This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: xOiaXfTgv7dMSx3Q1ZGe/LihXjcphnyp3Tqw9LqCP9Q= Subject key identifier: 4A:60:5C:9F:EA:78:ED:F4:10:EC:53:44:19:9B:7E:C9:0E:4C:27:75 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 40BE14A3D04EDEB65BAF24856B3E11C76E8A4B7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:30:58 +0000 Manifest this update: Sun 25 Jan 2026 08:25:58 +0000 Manifest next update: Mon 26 Jan 2026 10:21:58 +0000 Files and hashes: 1: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 2: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: hKVExHpa/Y3FlQCoBMaaLPcmgQYVWSXmV44DIx0ulHc=) 3: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 4: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:be:14:a3:d0:4e:de:b6:5b:af:24:85:6b:3e:11:c7:6e:8a:4b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Jan 25 08:25:58 2026 GMT Not After : Jan 26 10:21:58 2026 GMT Subject: CN=4A605C9FEA78EDF410EC5344199B7EC90E4C2775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:c5:ea:19:1f:1c:7a:c8:38:da:5a:50:70: 60:b3:e4:4f:60:67:91:41:e1:a7:3f:92:6c:c5:6a: 18:67:7e:a5:93:1e:3f:4a:33:6a:72:59:55:5c:e0: d7:e1:cc:c2:ca:64:84:1e:9a:dc:66:d1:83:ec:86: 4e:ee:30:78:0d:cb:1d:88:d9:76:d8:5e:39:5c:7b: f9:04:d9:81:72:e6:88:d0:24:4a:db:43:0d:65:9e: 0a:f7:a5:94:c5:87:9a:4e:cd:4b:4a:bc:fb:08:53: 3f:a6:d4:b4:fd:ec:d3:8c:bc:ab:5d:9b:88:fd:5b: 8b:01:1f:7f:25:f4:12:58:34:8b:1f:42:f1:41:ce: 9b:9d:4c:42:f8:51:63:a3:9e:51:fb:f1:4e:6d:f7: 3c:17:ca:d3:84:0a:c7:1e:05:49:2e:d6:6e:60:05: f0:c4:b8:12:4f:ae:9e:f6:86:d4:c3:0e:92:23:b7: dc:79:94:ff:80:4e:64:87:b7:4d:10:c5:71:b8:9f: 75:c3:c4:3e:72:ad:a4:e0:54:f9:67:fb:91:1f:df: f1:40:d4:d8:a1:8d:4f:a4:39:d1:0a:e2:70:79:c6: f2:8b:4b:c1:ae:36:b5:da:92:33:4d:99:cc:8e:fd: 82:ac:7c:84:6c:3b:a7:5b:3e:c7:f7:7a:3a:92:f7: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:5C:9F:EA:78:ED:F4:10:EC:53:44:19:9B:7E:C9:0E:4C:27:75 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3d:67:4c:fb:21:d5:bc:70:00:86:75:75:76:a6:15:03:10: 86:00:13:4c:9a:99:ee:5b:a3:75:0c:ff:ab:a8:aa:10:c1:e5: 26:e9:35:74:a9:32:60:e3:8b:10:29:b2:a8:8e:9f:ad:d6:bc: 57:99:7b:4c:25:3f:9a:e8:91:b1:21:b4:eb:d8:68:79:87:77: 2e:85:36:c0:eb:93:53:08:8b:17:ab:e0:a8:31:ba:13:2c:00: 20:52:81:6a:30:87:be:13:0d:aa:53:6d:91:69:13:5c:65:a3: 4b:14:08:1a:19:ad:e9:ea:22:14:bc:9b:a7:06:ea:03:f6:42: 63:80:0d:92:ce:f2:5a:a7:91:0d:f7:0b:ee:08:68:c0:a0:3c: 3f:0a:8a:71:df:62:f4:f1:8d:b2:f8:2b:ae:08:bf:9d:af:60: 04:73:44:b0:c4:78:f3:a6:37:58:ac:a6:65:b3:f7:1f:fd:72: 49:8a:fd:a7:fe:48:7d:52:b9:61:e7:62:37:f4:0c:00:2e:bf: 51:d5:a0:6d:86:45:aa:0c:39:de:ba:69:cf:7d:c8:80:4b:50: 51:08:08:2a:fc:84:c4:76:dc:71:4c:d2:8f:2b:80:12:ef:05: 59:7f:a4:fb:b9:1d:a7:16:b4:07:4a:22:c9:29:2f:e8:22:1f: 60:06:fb:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQL4Uo9BO3rZbrySFaz4Rx26KS38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjAxMjUwODI1NThaFw0yNjAxMjYxMDIxNThaMDMxMTAvBgNV BAMTKDRBNjA1QzlGRUE3OEVERjQxMEVDNTM0NDE5OUI3RUM5MEU0QzI3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sMXqGR8cesg42lpQcGCz5E9g Z5FB4ac/kmzFahhnfqWTHj9KM2pyWVVc4NfhzMLKZIQemtxm0YPshk7uMHgNyx2I 2XbYXjlce/kE2YFy5ojQJErbQw1lngr3pZTFh5pOzUtKvPsIUz+m1LT97NOMvKtd m4j9W4sBH38l9BJYNIsfQvFBzpudTEL4UWOjnlH78U5t9zwXytOECsceBUku1m5g BfDEuBJPrp72htTDDpIjt9x5lP+ATmSHt00QxXG4n3XDxD5yraTgVPln+5Ef3/FA 1NihjU+kOdEK4nB5xvKLS8GuNrXakjNNmcyO/YKsfIRsO6dbPsf3ejqS9/jXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSmBcn+p47fQQ7FNEGZt+yQ5MJ3UwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj1nTPsh1bxw AIZ1dXamFQMQhgATTJqZ7lujdQz/q6iqEMHlJuk1dKkyYOOLECmyqI6frda8V5l7 TCU/muiRsSG069hoeYd3LoU2wOuTUwiLF6vgqDG6EywAIFKBajCHvhMNqlNtkWkT XGWjSxQIGhmt6eoiFLybpwbqA/ZCY4ANks7yWqeRDfcL7ghowKA8PwqKcd9i9PGN svgrrgi/na9gBHNEsMR486Y3WKymZbP3H/1ySYr9p/5IfVK5YediN/QMAC6/UdWg bYZFqgw53rppz33IgEtQUQgIKvyExHbccUzSjyuAEu8FWX+k+7kdpxa0B0oiySkv 6CIfYAb7eg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:28 2026 by rpki-client