This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: IzPdm8QbmV1BdwuEYO4VvNoFZy29NrRP9j1P9k5LZGE= Subject key identifier: F7:2A:C9:0B:F1:10:F9:C2:32:86:74:20:FC:4D:EB:D5:8B:60:4C:8F Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 3564CA7A39BED8563FB40679A4034BEC60E12D8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 04:05:57 +0000 Manifest this update: Sun 25 Jan 2026 04:00:57 +0000 Manifest next update: Mon 26 Jan 2026 04:28:57 +0000 Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: Qh/36c+TVBqTHoBAR7DHdciWnfTG3L35BqHBYuvzQD4=) 2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:ca:7a:39:be:d8:56:3f:b4:06:79:a4:03:4b:ec:60:e1:2d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Jan 25 04:00:57 2026 GMT Not After : Jan 26 04:28:57 2026 GMT Subject: CN=F72AC90BF110F9C232867420FC4DEBD58B604C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:9c:24:b4:47:26:57:73:41:43:69:33:99: fb:a2:45:3b:d8:40:a8:9e:47:c4:4a:a0:ca:07:43: 52:59:0a:1d:4d:ea:ab:b4:17:82:ff:8a:3f:37:a4: 00:18:42:1e:c6:70:a1:cc:c3:b1:27:63:73:1c:a5: e1:2d:02:3a:3c:41:0e:b9:ca:b3:d7:0a:ee:43:e4: 47:61:bd:d5:4c:ca:a3:11:5f:2c:22:90:ba:e5:14: 20:58:81:ea:fa:cd:f8:fc:6a:31:53:e6:1c:04:6d: fa:11:30:71:94:17:80:d9:cf:f7:08:73:8f:fa:ae: 2e:d9:5e:5a:1c:d0:b1:9e:08:19:49:dd:b8:69:1e: 54:a6:55:44:62:27:79:11:06:bc:14:c6:0f:64:2b: d7:d9:1d:20:7b:1c:bf:e7:ce:3a:5f:52:f0:ca:b7: 34:37:b5:26:5d:f3:24:14:ac:0e:b0:3c:98:93:79: 54:55:5c:91:f7:dc:db:f6:f4:75:5b:e4:9e:94:28: 67:a2:9b:30:5e:7d:24:71:a2:29:e0:84:8e:2e:62: cc:b2:2a:ac:21:39:6a:ea:63:89:8c:ee:ec:03:09: 0b:dd:7b:86:3f:5d:9a:84:b9:24:d7:b4:85:1c:59: b2:db:27:d5:58:78:6c:12:e0:62:38:bd:dc:ef:82: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2A:C9:0B:F1:10:F9:C2:32:86:74:20:FC:4D:EB:D5:8B:60:4C:8F X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:67:26:87:a1:bf:69:30:e3:bc:7c:2e:d0:1a:39:34:ee:97: d7:4d:fe:c8:4e:0e:bc:b7:36:6e:0f:21:55:7d:2e:7d:52:fa: f9:b7:ef:32:09:73:88:6e:92:17:e2:22:e4:17:f8:a6:69:ff: cc:1a:71:9a:39:ff:bb:2f:90:1c:83:18:9f:28:af:f0:cf:7a: 72:8e:30:5f:e5:a4:48:9e:af:c0:b3:07:56:ce:57:ad:d5:79: 05:38:c0:32:f9:f5:03:39:9a:de:06:90:ab:77:2a:a2:8f:13: 17:bf:1f:a6:0a:31:5b:2f:52:41:5e:fc:4b:6f:60:f5:7d:4e: fe:b7:50:52:e6:94:df:90:96:2c:be:58:69:6f:45:f1:19:72: e9:77:b0:40:45:a3:76:72:c5:d4:97:40:a2:3e:06:fd:c3:35: 83:0d:1a:b8:de:36:8e:19:46:56:1d:85:46:7c:fa:d3:48:2e: 92:8b:ec:14:17:b7:86:55:9d:f3:97:0c:84:c4:5f:39:dd:94: 25:cf:98:02:72:97:c3:7f:2a:e9:9d:f0:5f:35:0b:8d:17:c5: 54:57:e9:af:21:da:e2:c2:2d:47:bc:bc:f9:e1:98:be:c1:f5: 3b:ba:62:3e:b8:d7:ff:1a:aa:86:bc:db:13:3e:f2:f9:48:64: 27:c8:d5:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNWTKejm+2FY/tAZ5pANL7GDhLYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjAxMjUwNDAwNTdaFw0yNjAxMjYwNDI4NTdaMDMxMTAvBgNV BAMTKEY3MkFDOTBCRjExMEY5QzIzMjg2NzQyMEZDNERFQkQ1OEI2MDRDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vZwktEcmV3NBQ2kzmfuiRTvY QKieR8RKoMoHQ1JZCh1N6qu0F4L/ij83pAAYQh7GcKHMw7EnY3McpeEtAjo8QQ65 yrPXCu5D5EdhvdVMyqMRXywikLrlFCBYger6zfj8ajFT5hwEbfoRMHGUF4DZz/cI c4/6ri7ZXloc0LGeCBlJ3bhpHlSmVURiJ3kRBrwUxg9kK9fZHSB7HL/nzjpfUvDK tzQ3tSZd8yQUrA6wPJiTeVRVXJH33Nv29HVb5J6UKGeimzBefSRxoinghI4uYsyy KqwhOWrqY4mM7uwDCQvde4Y/XZqEuSTXtIUcWbLbJ9VYeGwS4GI4vdzvgge5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9yrJC/EQ+cIyhnQg/E3r1YtgTI8wHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmcmh6G/aTDj vHwu0Bo5NO6X103+yE4OvLc2bg8hVX0ufVL6+bfvMglziG6SF+Ii5Bf4pmn/zBpx mjn/uy+QHIMYnyiv8M96co4wX+WkSJ6vwLMHVs5XrdV5BTjAMvn1Azma3gaQq3cq oo8TF78fpgoxWy9SQV78S29g9X1O/rdQUuaU35CWLL5YaW9F8Rly6XewQEWjdnLF 1JdAoj4G/cM1gw0auN42jhlGVh2FRnz600gukovsFBe3hlWd85cMhMRfOd2UJc+Y AnKXw38q6Z3wXzULjRfFVFfpryHa4sItR7y8+eGYvsH1O7piPrjX/xqqhrzbEz7y +UhkJ8jVIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:38 2026 by rpki-client