This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: mVbschzxPnuzvI/wz2z/8quFxX7Xq6SfSh2M+kRhu3U= Subject key identifier: FF:D5:B3:34:07:E4:B9:B7:F5:52:29:E8:E4:5E:96:41:33:87:24:09 Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 3CD36CEDD91AC2DCCFC2EA37A8E4AC2EBFEED337 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:25:57 +0000 Manifest this update: Sun 25 Jan 2026 03:20:57 +0000 Manifest next update: Mon 26 Jan 2026 03:51:57 +0000 Files and hashes: 1: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 2: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 3: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: 6PV66VEKN4hwd1+iIGi8PGKdAQYgoki4zqA1vDs25FE=) 4: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d3:6c:ed:d9:1a:c2:dc:cf:c2:ea:37:a8:e4:ac:2e:bf:ee:d3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Jan 25 03:20:57 2026 GMT Not After : Jan 26 03:51:57 2026 GMT Subject: CN=FFD5B33407E4B9B7F55229E8E45E964133872409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:89:ce:e3:99:65:0e:83:6f:3d:b2:47:fe: 9c:a4:56:85:1a:0b:5d:67:47:b0:23:1f:b8:38:55: 0b:d5:1e:5a:52:08:d7:80:6f:c9:f5:ce:40:ce:ac: d4:b4:c4:6e:32:16:4d:b3:92:d7:c0:8e:e4:9a:0f: ed:9d:7b:3c:7f:b7:06:c9:46:9b:a2:24:a5:0f:cc: 8f:87:a4:2a:81:53:36:3a:84:48:3e:76:11:c6:d2: dc:c2:b3:ec:cc:8e:15:9a:8b:f8:98:78:4b:27:fd: 23:63:f7:f5:cb:bf:37:bd:71:3c:01:5f:82:e7:87: c9:7b:5c:57:5b:a8:55:2d:18:2b:e1:92:9c:5f:78: 12:25:54:d0:34:cd:30:b6:2c:ff:42:fb:3a:f5:35: d5:f9:be:0a:41:13:60:e4:c4:aa:92:a5:ab:ba:63: 8b:60:e1:83:cd:74:8c:1b:d9:6b:9c:51:56:bb:e3: 3a:d9:b9:aa:71:7d:f8:41:92:63:49:23:03:45:9a: 6b:75:b8:1a:e3:08:f9:aa:15:5a:c0:e8:2c:71:67: c8:dd:6e:10:32:7f:f7:22:46:ce:31:ae:f8:fa:ca: 9b:c3:68:7b:f6:c7:bc:52:3d:44:ee:33:3f:6c:00: cc:e0:33:8d:c5:94:02:91:18:7e:3b:f5:66:9f:08: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D5:B3:34:07:E4:B9:B7:F5:52:29:E8:E4:5E:96:41:33:87:24:09 X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1d:0e:1f:1d:65:1b:04:62:62:f4:b2:06:ab:7b:4d:39:30: cd:c0:ee:56:7b:90:c9:90:31:d1:1a:1a:89:cf:a4:2b:7f:fa: aa:94:ba:3e:e6:48:86:f5:cc:b7:a9:3b:25:e0:be:4c:d0:9a: 7c:12:7e:42:bb:b6:bf:5e:6b:19:98:b7:43:58:97:2f:c5:9c: 4e:b2:55:78:6d:e5:6b:3b:c2:9c:03:c6:81:c9:21:e8:cd:48: ac:c7:ba:ae:0e:bf:60:f2:5c:63:d4:36:d2:04:56:70:3c:d1: 89:5b:77:b5:6b:e0:f1:d2:c6:07:99:5a:00:f8:5f:b3:3b:ec: de:5c:c0:57:d5:3a:6d:97:a1:91:a6:90:ae:e8:42:f0:48:4e: 97:71:a9:78:f1:a3:06:12:3a:dc:cb:f4:69:4f:1c:b7:a8:6e: c7:10:4d:0f:17:0f:3c:16:19:11:2d:d7:14:09:c6:fb:b1:db: a1:3d:df:fd:9e:57:64:ca:e1:7b:8a:9f:bb:56:41:0c:6f:5b: b9:67:38:40:fd:22:4e:4b:7b:02:69:89:d6:b1:06:e2:e3:df: ff:e8:38:89:c2:09:19:8c:4a:d6:4d:53:de:85:8d:bd:7f:e8: 5f:3e:ec:3e:65:7b:24:b6:d6:96:fd:10:fc:3a:d9:08:1e:7a: bf:f9:6e:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPNNs7dkawtzPwuo3qOSsLr/u0zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjAxMjUwMzIwNTdaFw0yNjAxMjYwMzUxNTdaMDMxMTAvBgNV BAMTKEZGRDVCMzM0MDdFNEI5QjdGNTUyMjlFOEU0NUU5NjQxMzM4NzI0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlUonO45llDoNvPbJH/pykVoUa C11nR7AjH7g4VQvVHlpSCNeAb8n1zkDOrNS0xG4yFk2zktfAjuSaD+2dezx/twbJ RpuiJKUPzI+HpCqBUzY6hEg+dhHG0tzCs+zMjhWai/iYeEsn/SNj9/XLvze9cTwB X4Lnh8l7XFdbqFUtGCvhkpxfeBIlVNA0zTC2LP9C+zr1NdX5vgpBE2DkxKqSpau6 Y4tg4YPNdIwb2WucUVa74zrZuapxffhBkmNJIwNFmmt1uBrjCPmqFVrA6CxxZ8jd bhAyf/ciRs4xrvj6ypvDaHv2x7xSPUTuMz9sAMzgM43FlAKRGH479WafCG8bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/9WzNAfkubf1Uino5F6WQTOHJAkwHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh0OHx1lGwRi YvSyBqt7TTkwzcDuVnuQyZAx0Roaic+kK3/6qpS6PuZIhvXMt6k7JeC+TNCafBJ+ Qru2v15rGZi3Q1iXL8WcTrJVeG3lazvCnAPGgckh6M1IrMe6rg6/YPJcY9Q20gRW cDzRiVt3tWvg8dLGB5laAPhfszvs3lzAV9U6bZehkaaQruhC8EhOl3GpePGjBhI6 3Mv0aU8ct6huxxBNDxcPPBYZES3XFAnG+7HboT3f/Z5XZMrhe4qfu1ZBDG9buWc4 QP0iTkt7AmmJ1rEG4uPf/+g4icIJGYxK1k1T3oWNvX/oXz7sPmV7JLbWlv0Q/DrZ CB56v/lu/w== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:51 2026 by rpki-client