This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: InfQK+4KI66zWu6n1vOhsLctep6y8meD+Y0YnVFrG0Y= Subject key identifier: 10:D5:B9:2F:80:4C:F1:0A:ED:FE:28:C1:BF:01:D1:C0:F1:0D:3E:A3 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 7337E7CE1778A6CFE834086C0763D2FD090DC01F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:35:57 +0000 Manifest this update: Sat 24 Jan 2026 15:30:57 +0000 Manifest next update: Sun 25 Jan 2026 19:15:57 +0000 Files and hashes: 1: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: lHHpPkgZkNPwgjh5D9B07llIlSgEmJZtBeRGa/SThfU=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 3: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:37:e7:ce:17:78:a6:cf:e8:34:08:6c:07:63:d2:fd:09:0d:c0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jan 24 15:30:57 2026 GMT Not After : Jan 25 19:15:57 2026 GMT Subject: CN=10D5B92F804CF10AEDFE28C1BF01D1C0F10D3EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:f7:32:29:ec:d4:f0:b7:73:67:fd:c4:2a: 14:4d:c5:f7:08:4f:d7:0f:f1:ca:a0:08:e4:3e:e6: 49:5b:4b:f3:25:01:27:4a:39:a9:13:00:23:3f:6a: 7a:41:f5:12:14:af:18:aa:85:87:67:62:95:70:72: 45:1b:9e:29:0f:32:d6:21:54:8d:e5:3a:eb:46:a4: 04:96:82:0b:fc:57:0e:ee:8d:2f:d8:1b:57:10:e4: d7:0a:74:f7:0a:2f:5a:d4:5e:45:47:87:6d:65:f0: e5:83:c0:fe:6e:ca:98:4f:b1:15:29:c3:68:ca:b5: 76:c5:1e:53:bd:e6:b1:08:fd:1a:b8:c2:fd:aa:a5: ff:bf:ca:0a:76:03:fc:80:56:2d:d5:83:d3:fc:39: 37:76:19:94:93:c8:ec:19:65:aa:3b:fa:9c:93:67: 90:a9:6a:e1:95:49:63:03:f2:1e:4c:7d:6c:0e:bc: 6b:c2:fe:3f:ee:e5:0d:c4:ac:b7:3c:6e:59:9f:51: 1f:cc:e0:a9:ba:5f:74:e9:92:55:7a:b2:4f:9d:19: 1c:b4:25:db:63:26:65:99:d9:5f:8e:89:da:8a:14: d7:eb:6f:97:10:f1:e5:b9:58:cf:31:5e:d8:ef:be: c9:2b:ee:5a:a3:ef:3d:16:28:fa:18:4a:5c:3a:49: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:B9:2F:80:4C:F1:0A:ED:FE:28:C1:BF:01:D1:C0:F1:0D:3E:A3 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:72:d4:80:6a:fb:64:ac:7d:64:3f:2d:99:44:ea:08:02:d1: 6b:9c:2d:7a:74:cf:7e:8d:95:62:c0:f3:ba:32:1b:a6:d9:42: 9b:b8:1e:21:8e:55:98:1d:0a:af:ff:81:af:c9:ff:2d:0d:93: cb:3c:fc:70:64:5d:9a:47:ef:8d:fd:23:6d:75:77:cd:9a:fe: e8:fe:ef:20:a6:3d:8e:bb:bd:ca:21:e0:eb:5c:02:5c:dd:59: f3:91:e5:9b:31:fb:69:42:20:d8:be:d7:64:40:04:f3:7b:29: 4c:bb:ce:2a:1c:76:1d:1f:8e:eb:e7:f6:f4:35:d3:7d:aa:ff: fe:9a:4e:b5:19:94:2d:d0:bb:76:29:df:c8:15:f4:fa:14:3c: 89:40:a9:7d:ee:70:f1:40:6b:da:70:28:98:d0:16:8b:bd:2c: 98:be:6b:13:fb:d1:fa:8a:37:c7:47:88:cf:d7:21:2b:78:65: d2:6d:1c:e4:be:55:3d:10:ce:cd:0d:f8:5e:78:72:ad:10:58: bb:e8:a1:21:6a:4c:ec:7c:c8:3c:e8:39:f6:04:11:70:0c:fb: ea:5c:7d:72:92:69:0c:ca:2b:5e:bd:88:78:81:d1:5c:c6:51: 7c:47:e9:f9:40:3c:b7:3c:9a:92:88:3e:00:02:18:77:08:b3: 48:2d:76:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUczfnzhd4ps/oNAhsB2PS/QkNwB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjAxMjQxNTMwNTdaFw0yNjAxMjUxOTE1NTdaMDMxMTAvBgNV BAMTKDEwRDVCOTJGODA0Q0YxMEFFREZFMjhDMUJGMDFEMUMwRjEwRDNFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLvcyKezU8LdzZ/3EKhRNxfcI T9cP8cqgCOQ+5klbS/MlASdKOakTACM/anpB9RIUrxiqhYdnYpVwckUbnikPMtYh VI3lOutGpASWggv8Vw7ujS/YG1cQ5NcKdPcKL1rUXkVHh21l8OWDwP5uyphPsRUp w2jKtXbFHlO95rEI/Rq4wv2qpf+/ygp2A/yAVi3Vg9P8OTd2GZSTyOwZZao7+pyT Z5CpauGVSWMD8h5MfWwOvGvC/j/u5Q3ErLc8blmfUR/M4Km6X3TpklV6sk+dGRy0 JdtjJmWZ2V+OidqKFNfrb5cQ8eW5WM8xXtjvvskr7lqj7z0WKPoYSlw6SThDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUENW5L4BM8Qrt/ijBvwHRwPENPqMwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3LUgGr7ZKx9 ZD8tmUTqCALRa5wtenTPfo2VYsDzujIbptlCm7geIY5VmB0Kr/+Br8n/LQ2Tyzz8 cGRdmkfvjf0jbXV3zZr+6P7vIKY9jru9yiHg61wCXN1Z85HlmzH7aUIg2L7XZEAE 83spTLvOKhx2HR+O6+f29DXTfar//ppOtRmULdC7dinfyBX0+hQ8iUCpfe5w8UBr 2nAomNAWi70smL5rE/vR+oo3x0eIz9chK3hl0m0c5L5VPRDOzQ34XnhyrRBYu+ih IWpM7HzIPOg59gQRcAz76lx9cpJpDMorXr2IeIHRXMZRfEfp+UA8tzyakog+AAIY dwizSC12nw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:56 2026 by rpki-client