This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: I+iSrtBUHzilkSa02RT57o1VUta3e6yJvG+O+/48nxg= Subject key identifier: 9A:0F:FD:2C:41:D8:82:67:0A:7A:C7:54:4F:F2:48:56:93:C0:A4:72 Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 697F4D0981B6E979A4EF387E888BD2C008EC4DE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:15:57 +0000 Manifest this update: Sat 24 Jan 2026 15:10:57 +0000 Manifest next update: Sun 25 Jan 2026 18:12:57 +0000 Files and hashes: 1: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: 1ucVrV9FulcUogQmW1h1mNZPl8SqVbIR8ggO15c79WI=) 2: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (hash: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7f:4d:09:81:b6:e9:79:a4:ef:38:7e:88:8b:d2:c0:08:ec:4d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Jan 24 15:10:57 2026 GMT Not After : Jan 25 18:12:57 2026 GMT Subject: CN=9A0FFD2C41D882670A7AC7544FF2485693C0A472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:ab:d2:8a:60:a8:53:78:6f:37:a5:a5:35: 47:de:53:0d:35:7b:03:63:8d:de:98:a2:3d:4e:09: 06:d1:50:bc:b3:70:5f:53:6c:ec:c0:f1:5f:83:3c: 60:fe:d9:de:2b:ed:e9:cb:ed:d6:23:26:00:62:47: 6b:89:db:e3:63:5f:dc:19:69:ad:61:13:4b:91:b2: b0:5c:bd:a6:38:60:c2:25:bb:8e:f7:28:d1:6d:fc: 5e:99:c3:77:b8:d4:e3:fc:5e:76:cf:4f:9e:ee:36: 03:05:2d:e4:fc:4c:24:77:5b:7b:f7:24:0b:af:be: 8d:09:85:5a:9c:b7:29:7a:7d:6e:14:0b:5b:62:45: 17:c3:26:88:08:ae:3c:84:8b:c3:b4:42:c5:3e:f4: 38:94:07:e7:d0:cc:e8:0f:62:41:53:4f:81:0a:1b: d1:c0:ac:ff:9f:62:4e:4b:5f:f1:b6:b8:fd:9b:8a: 68:ad:f4:eb:cc:b7:87:a3:e6:37:6d:3b:9d:96:35: e8:f9:a1:b0:72:e0:26:a3:35:8e:d5:41:5a:2f:b6: fe:fb:9c:ad:1b:53:a1:97:96:c7:96:cd:20:62:de: 0c:82:5b:fb:fe:e3:e0:90:a6:af:ab:f2:3d:24:12: d8:e7:d0:de:ec:f2:67:a4:0b:cd:6d:c5:6f:61:1f: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0F:FD:2C:41:D8:82:67:0A:7A:C7:54:4F:F2:48:56:93:C0:A4:72 X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:70:96:c7:71:ee:1a:61:19:7f:b0:b0:59:7f:0a:98:f8:59: 61:27:b2:08:3a:c3:de:a2:c2:89:80:ca:02:3b:83:f0:04:fd: ca:4d:3d:cb:6a:3a:f5:d3:d2:75:56:51:bc:92:42:54:03:01: 88:ba:66:3f:ab:ea:c5:96:36:05:f3:e5:36:1a:92:bf:74:ca: e5:1e:a3:ed:46:39:ea:f0:fc:1e:fc:37:fa:ae:b0:01:67:df: 5e:46:fe:ec:dd:b1:db:37:6c:3a:46:50:c9:8f:7f:80:fe:6b: 33:40:e1:48:ee:c1:18:20:67:3f:3d:17:52:07:2e:92:22:b0: 83:00:4f:dd:64:6c:ee:18:a0:36:a3:54:30:3d:22:73:b2:04: 92:66:77:e1:c8:d6:09:72:80:52:02:99:c5:a0:ba:f8:7f:f3: 97:16:0d:f9:21:2b:3a:0e:38:60:00:3f:d2:e5:3f:ba:41:47: 84:46:8d:54:c4:25:63:32:2f:8a:4e:ac:2d:92:9e:53:e0:1d: f4:28:9c:3a:1e:ca:b1:88:24:e7:b6:5a:b9:cf:35:ee:57:2c: 8a:e1:e1:cb:17:55:6c:ea:39:26:27:ab:c0:e8:65:8e:9f:4d: db:c7:b2:2c:28:35:d2:38:c8:ea:50:75:08:9d:d6:f0:bf:0d: 52:8c:ea:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaX9NCYG26Xmk7zh+iIvSwAjsTeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjAxMjQxNTEwNTdaFw0yNjAxMjUxODEyNTdaMDMxMTAvBgNV BAMTKDlBMEZGRDJDNDFEODgyNjcwQTdBQzc1NDRGRjI0ODU2OTNDMEE0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKs6vSimCoU3hvN6WlNUfeUw01 ewNjjd6Yoj1OCQbRULyzcF9TbOzA8V+DPGD+2d4r7enL7dYjJgBiR2uJ2+NjX9wZ aa1hE0uRsrBcvaY4YMIlu473KNFt/F6Zw3e41OP8XnbPT57uNgMFLeT8TCR3W3v3 JAuvvo0JhVqctyl6fW4UC1tiRRfDJogIrjyEi8O0QsU+9DiUB+fQzOgPYkFTT4EK G9HArP+fYk5LX/G2uP2bimit9OvMt4ej5jdtO52WNej5obBy4CajNY7VQVovtv77 nK0bU6GXlseWzSBi3gyCW/v+4+CQpq+r8j0kEtjn0N7s8mekC81txW9hH/AVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmg/9LEHYgmcKesdUT/JIVpPApHIwHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHCWx3HuGmEZ f7CwWX8KmPhZYSeyCDrD3qLCiYDKAjuD8AT9yk09y2o69dPSdVZRvJJCVAMBiLpm P6vqxZY2BfPlNhqSv3TK5R6j7UY56vD8Hvw3+q6wAWffXkb+7N2x2zdsOkZQyY9/ gP5rM0DhSO7BGCBnPz0XUgcukiKwgwBP3WRs7higNqNUMD0ic7IEkmZ34cjWCXKA UgKZxaC6+H/zlxYN+SErOg44YAA/0uU/ukFHhEaNVMQlYzIvik6sLZKeU+Ad9Cic Oh7KsYgk57Zauc817lcsiuHhyxdVbOo5JierwOhljp9N28eyLCg10jjI6lB1CJ3W 8L8NUozqEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:54 2026 by rpki-client