This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: XJdEQrFajp54hzwFBXfptSdbj3wbPEOnrSu+wed52ac= Subject key identifier: 51:17:E4:32:A0:15:30:8E:89:79:98:96:32:24:23:9F:74:B6:F7:D8 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 505826A7A3F27045D47BB356F9DE1C40FFFCEBC9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:55:57 +0000 Manifest this update: Sun 25 Jan 2026 03:50:57 +0000 Manifest next update: Mon 26 Jan 2026 07:33:57 +0000 Files and hashes: 1: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: 38O2a4Z037LwaieGgKn8KfcTtNeG4ZT/26RRiYr4+Go=) 3: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:58:26:a7:a3:f2:70:45:d4:7b:b3:56:f9:de:1c:40:ff:fc:eb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Jan 25 03:50:57 2026 GMT Not After : Jan 26 07:33:57 2026 GMT Subject: CN=5117E432A015308E897998963224239F74B6F7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:8d:10:a1:72:fd:f6:4f:35:34:75:e5:f1: 6d:6b:17:ea:4b:5f:99:87:6c:10:f1:03:6c:78:2d: 79:d8:ec:5f:40:ed:87:c3:5e:c4:98:f6:4e:3d:0c: 3b:d4:78:53:18:75:f7:4b:e2:32:db:47:c0:b4:d9: 28:a5:65:a4:8f:e2:74:72:dc:cd:26:67:39:28:cc: 81:62:d7:e0:10:d4:d5:27:f2:bd:86:74:43:af:97: 03:89:de:4a:16:0c:a8:48:a5:23:b7:ea:09:11:07: d9:2a:bf:db:11:77:9b:c5:97:cc:66:ed:bd:20:15: 73:aa:f2:5e:ff:30:78:77:5e:6f:84:ef:39:3a:a1: b5:50:7a:5a:e5:bc:46:52:ab:46:22:a9:7e:a1:9a: d5:04:a5:09:5c:9b:94:d4:44:db:4d:d5:12:09:4c: 06:82:42:cb:96:f6:02:7a:c5:93:b1:14:7a:b2:9e: cb:71:4a:e9:86:91:1d:d9:16:22:38:de:2d:f1:12: 76:96:46:b3:e0:25:b4:ba:29:1c:5d:a9:10:31:a5: 36:ad:db:c3:c7:c8:f9:54:85:bd:a2:f6:6d:c2:c2: ff:61:dc:63:6e:4f:77:5e:a8:bb:f1:f2:d7:9a:3e: 19:c6:2c:f4:13:09:c6:a7:83:06:d0:d7:f0:fc:31: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:E4:32:A0:15:30:8E:89:79:98:96:32:24:23:9F:74:B6:F7:D8 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4b:dd:ab:e1:99:2a:bd:46:01:11:bd:73:5a:c1:bf:a5:43: fc:88:04:b1:17:75:f9:0e:10:5c:3c:ce:b1:55:35:a5:22:d1: 76:72:0b:49:4c:09:1e:01:a5:29:e3:a6:41:c7:90:d6:9a:8f: ee:ed:6f:50:87:0b:f3:49:59:77:d1:30:b9:25:98:2c:58:32: 59:9b:d4:05:2b:ad:72:59:9e:94:00:74:4f:1f:80:cf:eb:36: 7c:44:a6:dc:49:77:62:19:0f:ca:0a:63:99:e4:0b:a8:52:27: da:01:df:10:c6:58:9e:5f:ff:f9:a9:42:4b:96:7a:a3:cb:88: 8e:ea:d5:74:72:dd:e0:8c:04:83:7b:c7:a3:e0:b5:a3:2e:3a: 5c:bc:1f:81:16:03:64:5f:21:b0:15:39:86:e0:d5:92:4d:e9: 2a:39:93:10:c1:b4:71:5d:7d:bc:9f:10:ac:9f:fe:9b:b2:2f: cf:02:86:c3:4d:d0:f1:c1:52:15:5e:46:29:16:0f:02:01:d8: 92:75:8a:35:4a:6c:a3:a5:03:73:d8:94:eb:70:18:55:65:d4: 4e:5d:70:d1:69:f9:0a:98:ea:11:93:e3:9b:92:c5:52:b4:d5: 05:0d:62:6b:5c:5a:fc:2c:a3:24:df:0a:d3:78:90:0d:68:eb: a8:d4:ea:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUFgmp6PycEXUe7NW+d4cQP/868kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjAxMjUwMzUwNTdaFw0yNjAxMjYwNzMzNTdaMDMxMTAvBgNV BAMTKDUxMTdFNDMyQTAxNTMwOEU4OTc5OTg5NjMyMjQyMzlGNzRCNkY3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+Y0QoXL99k81NHXl8W1rF+pL X5mHbBDxA2x4LXnY7F9A7YfDXsSY9k49DDvUeFMYdfdL4jLbR8C02SilZaSP4nRy 3M0mZzkozIFi1+AQ1NUn8r2GdEOvlwOJ3koWDKhIpSO36gkRB9kqv9sRd5vFl8xm 7b0gFXOq8l7/MHh3Xm+E7zk6obVQelrlvEZSq0YiqX6hmtUEpQlcm5TURNtN1RIJ TAaCQsuW9gJ6xZOxFHqynstxSumGkR3ZFiI43i3xEnaWRrPgJbS6KRxdqRAxpTat 28PHyPlUhb2i9m3Cwv9h3GNuT3deqLvx8teaPhnGLPQTCcangwbQ1/D8MaDZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUURfkMqAVMI6JeZiWMiQjn3S299gwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkvdq+GZKr1G ARG9c1rBv6VD/IgEsRd1+Q4QXDzOsVU1pSLRdnILSUwJHgGlKeOmQceQ1pqP7u1v UIcL80lZd9EwuSWYLFgyWZvUBSutclmelAB0Tx+Az+s2fESm3El3YhkPygpjmeQL qFIn2gHfEMZYnl//+alCS5Z6o8uIjurVdHLd4IwEg3vHo+C1oy46XLwfgRYDZF8h sBU5huDVkk3pKjmTEMG0cV19vJ8QrJ/+m7IvzwKGw03Q8cFSFV5GKRYPAgHYknWK NUpso6UDc9iU63AYVWXUTl1w0Wn5CpjqEZPjm5LFUrTVBQ1ia1xa/CyjJN8K03iQ DWjrqNTq1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:52 2026 by rpki-client