This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: U8UgbxqsVjpuQvATT1uJpUgdwU+ziF3sW4LimGamkyo= Subject key identifier: 8A:03:CD:47:FE:AA:DD:61:F2:CF:D7:7E:70:56:D6:31:A3:BA:4F:AB Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 1858027346EF4F8F67711C148C52D51B490014BC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 12:15:57 +0000 Manifest this update: Sat 24 Jan 2026 12:10:57 +0000 Manifest next update: Sun 25 Jan 2026 15:21:57 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: 3KGfw1h8ATwnxq1yAI+UCU6Gl7HJaCEI1DT/lsOeZCM=) 2: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:02:73:46:ef:4f:8f:67:71:1c:14:8c:52:d5:1b:49:00:14:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Jan 24 12:10:57 2026 GMT Not After : Jan 25 15:21:57 2026 GMT Subject: CN=8A03CD47FEAADD61F2CFD77E7056D631A3BA4FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:39:6b:7b:06:75:63:10:48:ac:e7:24:d5: d5:3e:fc:7d:f5:03:3b:dc:e9:45:0f:c0:da:1c:17: f2:0c:e7:dd:db:29:e4:db:ef:cc:6e:ca:c1:d1:b8: 3c:ee:c6:24:39:e2:6a:12:69:78:cf:c9:79:cf:82: 4e:78:91:a0:f7:d7:86:3e:a1:53:11:0f:52:e1:4d: b4:79:ea:c1:97:fb:b3:3d:53:0b:7a:0a:10:df:e5: 81:03:45:02:ea:fe:ce:14:45:da:f4:8d:d7:9c:7a: 75:03:aa:66:11:cf:57:40:40:3f:99:cc:4b:5b:89: 2d:21:84:7c:f5:57:ee:14:7a:b0:f3:ce:15:c2:89: a7:45:88:4f:e3:03:59:2a:2c:97:d6:7f:cc:36:32: dc:48:93:a6:27:d3:50:1a:e6:7c:cc:ab:a8:d7:21: 10:d2:7a:43:03:d7:17:9f:01:cf:21:2b:db:bd:55: 5b:7e:2f:dd:39:76:15:aa:ef:e4:6e:25:3a:e3:89: 2f:cf:ca:32:51:5a:e6:3c:8e:70:e3:55:e4:fa:9c: 6d:22:65:e8:24:65:e1:38:ac:44:ff:10:87:47:bd: d3:f7:3c:ef:a3:ad:53:95:f7:59:d6:9a:c9:92:6b: 18:0d:8d:ff:7e:a8:4b:78:a3:af:0e:93:6f:ee:6e: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:CD:47:FE:AA:DD:61:F2:CF:D7:7E:70:56:D6:31:A3:BA:4F:AB X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:21:64:d6:89:8e:e1:8c:9f:0e:92:38:02:97:68:b3:44:ef: d9:60:71:79:9a:29:9e:bd:ea:48:93:62:1f:ab:f4:79:e1:cf: 09:78:bb:04:f6:a6:a6:5a:2f:9e:c0:ba:b7:1c:75:3f:c0:b1: b2:de:99:23:68:46:1a:36:4c:39:fa:24:47:4e:dd:f6:11:67: a8:47:ba:3c:c5:32:c0:ae:0b:48:41:99:22:87:92:94:03:4c: 2c:41:85:3a:dc:9e:44:8b:06:d6:27:18:15:72:73:3e:bf:ca: 35:0f:06:5b:09:01:1d:84:3e:23:fd:5d:b5:4d:9b:27:49:4e: 61:73:ce:d2:90:50:72:c0:44:cf:3a:9b:ba:9f:91:79:d9:0c: a2:0a:b5:67:be:be:3b:fd:51:b1:4f:ac:26:8e:99:b1:a6:73: 29:c1:86:6c:91:dd:d0:b3:78:5b:df:6c:41:9a:6c:16:b7:31: f3:cc:8f:d9:d4:e7:12:81:ca:fd:ee:cf:80:15:9e:35:c3:b4: fe:1c:e6:d5:92:5e:63:d5:1a:99:df:c7:67:c0:96:ab:67:97: 57:0f:0a:7d:54:5e:12:0f:b9:d6:0e:c7:75:42:29:24:97:0f: d2:32:b7:b9:61:d9:ed:1a:f0:9e:c2:86:65:10:74:7f:22:38: f1:f7:7c:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGFgCc0bvT49ncRwUjFLVG0kAFLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjAxMjQxMjEwNTdaFw0yNjAxMjUxNTIxNTdaMDMxMTAvBgNV BAMTKDhBMDNDRDQ3RkVBQURENjFGMkNGRDc3RTcwNTZENjMxQTNCQTRGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnDlrewZ1YxBIrOck1dU+/H31 Azvc6UUPwNocF/IM593bKeTb78xuysHRuDzuxiQ54moSaXjPyXnPgk54kaD314Y+ oVMRD1LhTbR56sGX+7M9Uwt6ChDf5YEDRQLq/s4URdr0jdecenUDqmYRz1dAQD+Z zEtbiS0hhHz1V+4UerDzzhXCiadFiE/jA1kqLJfWf8w2MtxIk6Yn01Aa5nzMq6jX IRDSekMD1xefAc8hK9u9VVt+L905dhWq7+RuJTrjiS/PyjJRWuY8jnDjVeT6nG0i ZegkZeE4rET/EIdHvdP3PO+jrVOV91nWmsmSaxgNjf9+qEt4o68Ok2/ubrOTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUigPNR/6q3WHyz9d+cFbWMaO6T6swHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCFk1omO4Yyf DpI4Apdos0Tv2WBxeZopnr3qSJNiH6v0eeHPCXi7BPamplovnsC6txx1P8Cxst6Z I2hGGjZMOfokR07d9hFnqEe6PMUywK4LSEGZIoeSlANMLEGFOtyeRIsG1icYFXJz Pr/KNQ8GWwkBHYQ+I/1dtU2bJ0lOYXPO0pBQcsBEzzqbup+RedkMogq1Z76+O/1R sU+sJo6ZsaZzKcGGbJHd0LN4W99sQZpsFrcx88yP2dTnEoHK/e7PgBWeNcO0/hzm 1ZJeY9Uamd/HZ8CWq2eXVw8KfVReEg+51g7HdUIpJJcP0jK3uWHZ7RrwnsKGZRB0 fyI48fd88Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:31 2026 by rpki-client