This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: 6N3NdF70YBulq4+FHpSa51W9ARSPtmrDVF9LKUghPaU= Subject key identifier: B6:B2:2B:5A:36:14:0B:A8:6B:05:99:29:65:37:25:A1:E6:B0:73:4A Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 3773F8035A44AA246BA1794F988A241467B746DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:45:57 +0000 Manifest this update: Sun 25 Jan 2026 03:40:57 +0000 Manifest next update: Mon 26 Jan 2026 06:07:57 +0000 Files and hashes: 1: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: PVsq5v7iZLIFIC14x90IOfs5ldM4XYstwm3SEN25ur8=) 2: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 3: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 4: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) 5: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) 6: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 7: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 8: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) 9: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 10: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) 11: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:f8:03:5a:44:aa:24:6b:a1:79:4f:98:8a:24:14:67:b7:46:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 25 03:40:57 2026 GMT Not After : Jan 26 06:07:57 2026 GMT Subject: CN=B6B22B5A36140BA86B059929653725A1E6B0734A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:89:91:c2:3d:42:ce:06:95:e4:a6:37:d6: 2d:64:0c:d7:d8:dc:09:c2:9d:a8:c9:f2:14:2e:1a: 42:8e:30:c0:69:8f:c6:b0:8d:fc:fd:7c:e2:31:8f: 3b:b3:c9:55:62:a9:68:e7:84:af:ab:f9:da:64:7e: 63:e8:e0:21:a3:e8:3e:53:77:fe:52:b3:1d:a4:ef: 0b:ea:6d:d2:5d:19:e0:05:c1:c0:83:84:c0:e7:5a: fd:91:aa:f5:3d:da:68:2a:86:24:07:4f:66:6e:47: bf:71:b7:d1:a4:e4:15:15:e9:f2:30:d6:c7:36:e5: 74:38:17:49:ce:f4:e1:ff:49:27:66:c6:2c:6d:56: 73:61:48:e1:c1:7b:d8:56:3f:a4:23:96:e5:c4:67: 7c:ad:71:95:95:c3:6f:0f:25:a9:cc:51:b0:51:96: ee:15:18:b2:2c:38:19:f1:0c:26:49:02:4f:b6:f9: ff:03:d2:26:0a:4c:ac:f3:60:a3:a6:31:66:f7:a4: 7c:eb:57:91:5a:b4:47:ee:14:a7:50:ab:dd:ba:8c: 61:0b:3c:e5:d1:50:54:dd:67:5e:bc:a6:e2:46:18: d7:bb:dd:a2:87:c3:47:8d:40:83:e4:66:fd:91:f1: c6:51:8f:27:a4:7f:56:13:3c:60:52:bd:44:e1:b5: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B2:2B:5A:36:14:0B:A8:6B:05:99:29:65:37:25:A1:E6:B0:73:4A X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:27:e9:ef:fd:ea:0f:14:70:a9:ea:53:09:e7:3f:02:ea: c8:a7:0f:5d:89:ed:a7:67:d5:94:b2:e3:31:df:3b:4f:e8:e9: 62:de:7d:56:1e:03:a5:bc:4e:6c:96:a3:f2:25:1f:7d:67:30: 66:98:ab:d4:89:84:16:f3:cd:d0:6a:6a:53:60:2b:8f:cc:ca: 09:c1:d7:c7:49:81:c4:0e:db:24:2f:79:f4:40:f5:59:38:8b: 21:cb:f6:38:53:d1:ea:19:b9:64:7b:8f:cb:ca:6f:3d:3b:ef: b0:74:c2:9b:96:9f:55:8c:0a:ec:94:02:35:28:d0:02:54:8b: b6:4a:97:a0:11:d6:c2:f8:10:c3:19:69:04:9e:21:7d:ad:3d: 93:ce:18:17:d3:b7:4a:2f:e9:54:2c:5a:53:49:dd:65:17:10: 06:41:2e:03:ac:9d:65:99:85:5b:d1:83:25:e2:61:2b:70:93: b0:d8:95:3a:65:98:14:64:ef:78:68:e2:70:44:28:61:c1:2c: ed:e4:99:e9:f8:24:35:85:e8:50:3d:e8:f8:51:21:93:50:bd: da:6b:09:58:e0:a0:37:0f:02:99:f6:9a:6d:0a:84:bc:f7:8d: 79:ec:e5:76:fa:4e:bf:12:85:8f:63:3b:47:0a:70:9b:17:f0: 58:4e:e6:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN3P4A1pEqiRroXlPmIokFGe3Rt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjUwMzQwNTdaFw0yNjAxMjYwNjA3NTdaMDMxMTAvBgNV BAMTKEI2QjIyQjVBMzYxNDBCQTg2QjA1OTkyOTY1MzcyNUExRTZCMDczNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXP4mRwj1CzgaV5KY31i1kDNfY 3AnCnajJ8hQuGkKOMMBpj8awjfz9fOIxjzuzyVViqWjnhK+r+dpkfmPo4CGj6D5T d/5Ssx2k7wvqbdJdGeAFwcCDhMDnWv2RqvU92mgqhiQHT2ZuR79xt9Gk5BUV6fIw 1sc25XQ4F0nO9OH/SSdmxixtVnNhSOHBe9hWP6QjluXEZ3ytcZWVw28PJanMUbBR lu4VGLIsOBnxDCZJAk+2+f8D0iYKTKzzYKOmMWb3pHzrV5FatEfuFKdQq926jGEL POXRUFTdZ168puJGGNe73aKHw0eNQIPkZv2R8cZRjyekf1YTPGBSvUThtZAtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtrIrWjYUC6hrBZkpZTcloeawc0owHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7Qn6e/96g8U cKnqUwnnPwLqyKcPXYntp2fVlLLjMd87T+jpYt59Vh4DpbxObJaj8iUffWcwZpir 1ImEFvPN0GpqU2Arj8zKCcHXx0mBxA7bJC959ED1WTiLIcv2OFPR6hm5ZHuPy8pv PTvvsHTCm5afVYwK7JQCNSjQAlSLtkqXoBHWwvgQwxlpBJ4hfa09k84YF9O3Si/p VCxaU0ndZRcQBkEuA6ydZZmFW9GDJeJhK3CTsNiVOmWYFGTveGjicEQoYcEs7eSZ 6fgkNYXoUD3o+FEhk1C92msJWOCgNw8CmfaabQqEvPeNeezldvpOvxKFj2M7Rwpw mxfwWE7mcQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:37 2026 by rpki-client