This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: 6q4ho5vgi3KrGGAw9lfBeRTfWJsC1EWfNboObrCwoMk= Subject key identifier: 31:D2:B7:4C:32:A1:AA:71:28:0A:3E:7C:E3:DA:DB:B2:35:CB:FD:EA Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 312C038EAAD9F4BA5694AE6E373DF0CF4327F650 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:46:02 +0000 Manifest this update: Sun 25 Jan 2026 08:41:02 +0000 Manifest next update: Mon 26 Jan 2026 11:48:02 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: jPn4KzKgJIYwFbZufPTxGkiOPrLvg5a/7DJakghlp0I=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2c:03:8e:aa:d9:f4:ba:56:94:ae:6e:37:3d:f0:cf:43:27:f6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: Jan 25 08:41:02 2026 GMT Not After : Jan 26 11:48:02 2026 GMT Subject: CN=31D2B74C32A1AA71280A3E7CE3DADBB235CBFDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:da:15:67:1c:c2:d5:b4:13:33:53:c7:f3: 57:bc:56:ba:c3:c8:75:f3:b7:75:78:85:48:7a:c8: d6:33:22:73:bb:de:8b:6f:d7:66:24:40:64:2f:00: 12:47:c2:81:32:42:b8:45:3b:27:cd:5a:7f:e9:93: f7:7f:b9:cd:ae:fc:cd:7d:04:eb:9f:eb:e1:27:3a: 4b:e8:93:22:e4:12:1d:fc:89:00:99:aa:79:41:aa: 6d:2b:f9:65:5e:ad:3c:26:1f:b1:22:a9:ad:45:bb: 56:53:c2:cf:88:df:20:35:1f:25:35:42:fc:bc:8f: d1:e8:ce:ef:d1:c4:f9:cf:2b:8b:4d:8a:09:ef:ee: d4:ea:77:45:46:28:db:dc:8a:91:9f:fe:b5:24:81: 5f:69:76:ef:ed:3f:59:c6:5a:81:fa:50:00:77:cb: 37:c3:92:11:68:a1:09:03:06:04:dd:da:2a:cd:e4: 15:8c:0a:e1:6c:2a:d4:97:6d:c3:66:06:00:eb:97: f4:26:7c:f9:ae:5f:15:4f:f9:72:a2:25:68:11:9e: 8b:4d:d0:28:dc:89:7e:14:d8:40:e4:94:1d:12:ac: eb:12:aa:53:88:6d:8b:bf:a6:d3:a7:67:42:25:6b: f1:07:16:0e:63:31:d2:ae:23:3c:05:b1:c3:64:df: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:B7:4C:32:A1:AA:71:28:0A:3E:7C:E3:DA:DB:B2:35:CB:FD:EA X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:25:69:58:94:c6:64:19:a6:54:50:33:73:a4:fc:4a:b7:e0: 85:d0:60:bc:71:5d:5f:e1:74:ec:38:42:32:57:5d:8d:79:55: 4e:2b:46:19:30:b4:de:47:aa:9f:73:cc:d6:23:ab:be:ec:c3: 55:83:f2:c7:08:50:ef:6e:28:d4:19:0c:58:64:78:a0:4e:f0: 64:3c:84:c4:93:a5:97:2f:12:10:b7:95:66:57:1d:c2:aa:3c: db:6e:60:5c:be:f4:25:b4:72:8f:9b:7f:d6:ff:a1:36:a5:4d: dd:e3:bb:5d:64:d6:bf:a9:9a:94:87:4b:cc:d9:4a:f0:0b:b8: 7e:42:8a:30:b4:82:0e:c1:33:29:ec:8f:f6:be:b1:da:81:b1: 17:4d:d1:59:55:d6:64:23:14:19:72:40:12:3d:bb:59:97:ce: 8d:bb:90:9b:7c:da:d8:c4:1c:e0:f1:d0:1a:2a:81:6f:34:d6: 74:f1:bc:42:08:19:2f:54:e1:26:cc:ec:6c:80:15:81:6e:06: 77:f3:39:91:96:25:26:f5:8b:00:60:2b:02:10:5c:7b:d4:14: 3b:52:e7:c7:75:e0:b1:18:9f:98:f1:02:af:13:da:8e:c3:e9: 36:1d:d5:82:0d:fb:0f:d3:f5:f6:ba:d3:1b:e5:dd:19:71:96: 47:22:8c:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMSwDjqrZ9LpWlK5uNz3wz0Mn9lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjAxMjUwODQxMDJaFw0yNjAxMjYxMTQ4MDJaMDMxMTAvBgNV BAMTKDMxRDJCNzRDMzJBMUFBNzEyODBBM0U3Q0UzREFEQkIyMzVDQkZERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9doVZxzC1bQTM1PH81e8VrrD yHXzt3V4hUh6yNYzInO73otv12YkQGQvABJHwoEyQrhFOyfNWn/pk/d/uc2u/M19 BOuf6+EnOkvokyLkEh38iQCZqnlBqm0r+WVerTwmH7Eiqa1Fu1ZTws+I3yA1HyU1 Qvy8j9Hozu/RxPnPK4tNignv7tTqd0VGKNvcipGf/rUkgV9pdu/tP1nGWoH6UAB3 yzfDkhFooQkDBgTd2irN5BWMCuFsKtSXbcNmBgDrl/QmfPmuXxVP+XKiJWgRnotN 0CjciX4U2EDklB0SrOsSqlOIbYu/ptOnZ0Ila/EHFg5jMdKuIzwFscNk32GDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMdK3TDKhqnEoCj5849rbsjXL/eowHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSVpWJTGZBmm VFAzc6T8SrfghdBgvHFdX+F07DhCMlddjXlVTitGGTC03keqn3PM1iOrvuzDVYPy xwhQ724o1BkMWGR4oE7wZDyExJOlly8SELeVZlcdwqo8225gXL70JbRyj5t/1v+h NqVN3eO7XWTWv6malIdLzNlK8Au4fkKKMLSCDsEzKeyP9r6x2oGxF03RWVXWZCMU GXJAEj27WZfOjbuQm3za2MQc4PHQGiqBbzTWdPG8QggZL1ThJszsbIAVgW4Gd/M5 kZYlJvWLAGArAhBce9QUO1Lnx3XgsRifmPECrxPajsPpNh3Vgg37D9P19rrTG+Xd GXGWRyKMOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:39 2026 by rpki-client