This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: uscvd8t6vNSDFQ9AZNUOM2YyhPWBEcpVjy2y1OKuFBc= Subject key identifier: BE:7F:2D:E2:07:77:50:FA:E2:08:C5:6B:33:02:51:8F:D7:D4:DD:CF Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 6459D00440971406776473626E2395068FE89271 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 09:51:02 +0000 Manifest this update: Sun 25 Jan 2026 09:46:02 +0000 Manifest next update: Mon 26 Jan 2026 09:58:02 +0000 Files and hashes: 1: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: deZaHSX6YYbZAmzIthVDYC9r0oEZ1MRzGXAwmzOmTP0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:59:d0:04:40:97:14:06:77:64:73:62:6e:23:95:06:8f:e8:92:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Jan 25 09:46:02 2026 GMT Not After : Jan 26 09:58:02 2026 GMT Subject: CN=BE7F2DE2077750FAE208C56B3302518FD7D4DDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:0f:bc:24:b0:a4:3b:91:dd:c2:a6:47:ad: a8:71:75:f7:c8:6c:0c:de:6c:7c:6a:b7:01:d4:4d: 09:95:cc:8e:72:40:76:41:ec:56:e4:7a:e7:1d:9e: 82:f1:fb:1f:5f:70:08:0d:7a:35:fd:5a:06:7b:e0: e3:4c:18:12:3b:37:2c:ad:67:0f:2f:dd:06:75:d0: 59:15:f1:ed:31:2d:60:4c:ac:a9:73:cd:e0:49:10: a7:16:2f:01:5a:41:25:59:fa:0e:1b:9e:fa:3e:d4: 9b:dc:b3:09:f1:ab:21:fe:ce:b0:bf:f7:3d:7d:9d: 1a:8d:f4:d6:c9:1e:2c:2b:4d:08:0a:6b:e3:5c:d7: 70:77:87:ef:8a:9c:af:15:54:cd:33:42:c4:f9:bb: 0a:79:f9:9a:cd:8c:25:ec:a3:37:f5:5f:e3:a4:3e: c7:87:cf:eb:a7:94:78:22:2f:33:4d:2d:48:5b:2c: da:6b:71:3a:c4:91:d8:33:29:23:e3:8f:6e:4c:46: f6:ce:1f:9a:a8:0e:3b:d0:cb:53:e3:5e:b4:d3:9d: 04:0a:84:92:cc:f1:5c:b8:ba:2a:69:e3:1c:b9:08: 29:aa:2f:7f:06:d0:29:d9:77:96:ef:a1:9b:ac:a5: fe:19:1d:ce:64:f7:2a:6a:96:16:76:ba:cb:8a:25: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7F:2D:E2:07:77:50:FA:E2:08:C5:6B:33:02:51:8F:D7:D4:DD:CF X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bd:ae:aa:32:1d:c3:f4:87:cd:df:d1:4a:22:22:0b:f2:57: 11:09:e7:01:6d:aa:0d:fb:fc:49:f2:bb:18:4d:4f:9e:f8:df: d3:80:21:77:de:13:77:c2:92:41:91:69:17:27:94:5f:e7:d2: 3f:41:73:11:f0:00:de:f0:f0:c4:28:f4:85:11:7e:f4:c8:55: 77:e4:76:a0:4b:85:69:50:68:8b:00:42:22:08:5b:1c:ae:e0: 22:0e:e4:e0:7a:51:dc:0e:25:7c:2d:4d:67:43:27:85:ef:96: fd:97:12:ba:32:fb:49:5d:ca:4a:7e:3f:52:32:8a:07:9f:02: 34:76:47:0b:05:1c:40:26:ff:3c:ee:26:4e:e9:c2:1d:a4:a2: a3:c0:28:07:0a:5a:31:fc:ae:83:b4:11:5a:06:b5:a2:86:e4: c4:04:4c:9e:21:bf:1b:59:d3:a9:ea:53:2a:3c:57:fc:c0:4d: a6:f5:5d:78:a0:30:33:38:4f:ef:30:89:ff:06:00:d4:9f:40: bd:3a:97:e1:d5:2d:a4:90:f0:0d:c5:d0:57:84:39:4b:28:3d: fe:62:9c:2e:4d:19:13:20:70:ac:21:2e:0a:7a:f0:da:e8:09: 44:81:10:ec:b9:9c:0a:54:2b:59:56:7e:d6:29:15:ee:99:9a: 11:c2:4d:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZFnQBECXFAZ3ZHNibiOVBo/oknEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjAxMjUwOTQ2MDJaFw0yNjAxMjYwOTU4MDJaMDMxMTAvBgNV BAMTKEJFN0YyREUyMDc3NzUwRkFFMjA4QzU2QjMzMDI1MThGRDdENEREQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSFQ+8JLCkO5HdwqZHrahxdffI bAzebHxqtwHUTQmVzI5yQHZB7FbkeucdnoLx+x9fcAgNejX9WgZ74ONMGBI7Nyyt Zw8v3QZ10FkV8e0xLWBMrKlzzeBJEKcWLwFaQSVZ+g4bnvo+1JvcswnxqyH+zrC/ 9z19nRqN9NbJHiwrTQgKa+Nc13B3h++KnK8VVM0zQsT5uwp5+ZrNjCXsozf1X+Ok PseHz+unlHgiLzNNLUhbLNprcTrEkdgzKSPjj25MRvbOH5qoDjvQy1PjXrTTnQQK hJLM8Vy4uipp4xy5CCmqL38G0CnZd5bvoZuspf4ZHc5k9ypqlhZ2usuKJVgTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvn8t4gd3UPriCMVrMwJRj9fU3c8wHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE72uqjIdw/SH zd/RSiIiC/JXEQnnAW2qDfv8SfK7GE1Pnvjf04Ahd94Td8KSQZFpFyeUX+fSP0Fz EfAA3vDwxCj0hRF+9MhVd+R2oEuFaVBoiwBCIghbHK7gIg7k4HpR3A4lfC1NZ0Mn he+W/ZcSujL7SV3KSn4/UjKKB58CNHZHCwUcQCb/PO4mTunCHaSio8AoBwpaMfyu g7QRWga1oobkxARMniG/G1nTqepTKjxX/MBNpvVdeKAwMzhP7zCJ/wYA1J9AvTqX 4dUtpJDwDcXQV4Q5Syg9/mKcLk0ZEyBwrCEuCnrw2ugJRIEQ7LmcClQrWVZ+1ikV 7pmaEcJNKw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:41 2026 by rpki-client