This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: 5xSGA11p/1MkL8aTSc84yX5+oVWczgJvoTJqXO8l2aw= Subject key identifier: 82:55:D3:93:AE:89:ED:D2:0A:AF:72:D2:DB:51:D2:30:50:3D:FA:DF Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 048A1B9FF2A1C91D6D8F24BBF1EF055C8F7C5701 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:35:57 +0000 Manifest this update: Sun 25 Jan 2026 07:30:57 +0000 Manifest next update: Mon 26 Jan 2026 08:51:57 +0000 Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 3: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: HseLmwh46RR6NtJitnrqkr03rUMMvXchI7LgdOPJjI4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8a:1b:9f:f2:a1:c9:1d:6d:8f:24:bb:f1:ef:05:5c:8f:7c:57:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jan 25 07:30:57 2026 GMT Not After : Jan 26 08:51:57 2026 GMT Subject: CN=8255D393AE89EDD20AAF72D2DB51D230503DFADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:14:61:54:51:91:66:0e:f0:0f:ff:32:21:b0: 7f:13:07:17:a8:aa:25:01:df:10:70:da:81:0a:8d: ac:d0:41:91:83:8d:82:d0:53:e2:b2:e6:98:c5:2a: 1e:50:f2:81:45:81:ee:82:2a:ea:9e:a4:e3:57:8d: b8:e2:9e:68:b8:c0:44:52:a7:6b:61:65:e9:ab:ef: f1:57:e1:be:35:6f:8b:66:86:59:86:89:0e:73:1b: 8b:33:25:f2:b8:27:fe:ff:d2:39:06:3f:8f:ab:68: fa:9e:7b:64:46:41:dd:7b:fd:38:7e:ec:f4:67:9d: 64:7e:cd:23:2f:f4:66:61:fe:bf:a2:b6:22:f3:20: 5c:bb:71:88:c2:2e:30:5c:a7:2d:42:04:54:14:a3: 62:c4:f8:aa:e0:c9:dc:21:95:77:a0:22:76:70:50: ad:ce:69:ab:81:cf:6c:45:d5:27:25:a1:0f:3a:27: 32:17:ce:74:e3:88:8c:d8:3d:03:51:76:35:25:8f: 38:b6:76:38:43:c8:61:ef:1c:8a:05:13:8f:e0:d9: f7:b3:c0:ef:eb:ed:dd:f2:32:0a:e6:99:15:4c:66: 3c:e9:2f:ff:e3:5a:7b:92:1b:28:1e:f9:07:ec:42: dd:99:bb:87:c0:e0:77:d7:9d:e9:08:69:48:08:23: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:55:D3:93:AE:89:ED:D2:0A:AF:72:D2:DB:51:D2:30:50:3D:FA:DF X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:96:b1:57:0a:35:7d:24:f1:55:9c:c0:38:39:90:99:93:d4: 46:37:4d:55:68:45:0a:77:1b:a3:c4:e1:74:c4:cc:ca:06:2c: c6:38:54:66:49:e8:2f:94:27:de:2f:67:fa:0a:dc:6b:1e:0d: de:e9:1c:40:1a:75:d4:22:15:b7:6a:b4:ca:4f:ab:3b:fd:37: 85:e3:d3:2b:eb:47:89:34:73:1b:89:cd:63:bf:6c:98:87:49: f3:4b:59:3f:1f:c8:42:9c:cd:b6:0f:0c:fe:a9:17:ec:4d:a1: f7:8b:1b:fb:1a:6a:59:20:53:ef:89:e3:91:e6:05:64:78:7e: fb:1a:8d:99:e6:15:b5:e5:04:d4:b6:7e:86:88:cc:87:79:bc: e1:93:fe:9c:14:2d:ef:36:86:39:1f:88:d4:d2:5d:e6:fd:3e: 01:7e:f2:e4:0e:6e:d3:db:2a:c2:b6:00:f0:e5:8f:da:4f:d5: a9:6f:77:27:80:1f:f2:b4:c0:1a:43:98:5b:fc:ec:02:5d:b8: 19:85:ba:e4:78:11:54:4b:91:0d:d5:34:89:a2:e2:7b:12:3e: 17:e4:e8:f0:66:fd:ad:62:46:1e:6b:a5:07:d1:e3:8e:9b:a9: 45:51:48:4d:41:67:95:37:c5:e7:79:15:67:96:3e:8a:9f:cf: cf:76:76:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBIobn/KhyR1tjyS78e8FXI98VwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAxMjUwNzMwNTdaFw0yNjAxMjYwODUxNTdaMDMxMTAvBgNV BAMTKDgyNTVEMzkzQUU4OUVERDIwQUFGNzJEMkRCNTFEMjMwNTAzREZBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFGFUUZFmDvAP/zIhsH8TBxeo qiUB3xBw2oEKjazQQZGDjYLQU+Ky5pjFKh5Q8oFFge6CKuqepONXjbjinmi4wERS p2thZemr7/FX4b41b4tmhlmGiQ5zG4szJfK4J/7/0jkGP4+raPqee2RGQd17/Th+ 7PRnnWR+zSMv9GZh/r+itiLzIFy7cYjCLjBcpy1CBFQUo2LE+KrgydwhlXegInZw UK3OaauBz2xF1ScloQ86JzIXznTjiIzYPQNRdjUljzi2djhDyGHvHIoFE4/g2fez wO/r7d3yMgrmmRVMZjzpL//jWnuSGyge+QfsQt2Zu4fA4HfXnekIaUgII64LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUglXTk66J7dIKr3LS21HSMFA9+t8wHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5axVwo1fSTx VZzAODmQmZPURjdNVWhFCncbo8ThdMTMygYsxjhUZknoL5Qn3i9n+grcax4N3ukc QBp11CIVt2q0yk+rO/03hePTK+tHiTRzG4nNY79smIdJ80tZPx/IQpzNtg8M/qkX 7E2h94sb+xpqWSBT74njkeYFZHh++xqNmeYVteUE1LZ+hojMh3m84ZP+nBQt7zaG OR+I1NJd5v0+AX7y5A5u09sqwrYA8OWP2k/VqW93J4Af8rTAGkOYW/zsAl24GYW6 5HgRVEuRDdU0iaLiexI+F+To8Gb9rWJGHmulB9HjjpupRVFITUFnlTfF53kVZ5Y+ ip/Pz3Z27w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:45 2026 by rpki-client