This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: 8pTkZ/vk4KYK+RpoIVHNglpLqAyPZXCOQ5+zuD2by38= Subject key identifier: 6C:AF:39:7C:E0:E3:98:FD:84:4F:7C:84:22:9A:D4:70:E9:6D:16:30 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 504BF8BFFE9E34564C7D3336447930737CDE59D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 16:40:57 +0000 Manifest this update: Sat 24 Jan 2026 16:35:57 +0000 Manifest next update: Sun 25 Jan 2026 20:38:57 +0000 Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 2: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 3: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 4: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: Xj/p2TsTK+i44UG9enbkzXZXntYYRH8kApIBsffB8jE=) 5: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 6: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 7: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 8: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4b:f8:bf:fe:9e:34:56:4c:7d:33:36:44:79:30:73:7c:de:59:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jan 24 16:35:57 2026 GMT Not After : Jan 25 20:38:57 2026 GMT Subject: CN=6CAF397CE0E398FD844F7C84229AD470E96D1630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:e9:65:af:a5:32:4b:a4:28:c4:ac:c8:8d: 3e:40:43:d4:be:a9:1c:8e:53:b4:58:c4:f4:6f:70: 2e:2e:31:2b:cc:45:a4:a9:93:82:e3:62:17:73:8f: df:60:6b:d2:4e:54:3b:2a:84:5c:3a:ea:05:a5:02: 0c:6c:6e:aa:d3:f0:d4:b8:61:d8:c5:3f:38:21:72: 10:e4:84:60:74:0c:34:00:3c:f0:cf:a1:0a:b2:b8: 44:ab:00:b8:e4:38:27:e4:36:12:33:36:7a:38:b1: e1:0f:76:bb:8e:03:3c:03:f2:db:c7:0a:8f:14:57: 34:e4:b4:0b:ca:2e:16:05:b4:f0:a7:35:ce:d0:4d: 1a:79:20:ee:de:74:3e:df:01:fc:4f:15:12:8b:53: 42:53:1f:92:d9:4d:ee:81:60:7c:ac:8a:f4:4b:5e: 5f:d1:02:dc:13:c0:59:bc:e2:7d:61:62:5a:c3:36: 22:0c:3d:ff:64:4e:37:57:47:4b:d4:1e:49:f8:6f: 97:17:61:82:87:22:bb:15:83:bf:35:a2:f4:03:3a: 3e:89:00:ba:51:1c:55:f6:7c:19:18:43:37:d6:ef: 3d:83:5c:9d:f9:b3:15:44:04:1c:81:43:dc:43:0b: 0b:88:12:47:04:94:18:5a:5d:bb:8a:19:8e:7a:68: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AF:39:7C:E0:E3:98:FD:84:4F:7C:84:22:9A:D4:70:E9:6D:16:30 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5c:05:ae:bf:24:38:70:d9:7c:7f:e4:26:01:7c:cb:bd:dc: aa:70:7f:29:f5:ee:4a:98:7a:cf:43:20:5a:47:3f:6c:0b:d4: 51:b5:e5:1b:33:08:bc:65:85:51:fb:89:54:65:94:f6:d8:27: 93:a1:c2:90:44:59:d4:ab:b0:d6:96:19:b0:24:d1:06:b1:63: 47:82:04:3c:ce:a7:b4:e8:6d:26:80:d5:c7:f1:bd:87:35:fb: 76:28:97:d3:9c:df:67:1d:68:e4:1f:0a:57:b4:7f:2b:18:2c: 03:dd:54:72:a9:01:79:17:9d:cb:ea:ee:99:9c:16:31:70:6f: 39:d4:9e:cd:93:f6:7b:55:29:85:3b:d5:f1:27:df:27:7b:80: 98:1b:3f:fe:14:e4:d4:25:8a:26:37:5e:14:9c:21:55:09:bd: 2d:6b:9f:8f:a6:1c:5c:5a:77:a0:11:bc:9b:f2:44:b5:25:90: 6e:94:f5:f8:e9:58:56:5a:38:12:b1:e5:66:cd:91:a0:81:cd: 3d:d9:a2:02:bb:17:8c:fa:9a:5b:eb:78:a8:fc:7b:cb:8b:54: 67:4f:2f:c8:91:fc:da:9f:f0:6a:80:bf:79:93:98:54:2d:f1: 15:9b:ce:6e:ee:3d:29:47:a4:ae:eb:88:13:42:03:66:2b:01: de:9f:e2:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUEv4v/6eNFZMfTM2RHkwc3zeWdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAxMjQxNjM1NTdaFw0yNjAxMjUyMDM4NTdaMDMxMTAvBgNV BAMTKDZDQUYzOTdDRTBFMzk4RkQ4NDRGN0M4NDIyOUFENDcwRTk2RDE2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlellr6UyS6QoxKzIjT5AQ9S+ qRyOU7RYxPRvcC4uMSvMRaSpk4LjYhdzj99ga9JOVDsqhFw66gWlAgxsbqrT8NS4 YdjFPzghchDkhGB0DDQAPPDPoQqyuESrALjkOCfkNhIzNno4seEPdruOAzwD8tvH Co8UVzTktAvKLhYFtPCnNc7QTRp5IO7edD7fAfxPFRKLU0JTH5LZTe6BYHysivRL Xl/RAtwTwFm84n1hYlrDNiIMPf9kTjdXR0vUHkn4b5cXYYKHIrsVg781ovQDOj6J ALpRHFX2fBkYQzfW7z2DXJ35sxVEBByBQ9xDCwuIEkcElBhaXbuKGY56aMFnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbK85fODjmP2ET3yEIprUcOltFjAwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1wFrr8kOHDZ fH/kJgF8y73cqnB/KfXuSph6z0MgWkc/bAvUUbXlGzMIvGWFUfuJVGWU9tgnk6HC kERZ1Kuw1pYZsCTRBrFjR4IEPM6ntOhtJoDVx/G9hzX7diiX05zfZx1o5B8KV7R/ KxgsA91UcqkBeRedy+rumZwWMXBvOdSezZP2e1UphTvV8SffJ3uAmBs//hTk1CWK JjdeFJwhVQm9LWufj6YcXFp3oBG8m/JEtSWQbpT1+OlYVlo4ErHlZs2RoIHNPdmi ArsXjPqaW+t4qPx7y4tUZ08vyJH82p/waoC/eZOYVC3xFZvObu49KUekruuIE0ID ZisB3p/iew== -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:27 2026 by rpki-client