This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json) Hash identifier: UjJpKM3eu3ArAIAdGQ/Gzodg7a8jrec5kpiUbjJuqwA= Subject key identifier: 78:B6:E5:22:DD:00:F2:DC:82:EA:0F:2E:17:E4:78:44:76:88:42:77 Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 66A221D19DD675B1019A57EEE1A568AE960B5D32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:01:02 +0000 Manifest this update: Sun 25 Jan 2026 09:56:02 +0000 Manifest next update: Mon 26 Jan 2026 10:59:02 +0000 Files and hashes: 1: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=) 2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: 8TPYKS4I+FYkjtMpMM6TsarchXTAddsC6RDCgQFgnI0=) 3: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=) 4: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=) 5: 3130332e32342e3232382e302f32322d3234203d3e2034383337.roa (hash: OovHk1dM5SRegXrOoxHUF4YMH6s4+waRg57vn/cYkAk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a2:21:d1:9d:d6:75:b1:01:9a:57:ee:e1:a5:68:ae:96:0b:5d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Jan 25 09:56:02 2026 GMT Not After : Jan 26 10:59:02 2026 GMT Subject: CN=78B6E522DD00F2DC82EA0F2E17E4784476884277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:0e:77:ab:44:d4:8f:42:a2:a9:f5:f9:1c: a5:a7:5c:74:14:c1:82:61:95:6f:15:87:2b:6f:8a: 48:f7:2d:ad:64:91:fc:ef:c5:7a:25:2b:b3:af:02: 72:d5:76:17:e8:76:2a:f5:3c:89:d1:37:c5:d2:bd: 60:aa:fc:0f:1d:e7:9f:59:27:4b:6c:6a:12:12:3b: a6:b0:bb:5e:f7:27:33:fb:4b:cb:bf:ba:a3:48:d4: 6b:e3:46:48:4c:3a:06:9a:db:74:36:e4:d3:8f:c2: 8f:76:38:d3:79:5b:2f:3b:09:2d:49:7d:28:d2:63: 17:9e:b0:f6:f8:d4:90:a0:34:0b:c1:bf:79:10:dc: 59:36:8a:de:5f:7e:be:b1:ba:0a:8b:b5:c2:45:78: 5e:b4:11:88:c6:17:79:c0:62:0d:e9:65:97:b8:4a: 10:af:e8:09:fa:61:74:f6:08:ff:27:9d:96:a6:38: 92:af:d8:10:f0:56:2e:e6:9c:e4:11:84:e5:c6:47: 68:55:7f:08:de:c3:8e:76:0e:93:e1:3d:70:3d:46: 58:3b:68:a6:9b:d5:c9:c1:57:7e:3b:fd:cd:cf:68: a0:ee:d4:dd:61:bc:f8:93:5e:39:81:85:cb:25:cf: 7b:cf:99:a1:87:d1:a3:a1:75:9e:a2:d8:22:16:06: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B6:E5:22:DD:00:F2:DC:82:EA:0F:2E:17:E4:78:44:76:88:42:77 X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:4e:d8:8d:6f:a7:c9:03:9a:c7:86:b8:35:77:61:43:74:ae: fb:4c:e6:0f:81:49:fd:ff:c4:1b:8b:88:ef:e9:87:81:7f:af: 12:23:86:d5:84:2e:70:66:9c:d9:1b:92:32:24:91:0a:56:cb: 53:d9:a1:30:90:88:eb:bf:63:93:15:80:58:84:4e:18:f3:9b: 39:e3:78:8f:5f:22:41:13:e6:c0:da:ff:61:07:e8:c5:3c:58: 6e:26:67:82:ac:32:af:58:b1:88:aa:05:f7:f5:70:77:60:dc: a6:79:06:c6:63:db:71:bd:1a:99:8c:74:16:03:f4:06:de:78: 26:1d:2b:00:e0:08:10:3f:64:39:5a:40:cb:69:f9:dc:a1:59: 13:ca:1f:d4:b3:f6:e0:c8:df:56:81:9d:7b:96:36:c1:91:73: 6b:2f:14:23:50:90:f5:85:6a:e5:f8:87:21:8f:54:ec:27:80: 1a:d1:5b:9b:d4:80:b2:d5:e7:24:ec:23:82:86:0b:7e:39:af: 5c:44:68:3c:c1:52:50:17:f8:0c:d4:4c:f1:85:29:a0:de:eb: a5:4d:1f:83:21:f5:bd:af:27:40:99:c1:45:0f:5d:5a:f9:d3: b2:22:e6:0e:d3:1f:a1:ba:14:ec:ed:c2:f1:fd:7b:c0:a7:8c: 01:cf:65:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZqIh0Z3WdbEBmlfu4aVorpYLXTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjAxMjUwOTU2MDJaFw0yNjAxMjYxMDU5MDJaMDMxMTAvBgNV BAMTKDc4QjZFNTIyREQwMEYyREM4MkVBMEYyRTE3RTQ3ODQ0NzY4ODQyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHZQ53q0TUj0KiqfX5HKWnXHQU wYJhlW8Vhytvikj3La1kkfzvxXolK7OvAnLVdhfodir1PInRN8XSvWCq/A8d559Z J0tsahISO6awu173JzP7S8u/uqNI1GvjRkhMOgaa23Q25NOPwo92ONN5Wy87CS1J fSjSYxeesPb41JCgNAvBv3kQ3Fk2it5ffr6xugqLtcJFeF60EYjGF3nAYg3pZZe4 ShCv6An6YXT2CP8nnZamOJKv2BDwVi7mnOQRhOXGR2hVfwjew452DpPhPXA9Rlg7 aKab1cnBV347/c3PaKDu1N1hvPiTXjmBhcslz3vPmaGH0aOhdZ6i2CIWBgOBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeLblIt0A8tyC6g8uF+R4RHaIQncwHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE7YjW+nyQOa x4a4NXdhQ3Su+0zmD4FJ/f/EG4uI7+mHgX+vEiOG1YQucGac2RuSMiSRClbLU9mh MJCI679jkxWAWIROGPObOeN4j18iQRPmwNr/YQfoxTxYbiZngqwyr1ixiKoF9/Vw d2DcpnkGxmPbcb0amYx0FgP0Bt54Jh0rAOAIED9kOVpAy2n53KFZE8of1LP24Mjf VoGde5Y2wZFzay8UI1CQ9YVq5fiHIY9U7CeAGtFbm9SAstXnJOwjgoYLfjmvXERo PMFSUBf4DNRM8YUpoN7rpU0fgyH1va8nQJnBRQ9dWvnTsiLmDtMfoboU7O3C8f17 wKeMAc9lww== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:16 2026 by rpki-client