This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: XgiPizTpf4UlCrA1Yo9iS2CLnbt5hxgZYwAl1/2nMe0= Subject key identifier: 76:5F:9A:59:88:5B:A5:F7:CE:44:5C:80:34:5E:4C:BE:37:E1:18:82 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 75F52539175F3BFD1183CD98E9AF4A44933F1CDD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:25:57 +0000 Manifest this update: Sat 24 Jan 2026 15:20:57 +0000 Manifest next update: Sun 25 Jan 2026 15:44:57 +0000 Files and hashes: 1: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 2: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: euvtn8fUgfmCwGEe1tu+LRHZwlRSzPErRoR7rYos+KQ=) 3: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 4: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 5: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 6: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 7: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f5:25:39:17:5f:3b:fd:11:83:cd:98:e9:af:4a:44:93:3f:1c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Jan 24 15:20:57 2026 GMT Not After : Jan 25 15:44:57 2026 GMT Subject: CN=765F9A59885BA5F7CE445C80345E4CBE37E11882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:14:1e:f3:26:69:3f:d0:57:4a:fa:e5:aa: cf:f7:da:d1:a5:a9:4a:27:9a:3c:aa:85:28:82:f9: f4:b6:eb:fc:a5:cd:b4:34:54:86:43:54:d4:c6:53: 21:b4:6d:1f:aa:4a:e1:15:60:af:c3:7f:16:1d:39: 95:67:cf:38:78:8f:86:96:2c:c3:75:9c:05:ca:e4: c6:54:4f:dd:14:c6:bd:b1:cf:48:a0:db:53:7c:21: a6:6c:da:3e:5e:2b:4d:bd:16:ad:96:21:e0:68:0d: d6:d7:f0:79:ea:e6:35:40:4a:fb:74:9c:08:88:a7: 9f:32:95:92:01:3e:6e:6a:54:38:9d:40:46:a7:88: 4a:18:fc:63:31:2c:30:ca:f4:87:8e:b2:ea:61:41: 3f:f9:d1:17:29:69:c5:16:61:7a:f3:d5:0f:b3:31: 2e:08:06:df:61:13:2f:79:e5:da:5f:34:21:03:56: 30:ab:4a:12:e5:7e:ab:37:46:65:76:ea:52:83:8c: a6:44:bc:eb:6b:ae:6d:35:f8:35:ff:2e:52:59:41: 0e:ab:c6:1e:37:18:74:dc:25:92:cb:e4:b0:57:31: be:ff:dd:1e:8c:42:b1:eb:04:d4:f8:ab:36:fc:08: 56:29:0a:54:5c:1d:d7:5a:a8:f1:b7:e2:72:fd:f0: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:9A:59:88:5B:A5:F7:CE:44:5C:80:34:5E:4C:BE:37:E1:18:82 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e6:91:cf:3b:36:b8:5f:0b:8e:d6:9d:a5:6b:c8:20:ae:16: 69:8d:51:78:57:b4:c4:dc:ae:d2:56:85:6b:73:7f:3f:23:d1: b9:2d:9e:e6:67:ca:88:55:90:56:c3:15:1f:f7:8a:1f:d5:3b: 98:d4:96:b7:f7:01:aa:c6:cf:f6:09:1f:29:1b:d5:02:5c:79: 2f:d3:3b:8f:07:39:3d:3f:0c:82:fe:f6:4d:92:8d:ba:02:52: 3f:8f:8a:a0:39:06:32:58:bd:9c:bc:98:73:0f:05:84:a1:59: 41:7f:75:76:e2:7d:7b:c4:9e:6c:ac:53:6f:6d:36:06:e3:da: d3:66:7f:84:e0:45:e2:36:a5:b9:26:57:80:9d:72:49:1c:da: 5e:42:53:33:db:ee:1b:69:f6:7a:92:fa:ee:24:c1:0d:ee:b3: b4:f5:3f:6a:9c:46:dd:47:71:5b:a5:d0:3a:2c:93:0f:b4:4e: 7f:9f:cc:21:f0:78:74:ae:56:d8:35:9a:d2:24:73:7f:d5:01: 58:63:3f:5f:d5:d9:5e:9d:fb:ab:59:f1:1b:29:dd:18:e2:4f: f9:ef:bc:ab:74:60:bd:80:ae:ea:b4:09:da:5d:ae:37:ff:20: 2a:06:51:52:33:3d:09:53:79:cb:17:16:c6:75:c6:98:96:47: 59:85:41:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdfUlORdfO/0Rg82Y6a9KRJM/HN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjAxMjQxNTIwNTdaFw0yNjAxMjUxNTQ0NTdaMDMxMTAvBgNV BAMTKDc2NUY5QTU5ODg1QkE1RjdDRTQ0NUM4MDM0NUU0Q0JFMzdFMTE4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47xQe8yZpP9BXSvrlqs/32tGl qUonmjyqhSiC+fS26/ylzbQ0VIZDVNTGUyG0bR+qSuEVYK/DfxYdOZVnzzh4j4aW LMN1nAXK5MZUT90Uxr2xz0ig21N8IaZs2j5eK029Fq2WIeBoDdbX8Hnq5jVASvt0 nAiIp58ylZIBPm5qVDidQEaniEoY/GMxLDDK9IeOsuphQT/50RcpacUWYXrz1Q+z MS4IBt9hEy955dpfNCEDVjCrShLlfqs3RmV26lKDjKZEvOtrrm01+DX/LlJZQQ6r xh43GHTcJZLL5LBXMb7/3R6MQrHrBNT4qzb8CFYpClRcHddaqPG34nL98IYPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdl+aWYhbpffORFyANF5MvjfhGIIwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuaRzzs2uF8L jtadpWvIIK4WaY1ReFe0xNyu0laFa3N/PyPRuS2e5mfKiFWQVsMVH/eKH9U7mNSW t/cBqsbP9gkfKRvVAlx5L9M7jwc5PT8Mgv72TZKNugJSP4+KoDkGMli9nLyYcw8F hKFZQX91duJ9e8SebKxTb202BuPa02Z/hOBF4jaluSZXgJ1ySRzaXkJTM9vuG2n2 epL67iTBDe6ztPU/apxG3UdxW6XQOiyTD7ROf5/MIfB4dK5W2DWa0iRzf9UBWGM/ X9XZXp37q1nxGyndGOJP+e+8q3RgvYCu6rQJ2l2uN/8gKgZRUjM9CVN5yxcWxnXG mJZHWYVBRg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:37:27 2026 by rpki-client