This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json) Hash identifier: tc5E5miLRETE/427BZT/LmZnHfvqwBcWwhgpCxlTdtU= Subject key identifier: 61:74:AD:D5:FF:27:A7:72:DA:78:85:E7:75:32:34:BD:EB:CF:24:AE Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 2FAFDC3C193697A0A2EDCEA157BA3258085CA366 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:10:57 +0000 Manifest this update: Sun 25 Jan 2026 06:05:57 +0000 Manifest next update: Mon 26 Jan 2026 06:40:57 +0000 Files and hashes: 1: 3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa (hash: I2uuWEd8qf4ct5ZLh+z7iLcyWwEtolLGJXavFEgmc/c=) 2: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: OqthX14Z5si5Z7IYFzrZNKv5x092FOwbR0BMAozLLVc=) 3: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: JP55VF7KYTKS5/sVQC9CenTZrXdL8P2f1BqN6bAELNE=) 4: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: O3paxsTG4eSTL6wNuiCpUDXY4MsseEvv7K9F7F16/S4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:af:dc:3c:19:36:97:a0:a2:ed:ce:a1:57:ba:32:58:08:5c:a3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Jan 25 06:05:57 2026 GMT Not After : Jan 26 06:40:57 2026 GMT Subject: CN=6174ADD5FF27A772DA7885E7753234BDEBCF24AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:6b:bb:93:45:a2:5a:d8:3d:d0:e8:8d:db: b9:0f:bf:b4:e7:99:32:a3:98:0c:43:23:c3:11:01: de:41:d5:75:c6:5d:f3:b8:66:d6:27:4b:23:10:ec: 9c:3b:3d:c2:e5:03:a9:e1:58:ab:9e:0f:2d:41:ff: 11:c3:2e:31:ed:24:98:91:57:51:66:ef:06:34:2d: 74:6d:ee:b3:32:4d:7e:ba:ff:73:86:64:98:34:6c: 8d:73:91:ee:95:54:6e:f0:c5:60:c6:67:80:78:1b: 02:23:ac:6c:d5:41:6b:ae:08:d8:de:e1:a4:69:0c: 18:0f:0d:4c:e0:a3:c4:98:3c:98:a0:65:61:d8:30: 9e:f0:2a:af:16:61:66:83:22:46:78:91:22:a8:d6: 64:3d:f1:aa:15:09:b7:17:f1:5c:50:ce:d4:e0:37: 8a:9d:bd:03:e3:7b:fd:e7:ab:e4:a0:69:a4:41:da: e6:39:d7:ca:60:73:d8:8a:bb:b5:87:47:f7:b9:61: a1:a5:cc:65:2c:1e:91:f4:3b:69:6c:31:24:7a:2b: 19:3c:c6:77:c5:49:db:6c:f4:d7:8f:17:2f:85:49: ff:cc:2e:4b:cc:e4:c1:2d:f6:6e:c9:6e:7c:e5:5a: 13:ce:f7:16:b4:16:71:35:63:5c:83:7b:c7:6a:ac: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:AD:D5:FF:27:A7:72:DA:78:85:E7:75:32:34:BD:EB:CF:24:AE X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:06:35:cd:8e:fd:4c:06:47:0b:52:51:c8:82:3f:57:d5:bb: 0c:27:87:07:3f:4a:3e:6f:3e:29:6f:b2:e4:1a:cd:2c:03:25: e5:b0:2e:8e:6e:ee:46:70:d2:e2:36:13:81:29:8b:c0:62:96: 68:7a:96:a7:1e:5e:ed:3d:7e:63:23:40:f4:5e:85:0c:35:9e: f7:45:68:ba:cc:c3:8f:dd:a8:49:b4:85:b2:ec:df:19:e2:59: 32:57:e6:6f:d3:dc:8d:83:97:a3:9c:6f:0b:8e:bb:9c:ef:34: 35:3d:7f:75:65:0b:d1:42:21:57:bb:98:ce:2f:f4:17:1d:b9: b1:61:a0:e7:c0:76:34:81:3c:07:ef:cd:27:83:3b:16:bb:43: c2:85:13:6a:1b:5e:60:6a:c9:f6:09:fc:7e:75:cc:9a:2e:42: 4c:b1:47:65:be:79:c6:69:b7:53:00:dc:c5:55:c5:a2:86:59: 50:c7:49:9e:78:cc:3e:18:0c:fc:52:e9:9c:67:08:a6:f7:5f: 69:ad:cd:51:2c:65:6b:2f:26:a2:10:62:68:a1:9f:72:23:5b: 5f:05:65:f5:ad:0f:51:43:6e:79:ee:87:26:a4:13:be:7e:03: 66:bf:7e:12:09:df:44:01:28:ce:a5:6e:55:ee:a4:7a:7f:af: 1d:9f:ec:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL6/cPBk2l6Ci7c6hV7oyWAhco2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjAxMjUwNjA1NTdaFw0yNjAxMjYwNjQwNTdaMDMxMTAvBgNV BAMTKDYxNzRBREQ1RkYyN0E3NzJEQTc4ODVFNzc1MzIzNEJERUJDRjI0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4mu7k0WiWtg90OiN27kPv7Tn mTKjmAxDI8MRAd5B1XXGXfO4ZtYnSyMQ7Jw7PcLlA6nhWKueDy1B/xHDLjHtJJiR V1Fm7wY0LXRt7rMyTX66/3OGZJg0bI1zke6VVG7wxWDGZ4B4GwIjrGzVQWuuCNje 4aRpDBgPDUzgo8SYPJigZWHYMJ7wKq8WYWaDIkZ4kSKo1mQ98aoVCbcX8VxQztTg N4qdvQPje/3nq+SgaaRB2uY518pgc9iKu7WHR/e5YaGlzGUsHpH0O2lsMSR6Kxk8 xnfFSdts9NePFy+FSf/MLkvM5MEt9m7JbnzlWhPO9xa0FnE1Y1yDe8dqrC6XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYXSt1f8np3LaeIXndTI0vevPJK4wHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2 MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgY1zY79TAZH C1JRyII/V9W7DCeHBz9KPm8+KW+y5BrNLAMl5bAujm7uRnDS4jYTgSmLwGKWaHqW px5e7T1+YyNA9F6FDDWe90VouszDj92oSbSFsuzfGeJZMlfmb9PcjYOXo5xvC467 nO80NT1/dWUL0UIhV7uYzi/0Fx25sWGg58B2NIE8B+/NJ4M7FrtDwoUTahteYGrJ 9gn8fnXMmi5CTLFHZb55xmm3UwDcxVXFooZZUMdJnnjMPhgM/FLpnGcIpvdfaa3N USxlay8mohBiaKGfciNbXwVl9a0PUUNuee6HJqQTvn4DZr9+EgnfRAEozqVuVe6k en+vHZ/sZA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:09 2026 by rpki-client