This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: ceLg5tzIuFSMXY1m41euNMJ2NWTz60Bz0VNRZ/lind0= Subject key identifier: 6E:89:70:86:D3:ED:61:7B:C1:39:EB:0F:4D:03:74:B9:A2:4A:F6:EF Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 40649FABB3ECBC1C6932BE42BE8EB3A9A9B6D0E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:56:02 +0000 Manifest this update: Sun 25 Jan 2026 10:51:02 +0000 Manifest next update: Mon 26 Jan 2026 13:08:02 +0000 Files and hashes: 1: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 2: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: nJdT8SQ7fvXIpTQPCnluwAZaWJFhHjokKF1xPBBAOpw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:64:9f:ab:b3:ec:bc:1c:69:32:be:42:be:8e:b3:a9:a9:b6:d0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Jan 25 10:51:02 2026 GMT Not After : Jan 26 13:08:02 2026 GMT Subject: CN=6E897086D3ED617BC139EB0F4D0374B9A24AF6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:b4:39:11:f3:53:f8:9e:6c:22:bb:82:de: 46:b6:1d:2d:e7:04:a4:95:d9:e4:5e:4a:c5:c8:c3: ae:31:8e:aa:c1:85:91:c5:5a:6a:15:f9:c8:00:5a: ea:f0:47:21:78:e3:93:b5:59:11:22:39:16:7b:5f: 49:12:90:98:f5:e6:12:44:b8:be:27:5d:45:e6:3a: 8c:fd:19:9e:d0:5a:1f:b0:7d:9d:40:3a:6c:2f:b1: f2:e1:9a:a6:89:7d:83:d3:e9:a3:03:c2:b9:6e:ce: 59:b2:d1:a4:be:57:05:27:32:62:92:1d:89:0d:63: 64:b9:76:0f:91:d4:58:1d:af:0e:23:79:06:8c:93: 53:22:6b:68:65:78:75:61:d4:48:58:99:5c:68:43: 64:30:15:03:41:a6:2d:ef:c6:c7:46:38:ff:4c:d6: e4:07:ef:79:6e:fa:d5:ce:29:1b:80:03:75:28:5d: a5:62:e9:38:3d:4b:a0:42:75:b1:f1:b6:1b:ca:2d: fb:3a:1c:24:55:7a:0b:b1:6c:13:14:d0:76:82:5b: 68:cb:72:88:62:64:46:3c:e9:df:7e:53:39:dc:c5: 30:df:62:1a:a4:f0:53:26:3b:b4:61:ee:e0:d5:2c: bf:ec:b5:cf:0b:6a:03:58:73:08:c2:c7:4c:b5:c1: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:70:86:D3:ED:61:7B:C1:39:EB:0F:4D:03:74:B9:A2:4A:F6:EF X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:c6:e3:a0:96:fb:a8:9c:ba:e0:c9:3d:c5:7d:13:70:df: 34:ee:a5:be:69:a0:d4:74:ad:fa:9d:46:d3:47:65:fb:2c:29: cc:54:ae:33:39:78:97:6e:6c:66:5c:3c:b7:cc:6b:79:6b:5b: 9b:af:d9:3c:26:9e:e4:31:bc:72:b8:5d:21:8b:16:bd:2a:5b: 2d:c9:59:8a:69:44:52:a2:05:0c:34:88:01:3b:ec:09:82:77: 81:c6:82:ff:e1:8f:74:9f:21:4a:ad:f8:bc:66:d1:ec:0e:33: 24:cc:59:d1:c8:0f:68:c6:36:8d:93:90:d2:94:90:15:6d:ad: 2a:0b:c8:d6:17:72:16:9e:f9:c3:33:24:23:1f:23:66:86:15: 3d:56:6d:1f:d6:b0:99:86:14:8a:ad:29:bc:78:a0:2f:7d:dc: 19:1e:47:fb:f9:d9:35:4d:b3:a4:eb:4e:df:e7:67:47:3c:d9: ad:68:cd:b5:79:08:75:3a:52:14:3b:22:37:ac:44:7d:2b:7a: 08:a6:22:84:f2:57:28:80:89:b9:e4:66:66:7d:79:08:76:0c: 34:2a:e1:4b:3a:20:99:f4:cf:d9:c5:71:32:34:58:65:29:b8: 57:10:c9:d3:96:9c:ae:f6:c5:19:e6:bb:f2:96:e3:60:c2:d1: 0d:53:be:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQGSfq7PsvBxpMr5Cvo6zqam20OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjAxMjUxMDUxMDJaFw0yNjAxMjYxMzA4MDJaMDMxMTAvBgNV BAMTKDZFODk3MDg2RDNFRDYxN0JDMTM5RUIwRjREMDM3NEI5QTI0QUY2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBubQ5EfNT+J5sIruC3ka2HS3n BKSV2eReSsXIw64xjqrBhZHFWmoV+cgAWurwRyF445O1WREiORZ7X0kSkJj15hJE uL4nXUXmOoz9GZ7QWh+wfZ1AOmwvsfLhmqaJfYPT6aMDwrluzlmy0aS+VwUnMmKS HYkNY2S5dg+R1Fgdrw4jeQaMk1Mia2hleHVh1EhYmVxoQ2QwFQNBpi3vxsdGOP9M 1uQH73lu+tXOKRuAA3UoXaVi6Tg9S6BCdbHxthvKLfs6HCRVeguxbBMU0HaCW2jL cohiZEY86d9+UzncxTDfYhqk8FMmO7Rh7uDVLL/stc8LagNYcwjCx0y1wdavAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbolwhtPtYXvBOesPTQN0uaJK9u8wHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsbG46CW+6ic uuDJPcV9E3DfNO6lvmmg1HSt+p1G00dl+ywpzFSuMzl4l25sZlw8t8xreWtbm6/Z PCae5DG8crhdIYsWvSpbLclZimlEUqIFDDSIATvsCYJ3gcaC/+GPdJ8hSq34vGbR 7A4zJMxZ0cgPaMY2jZOQ0pSQFW2tKgvI1hdyFp75wzMkIx8jZoYVPVZtH9awmYYU iq0pvHigL33cGR5H+/nZNU2zpOtO3+dnRzzZrWjNtXkIdTpSFDsiN6xEfSt6CKYi hPJXKICJueRmZn15CHYMNCrhSzogmfTP2cVxMjRYZSm4VxDJ05acrvbFGea78pbj YMLRDVO+kw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:13 2026 by rpki-client