This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: nsquMzdk/bfdaVyN29dma8swvaLEg1CmYlcubWQXlbY= Subject key identifier: 02:AD:29:AE:61:09:42:70:6A:70:3B:0D:E8:6B:7C:2D:B3:86:E6:85 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 1C0CBF8C3F2BD959CC9957EF0BBC8FEBF8BF4158 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 19:15:57 +0000 Manifest this update: Sat 24 Jan 2026 19:10:57 +0000 Manifest next update: Sun 25 Jan 2026 22:55:57 +0000 Files and hashes: 1: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: +l5gnQrDTR1ZM2FkdW4TVsEz+Xk6mb0bihHWbvpf5z4=) 2: 3130332e32302e34362e302f32342d3234203d3e203137343038.roa (hash: Cqxt0WZEcv/CrX8zUgyTIyMtPh2X566qKRuS9+MgsQI=) 3: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0c:bf:8c:3f:2b:d9:59:cc:99:57:ef:0b:bc:8f:eb:f8:bf:41:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Jan 24 19:10:57 2026 GMT Not After : Jan 25 22:55:57 2026 GMT Subject: CN=02AD29AE610942706A703B0DE86B7C2DB386E685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:14:32:fc:a6:58:6e:1a:d0:eb:a7:93:e0: ae:7f:3a:21:fa:5e:59:69:26:3c:f2:1f:e5:9d:6a: 44:f4:9e:cf:d4:41:5a:6b:7c:2c:f0:4f:2c:6c:ad: d6:55:4a:10:4c:e9:00:0c:d4:ba:6d:15:3c:87:ce: eb:cf:59:a0:39:a5:ab:ee:2d:06:85:46:1a:45:bb: 8c:46:7c:50:65:6f:d2:1e:65:ec:ee:87:5a:ab:a3: 71:e2:50:01:ae:fd:94:14:69:d9:8b:6c:b3:50:8f: 34:cb:80:f3:29:d3:2e:e2:d5:9b:4a:d2:ed:1d:07: 14:6a:00:91:b4:0c:7d:b7:37:2b:d4:b1:7e:9f:90: c0:08:f7:87:bc:a4:20:88:b2:a4:79:3b:cc:33:7b: e8:57:ca:57:22:a6:33:db:8c:6d:bc:1b:f7:95:db: 0c:81:ed:9b:05:1e:cf:29:e8:99:3c:93:7b:cd:c8: 8b:4a:d6:16:51:44:7b:68:cd:02:28:9a:a0:ff:ef: 98:52:22:18:35:45:22:17:33:09:01:01:5d:19:35: 3c:75:c8:b7:8b:15:1c:65:c8:03:31:0e:c6:dc:74: f9:fa:17:d7:97:62:aa:78:25:2f:10:57:ea:aa:56: a6:61:0f:bb:5c:a1:47:c9:c9:25:8c:89:2c:20:c3: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:29:AE:61:09:42:70:6A:70:3B:0D:E8:6B:7C:2D:B3:86:E6:85 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:87:e1:3c:66:16:a5:01:28:fe:bc:83:de:64:a8:18:57:76: e0:e4:03:ee:6c:4e:f4:f1:00:d3:cf:42:c4:48:ba:8b:ad:18: ea:3b:25:17:57:1a:97:b3:f0:d9:b9:c7:7e:30:65:91:bb:7c: b0:45:8e:87:8e:fe:73:54:16:7c:92:f4:d4:d0:21:cb:b3:49: 1b:a3:74:52:0a:00:07:6e:70:98:67:03:9f:e9:5e:62:e8:13: 68:11:c8:ce:2a:57:b9:20:da:61:b7:6c:b4:be:7f:fd:52:58: 4e:47:c7:f1:21:6c:52:20:14:2e:0d:59:66:d0:c6:89:a4:29: e9:4c:f7:88:06:ff:b5:21:41:20:51:23:d2:36:11:92:d5:81: 50:b8:bd:19:a9:76:68:4e:96:c5:1e:65:89:de:91:42:00:cc: 4f:65:e8:4a:47:12:35:01:06:1e:3f:f2:20:0e:1b:8a:a3:68: 39:86:d9:ba:e7:2f:cc:7f:74:52:bd:3c:de:e3:99:22:ea:5d: 74:ce:42:c1:9c:e0:7f:7c:d3:e5:72:3b:4c:4f:7c:36:be:39: e5:41:a8:72:84:21:18:6c:03:0c:fe:11:6c:93:fd:52:bb:97: f8:68:69:7f:bf:c4:c3:98:35:3d:d6:6f:9f:aa:b6:c2:9a:46: dd:4e:82:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHAy/jD8r2VnMmVfvC7yP6/i/QVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjAxMjQxOTEwNTdaFw0yNjAxMjUyMjU1NTdaMDMxMTAvBgNV BAMTKDAyQUQyOUFFNjEwOTQyNzA2QTcwM0IwREU4NkI3QzJEQjM4NkU2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3RQy/KZYbhrQ66eT4K5/OiH6 XllpJjzyH+WdakT0ns/UQVprfCzwTyxsrdZVShBM6QAM1LptFTyHzuvPWaA5pavu LQaFRhpFu4xGfFBlb9IeZezuh1qro3HiUAGu/ZQUadmLbLNQjzTLgPMp0y7i1ZtK 0u0dBxRqAJG0DH23NyvUsX6fkMAI94e8pCCIsqR5O8wze+hXylcipjPbjG28G/eV 2wyB7ZsFHs8p6Jk8k3vNyItK1hZRRHtozQIomqD/75hSIhg1RSIXMwkBAV0ZNTx1 yLeLFRxlyAMxDsbcdPn6F9eXYqp4JS8QV+qqVqZhD7tcoUfJySWMiSwgw0KhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAq0prmEJQnBqcDsN6Gt8LbOG5oUwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA24fhPGYWpQEo /ryD3mSoGFd24OQD7mxO9PEA089CxEi6i60Y6jslF1cal7Pw2bnHfjBlkbt8sEWO h47+c1QWfJL01NAhy7NJG6N0UgoAB25wmGcDn+leYugTaBHIzipXuSDaYbdstL5/ /VJYTkfH8SFsUiAULg1ZZtDGiaQp6Uz3iAb/tSFBIFEj0jYRktWBULi9Gal2aE6W xR5lid6RQgDMT2XoSkcSNQEGHj/yIA4biqNoOYbZuucvzH90Ur083uOZIupddM5C wZzgf3zT5XI7TE98Nr455UGocoQhGGwDDP4RbJP9UruX+Ghpf7/Ew5g1PdZvn6q2 wppG3U6C4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:46 2026 by rpki-client