This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: CpfIF/29PhqvMmAJ9riE5GdLszZtmxifB5V1IXtBi+Q= Subject key identifier: 84:54:4D:AE:B8:D6:E0:A6:DC:47:B9:16:92:2F:72:FF:5C:EA:D5:94 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 18881503395CC5159FDA4D64FBE57BE9B1808034 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 14:40:57 +0000 Manifest this update: Sat 24 Jan 2026 14:35:57 +0000 Manifest next update: Sun 25 Jan 2026 17:30:57 +0000 Files and hashes: 1: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: JXsrmr0LYjkYRg9rxSFSi+zDpQq0osEdEj0GAZkNWNM=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:88:15:03:39:5c:c5:15:9f:da:4d:64:fb:e5:7b:e9:b1:80:80:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Jan 24 14:35:57 2026 GMT Not After : Jan 25 17:30:57 2026 GMT Subject: CN=84544DAEB8D6E0A6DC47B916922F72FF5CEAD594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d3:28:f2:6c:a0:5f:dc:0a:3d:62:13:22:2c: 21:5a:1d:0f:23:96:87:53:a7:25:53:4f:6b:08:d9: 68:4c:fc:9e:46:46:b3:6f:bd:44:a5:b1:57:53:50: 79:f9:f6:a1:0c:1b:2a:8b:e0:5e:4c:b8:d3:3a:81: 9b:c7:27:a1:65:cd:9f:8d:7e:7c:e6:7e:be:24:7d: 87:0e:e7:28:ca:c1:c8:fe:dc:d1:2e:cc:99:27:49: 1c:2c:15:4e:a8:4b:82:4e:fa:22:1f:8e:e7:5a:af: ce:b1:cf:aa:78:76:79:9f:58:f7:00:8a:1e:22:18: 58:ed:43:91:25:21:24:17:3e:ba:88:26:b2:02:7c: 22:96:b3:92:74:bc:e3:a2:b1:82:7f:00:14:68:f5: 25:93:41:6c:b5:3e:83:3b:b9:b7:83:f8:23:f3:b6: 2b:f1:41:b1:f2:64:01:8c:e5:39:4f:d1:4e:d7:c9: 8f:09:3a:dc:ae:f1:ec:1a:f4:fb:7b:5d:a9:a7:d6: 49:d6:a6:62:81:51:9c:21:b3:c6:6d:5a:7d:9e:5a: 65:a9:f0:07:bf:9e:2c:90:3d:a9:e2:69:42:4f:45: 23:57:3b:30:55:2f:86:76:b7:fa:1e:42:95:47:93: 6f:b9:a6:f6:06:f5:01:0c:c9:fc:da:a3:0a:91:46: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:4D:AE:B8:D6:E0:A6:DC:47:B9:16:92:2F:72:FF:5C:EA:D5:94 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a5:fe:02:69:9d:e1:8c:0e:de:35:38:5a:f2:be:e4:2a:3b: 42:95:63:14:dc:3d:e7:d4:78:8a:19:d1:27:a4:30:b6:8d:d1: b9:ac:a5:33:19:db:06:f7:02:a8:70:dc:bb:d2:e8:db:88:b9: 80:fe:e2:7e:09:75:28:af:3d:5f:61:82:67:ad:6b:88:b7:12: 3e:19:f3:c0:64:10:e7:81:2c:ac:61:47:70:43:27:e0:bd:a7: 02:6f:a3:57:54:b4:5a:d6:ec:de:87:b2:9f:c3:b9:15:98:97: b0:0a:ba:35:cb:2e:25:d9:97:b3:c8:87:96:68:33:d9:ae:35: 56:e1:a5:c6:51:c2:de:45:26:e9:95:47:15:e0:7d:c9:4c:19: 7b:5e:0d:6e:d2:4b:0e:e5:6d:57:1a:be:b6:67:e1:27:99:d8: 66:c6:95:a1:13:b4:da:a6:06:31:86:de:90:ee:e1:53:02:16: b7:e9:4d:00:0c:a0:77:13:72:e0:96:c9:69:f5:1b:91:95:4b: 7d:d0:ba:66:60:1a:a7:08:cc:8a:09:d8:ff:fd:d7:9d:37:78: 01:e1:e6:fa:5c:60:5a:5e:00:c4:38:0c:5b:71:e1:71:9f:11: 06:54:9f:bc:b2:e2:2b:53:ae:14:28:33:2e:8d:c6:2c:c0:d9: 92:6a:c4:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGIgVAzlcxRWf2k1k++V76bGAgDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjAxMjQxNDM1NTdaFw0yNjAxMjUxNzMwNTdaMDMxMTAvBgNV BAMTKDg0NTQ0REFFQjhENkUwQTZEQzQ3QjkxNjkyMkY3MkZGNUNFQUQ1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm0yjybKBf3Ao9YhMiLCFaHQ8j lodTpyVTT2sI2WhM/J5GRrNvvUSlsVdTUHn59qEMGyqL4F5MuNM6gZvHJ6FlzZ+N fnzmfr4kfYcO5yjKwcj+3NEuzJknSRwsFU6oS4JO+iIfjudar86xz6p4dnmfWPcA ih4iGFjtQ5ElISQXPrqIJrICfCKWs5J0vOOisYJ/ABRo9SWTQWy1PoM7ubeD+CPz tivxQbHyZAGM5TlP0U7XyY8JOtyu8ewa9Pt7Xamn1knWpmKBUZwhs8ZtWn2eWmWp 8Ae/niyQPaniaUJPRSNXOzBVL4Z2t/oeQpVHk2+5pvYG9QEMyfzaowqRRnBJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhFRNrrjW4KbcR7kWki9y/1zq1ZQwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6X+Ammd4YwO 3jU4WvK+5Co7QpVjFNw959R4ihnRJ6Qwto3RuaylMxnbBvcCqHDcu9Lo24i5gP7i fgl1KK89X2GCZ61riLcSPhnzwGQQ54EsrGFHcEMn4L2nAm+jV1S0Wtbs3oeyn8O5 FZiXsAq6NcsuJdmXs8iHlmgz2a41VuGlxlHC3kUm6ZVHFeB9yUwZe14NbtJLDuVt Vxq+tmfhJ5nYZsaVoRO02qYGMYbekO7hUwIWt+lNAAygdxNy4JbJafUbkZVLfdC6 ZmAapwjMignY//3XnTd4AeHm+lxgWl4AxDgMW3HhcZ8RBlSfvLLiK1OuFCgzLo3G LMDZkmrENA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:46 2026 by rpki-client