This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: rwO6mPnPsLhaAmvDUwGS+T9PacYUjBoUbxWMwKDzN4k= Subject key identifier: BA:05:B8:0F:26:E3:52:70:53:06:C1:9D:30:59:AC:90:31:39:66:02 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 3322DED809A67900895B707403BF7CD3E1A372F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:45:57 +0000 Manifest this update: Sun 25 Jan 2026 07:40:57 +0000 Manifest next update: Mon 26 Jan 2026 10:29:57 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: 5VyTqn9EZCaVyxGpXtilXdyL/IeNWtNe+7I2mCxqnr8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:22:de:d8:09:a6:79:00:89:5b:70:74:03:bf:7c:d3:e1:a3:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Jan 25 07:40:57 2026 GMT Not After : Jan 26 10:29:57 2026 GMT Subject: CN=BA05B80F26E352705306C19D3059AC9031396602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:09:07:03:87:a1:e9:38:68:63:57:91:58: fc:5e:42:7f:41:de:a8:8e:ea:48:cb:76:35:28:ad: 14:af:3d:08:84:a1:c3:5a:4e:60:62:41:54:82:c7: 43:2b:f3:58:8a:dd:a3:32:7d:c7:38:31:ed:00:e2: 3d:64:48:17:39:7c:0f:c5:d7:89:47:6f:36:8c:5f: fd:12:10:fb:9d:40:eb:b7:6a:1c:3d:8e:99:c8:2d: c9:a1:d8:ae:b5:8a:5c:84:8d:8b:8f:43:d7:3e:e2: f6:5b:34:2b:80:30:d8:6b:c1:7d:bb:44:34:60:58: a0:e3:4a:73:49:00:f5:5e:41:66:ba:8d:b3:62:e5: 8e:f8:9c:23:c1:de:67:75:e6:96:5e:98:6f:f5:f7: b8:b2:41:ed:ae:27:40:03:48:71:0a:e0:fc:b1:d3: ed:49:2e:83:c3:74:b8:e2:c8:a7:09:96:ec:12:89: c8:7a:a5:c2:8c:ca:5a:b2:75:f0:9f:3b:ad:6e:f4: 99:b2:33:ab:d5:11:91:0a:b2:dc:a2:57:98:a4:eb: a7:9c:2d:48:ef:cf:8d:51:95:e1:e9:32:43:49:fa: 61:85:b5:4b:ae:f5:a8:12:2f:b7:58:26:91:7e:48: 3e:dd:b6:37:c0:27:7f:37:30:07:80:6b:dc:d2:86: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:B8:0F:26:E3:52:70:53:06:C1:9D:30:59:AC:90:31:39:66:02 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d0:c1:7d:11:31:f2:e6:f8:ff:3b:64:6a:c5:11:1a:14:13: c3:5c:ad:50:f0:db:1c:ab:87:6f:fc:6c:e7:84:aa:dd:49:38: 41:b5:81:71:f1:53:4e:d4:8e:3f:87:47:6f:58:0e:90:61:5c: ee:8b:e6:12:f5:a8:e4:40:84:b3:97:c6:35:1c:5a:ef:b1:0c: 7e:93:b5:3b:02:79:cb:a5:42:34:04:e2:4f:c1:b2:a7:2b:2f: c5:49:7f:59:38:ce:8c:b2:4e:d1:84:5e:5c:3b:89:a6:8a:8b: 85:47:6b:1f:33:18:44:ca:5f:f2:76:c5:8c:5e:bc:3e:6c:40: 71:50:c1:0b:36:6e:a6:11:f1:4b:11:3b:0e:3d:40:e6:82:c4: 8d:33:05:d5:14:60:5e:2d:80:58:d8:be:05:96:49:1b:fa:3b: 4b:a6:43:39:29:a8:56:37:44:bd:73:bb:94:43:4c:61:4f:6e: 25:43:1f:7e:9c:30:13:25:9a:15:41:db:c5:1c:3b:10:e7:a5: 9e:ca:01:34:7f:ff:79:bd:e1:a1:9a:1c:eb:f4:f3:84:d9:01: 71:32:cd:6c:9d:60:ff:81:d3:db:ca:16:b6:08:f1:08:f5:46: 0a:1d:f0:ed:89:a1:48:7c:81:cd:4e:93:cb:51:06:51:8c:32: ed:e2:64:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMyLe2AmmeQCJW3B0A7980+GjcvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjAxMjUwNzQwNTdaFw0yNjAxMjYxMDI5NTdaMDMxMTAvBgNV BAMTKEJBMDVCODBGMjZFMzUyNzA1MzA2QzE5RDMwNTlBQzkwMzEzOTY2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rQkHA4eh6ThoY1eRWPxeQn9B 3qiO6kjLdjUorRSvPQiEocNaTmBiQVSCx0Mr81iK3aMyfcc4Me0A4j1kSBc5fA/F 14lHbzaMX/0SEPudQOu3ahw9jpnILcmh2K61ilyEjYuPQ9c+4vZbNCuAMNhrwX27 RDRgWKDjSnNJAPVeQWa6jbNi5Y74nCPB3md15pZemG/197iyQe2uJ0ADSHEK4Pyx 0+1JLoPDdLjiyKcJluwSich6pcKMylqydfCfO61u9JmyM6vVEZEKstyiV5ik66ec LUjvz41RleHpMkNJ+mGFtUuu9agSL7dYJpF+SD7dtjfAJ383MAeAa9zShoEvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUugW4DybjUnBTBsGdMFmskDE5ZgIwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdDBfREx8ub4 /ztkasURGhQTw1ytUPDbHKuHb/xs54Sq3Uk4QbWBcfFTTtSOP4dHb1gOkGFc7ovm EvWo5ECEs5fGNRxa77EMfpO1OwJ5y6VCNATiT8GypysvxUl/WTjOjLJO0YReXDuJ poqLhUdrHzMYRMpf8nbFjF68PmxAcVDBCzZuphHxSxE7Dj1A5oLEjTMF1RRgXi2A WNi+BZZJG/o7S6ZDOSmoVjdEvXO7lENMYU9uJUMffpwwEyWaFUHbxRw7EOelnsoB NH//eb3hoZoc6/TzhNkBcTLNbJ1g/4HT28oWtgjxCPVGCh3w7YmhSHyBzU6Ty1EG UYwy7eJkWg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:05 2026 by rpki-client