:ec:41:7b:3f: 53:7d:8a:c9:d9:34:94:51:04:90:67:04:46:46:c6:f1:d2:4b: 66:c6:0d:8a:b5:f2:63:93:6b:82:65:58:f9:1d:41:55:25:4e: c5:b9:db:a4:f7:15:fe:e6:15:9d:4c:e6:9e:da:36:06:57:46: 5c:b2:52:27:3a:58:80:3b:54:a8:cc:5f:6c:e1:b7:ce:58:1e: e9:84:b2:09:19:48:c8:39:fe:76:b9:65:bd:f9:c1:95:46:89: de:a4:bf:9c:25:61:2a:55:80:0e:3b:30:95:0b:86:53:21:79: a8:32:47:28:6b:b5:73:6d:68:55:92:56:1b:3a:34:1d:56:f1: 13:68:fe:5e:a7:55:3b:16:e7:38:8a:92:30:42:09:aa:35:59: 80:ce:f7:6d:90:5b:e4:e6:70:df:9b:df:64:9b:62:bf:8f:de: ec:05:ab:74:02:13:d6:26:6f:a6:3d:a3:92:d8:f4:01:00:4a: 67:83:d7:8f:23:d1:ec:93:b2:9f:57:7d:84:9f:20:94:eb:89: fd:9b:cc:d0:e3:20:b3:96:61:00:fa:e2:e2:8a:f1:48:a0:af: bc:e7:5e:50:03:a2:3b:c1:8a:df:92:45:4c:9c:1c:17:54:d6: 77:f5:4f:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDEXXuCOT3UzRPcrJXgyEeeeemugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjAxMjUwNzEwNTdaFw0yNjAxMjYwOTI2NTdaMDMxMTAvBgNV BAMTKEQzNTRCQTQzOUExNzVGOEFCREJGMzA2MjkwOEQ1RDJCMzUxRjA0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfcodNC0yK3wVwNk0hjYRPsgW ocNKZp/JsAMP25jJnQnIlB/os9CzQdPBuIpZmxY9lLCyZoegqm17i9D6oJhqhGQi fKRcCyKuhzdIapiEbgRlpdGMrGQE7qRir77hY0BMxmi3CyokDM9rM/CPBcQIER6k Ok2zJHts/41xDEhs+lRFUaASjgvy5pcwpTCy31Wa1IgJuJApQ1Wi5yCVEr25cs7S inYFh9Fs0PwVLNSFDuNF+oZDoFoAsCNRw7zuW5Nj66HHRKn0i+8CkIEEsLo50Pjh 8rtZTUsDrJ34b+Vn7taC7CxvBgbpMJVshbnRGutcmcNYbs/uF5cwIRcL6e13AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU01S6Q5oXX4q9vzBikI1dKzUfBBcwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdfp2FlRl/r/ Glp27/TsQXs/U32Kydk0lFEEkGcERkbG8dJLZsYNirXyY5NrgmVY+R1BVSVOxbnb pPcV/uYVnUzmnto2BldGXLJSJzpYgDtUqMxfbOG3zlge6YSyCRlIyDn+drllvfnB lUaJ3qS/nCVhKlWADjswlQuGUyF5qDJHKGu1c21oVZJWGzo0HVbxE2j+XqdVOxbn OIqSMEIJqjVZgM73bZBb5OZw35vfZJtiv4/e7AWrdAIT1iZvpj2jktj0AQBKZ4PX jyPR7JOyn1d9hJ8glOuJ/ZvM0OMgs5ZhAPri4orxSKCvvOdeUAOiO8GK35JFTJwc F1TWd/VPLg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:59 2026 by rpki-client