This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: KRCZwe7NGcpdJ/Bf5mJvjUyu8+nJED/YN9kHN63smCk= Subject key identifier: 9E:35:14:29:90:8B:04:89:3C:60:EC:33:D5:57:62:FB:CC:4C:80:3E Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 25C65B1F796447054532F565B7A8BAFA910B94EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 15:55:57 +0000 Manifest this update: Sat 24 Jan 2026 15:50:57 +0000 Manifest next update: Sun 25 Jan 2026 16:45:57 +0000 Files and hashes: 1: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) 2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: 5H4+84UKLsfo9938Gj3htBGamyx6j/zqO5cH650ggFg=) 3: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c6:5b:1f:79:64:47:05:45:32:f5:65:b7:a8:ba:fa:91:0b:94:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Jan 24 15:50:57 2026 GMT Not After : Jan 25 16:45:57 2026 GMT Subject: CN=9E351429908B04893C60EC33D55762FBCC4C803E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:74:3d:de:52:21:59:2f:da:74:ca:dc:a0: 12:6e:6c:04:88:40:fc:9c:7e:7d:1d:8c:0b:22:66: ef:ca:d6:cb:ea:a8:90:8f:8f:50:36:98:3e:8f:66: 02:8b:7a:a4:af:8d:1d:d4:8f:03:1d:d5:0d:65:ef: ea:f3:3b:6e:aa:0d:41:c9:5e:bb:c4:00:c3:04:f4: d9:d6:38:ee:7b:98:8f:4d:5d:46:ea:7f:cc:19:30: d7:d5:2a:ad:09:73:9c:07:31:86:e2:74:8c:bc:e4: ba:71:a8:83:0e:3c:0f:6b:49:53:72:d8:f3:38:85: d4:fe:bc:7c:63:68:1c:67:3e:04:c1:ed:05:c8:29: 6a:95:ec:ee:eb:ff:6d:65:73:89:07:b2:03:02:08: 1d:bc:b5:53:d4:92:fe:09:06:eb:f2:ba:5a:27:92: 75:3c:21:39:c6:b6:7b:03:4f:e6:51:81:18:8c:22: 47:12:e0:89:1d:9b:9a:e5:ed:71:d1:bb:8f:31:f6: db:90:93:03:9e:e8:37:be:82:34:12:df:c4:dd:d2: 47:dc:3b:e2:71:ca:13:42:06:20:3e:cc:d0:08:9e: 1e:92:cf:cf:17:62:c9:c5:51:6a:6a:4b:1f:ce:42: 68:71:fe:b0:fb:a6:a5:f8:c5:b6:fa:0a:c8:2f:39: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:14:29:90:8B:04:89:3C:60:EC:33:D5:57:62:FB:CC:4C:80:3E X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e6:59:c2:be:cf:65:95:b4:0f:01:5b:cc:66:59:3a:0d:02: 35:af:c8:57:b2:98:79:a7:78:fb:3a:3f:1c:09:7a:2d:e7:67: b0:ca:f6:28:cd:af:e1:cf:e4:0e:97:83:79:a6:e0:f2:29:2e: d9:4b:5b:f1:f2:b2:b8:84:be:48:b8:69:3f:ce:d7:78:7c:ec: 73:46:60:ae:24:f0:64:42:ae:8a:ea:ef:ce:67:98:00:f9:5c: a7:d9:de:8b:89:26:38:aa:f3:25:a4:ba:50:64:27:b6:48:5d: 5c:72:a8:4f:37:96:dd:d9:0d:63:54:40:6a:e4:26:b9:54:1e: 71:c8:2c:96:a9:7e:7a:3e:22:e7:87:93:b4:9e:d7:5c:e6:c9: 75:4b:66:94:b7:38:5d:54:a6:8a:5c:0a:89:48:b0:57:f4:2e: 35:46:7f:ce:2d:e8:db:7e:a2:75:8c:c1:5d:03:66:57:28:e4: 45:01:84:8b:ab:04:76:eb:92:d7:08:e0:87:cb:e3:7d:02:e7: 27:f5:bc:01:ef:5b:bc:f3:be:d9:82:57:20:f7:fb:e4:52:d2: 45:09:07:a4:a8:f3:d3:7c:22:f9:84:a3:41:04:a7:84:3f:aa: 40:4f:46:0f:a1:00:2f:63:34:f6:4f:81:d0:88:15:a5:71:08: 60:af:ab:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJcZbH3lkRwVFMvVlt6i6+pELlOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjAxMjQxNTUwNTdaFw0yNjAxMjUxNjQ1NTdaMDMxMTAvBgNV BAMTKDlFMzUxNDI5OTA4QjA0ODkzQzYwRUMzM0Q1NTc2MkZCQ0M0QzgwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2XQ93lIhWS/adMrcoBJubASI QPycfn0djAsiZu/K1svqqJCPj1A2mD6PZgKLeqSvjR3UjwMd1Q1l7+rzO26qDUHJ XrvEAMME9NnWOO57mI9NXUbqf8wZMNfVKq0Jc5wHMYbidIy85LpxqIMOPA9rSVNy 2PM4hdT+vHxjaBxnPgTB7QXIKWqV7O7r/21lc4kHsgMCCB28tVPUkv4JBuvyulon knU8ITnGtnsDT+ZRgRiMIkcS4Ikdm5rl7XHRu48x9tuQkwOe6De+gjQS38Td0kfc O+JxyhNCBiA+zNAInh6Sz88XYsnFUWpqSx/OQmhx/rD7pqX4xbb6CsgvOXz5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnjUUKZCLBIk8YOwz1Vdi+8xMgD4wHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeZZwr7PZZW0 DwFbzGZZOg0CNa/IV7KYead4+zo/HAl6LednsMr2KM2v4c/kDpeDeabg8iku2Utb 8fKyuIS+SLhpP87XeHzsc0ZgriTwZEKuiurvzmeYAPlcp9nei4kmOKrzJaS6UGQn tkhdXHKoTzeW3dkNY1RAauQmuVQeccgslql+ej4i54eTtJ7XXObJdUtmlLc4XVSm ilwKiUiwV/QuNUZ/zi3o236idYzBXQNmVyjkRQGEi6sEduuS1wjgh8vjfQLnJ/W8 Ae9bvPO+2YJXIPf75FLSRQkHpKjz03wi+YSjQQSnhD+qQE9GD6EAL2M09k+B0IgV pXEIYK+row== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:35 2026 by rpki-client