This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: n5PL46sO9//gO/iMWxM9I1GROs3BJ9XS0d/R8oMgB+A= Subject key identifier: E4:C5:58:DC:52:EF:3E:46:8C:AA:8E:19:30:B2:87:B8:51:91:6B:19 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 6E9FFCC582CFAF29CDC82AC5291D2309E0590F32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 10:16:02 +0000 Manifest this update: Sun 25 Jan 2026 10:11:02 +0000 Manifest next update: Mon 26 Jan 2026 12:24:02 +0000 Files and hashes: 1: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 2: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: w+a+98l+ipqvo7Peo/6lCiU+BiGjNNO8/HDezx/6WME=) 3: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9f:fc:c5:82:cf:af:29:cd:c8:2a:c5:29:1d:23:09:e0:59:0f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Jan 25 10:11:02 2026 GMT Not After : Jan 26 12:24:02 2026 GMT Subject: CN=E4C558DC52EF3E468CAA8E1930B287B851916B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:57:1c:21:d3:b2:fb:9b:61:91:60:12:8b: 27:62:e3:c3:0f:b0:8b:e5:39:ea:e4:a6:5e:e2:83: 72:05:51:88:5c:2a:b6:2c:23:88:0a:29:d1:a6:94: 1b:bf:f9:ff:40:88:25:58:c9:22:b7:a7:84:0a:16: fd:ba:63:65:ac:95:3c:73:7b:56:21:a4:7d:1d:28: 03:c3:51:6a:e0:0e:a7:fa:73:37:a8:fe:2a:79:d9: 31:b0:d8:1c:26:99:18:88:73:71:ad:5b:fd:4c:60: e0:37:6e:4d:5c:e7:96:ea:d5:5e:ba:bc:40:47:b3: 7e:ae:0e:e0:e1:dd:95:7b:f6:f0:00:ea:ba:65:ef: cf:54:97:de:25:38:6c:bb:1e:84:41:bb:86:87:97: 12:7e:60:25:0d:ce:bf:6c:52:76:06:03:60:fe:21: f9:d2:ba:a6:0c:7a:2b:17:23:42:fb:37:69:2a:25: af:66:18:48:5b:36:7a:97:94:fa:01:d4:6b:76:d6: fe:94:42:47:56:76:27:71:bf:cb:bb:f1:ec:87:f5: 86:fd:fc:d8:73:ab:6a:d6:50:80:89:18:d9:a4:29: 29:04:0d:b0:5a:0e:ea:fe:53:d9:f5:9a:e0:77:79: 80:f1:12:51:9c:60:a5:67:c7:aa:c8:1f:25:65:4b: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:58:DC:52:EF:3E:46:8C:AA:8E:19:30:B2:87:B8:51:91:6B:19 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c3:06:f5:02:3f:c9:9c:2f:34:67:04:13:74:fb:53:3b:a1: 93:a7:6c:7f:67:91:80:00:2d:27:43:19:67:09:96:bf:d5:c3: a7:88:9a:0a:be:06:45:69:68:45:ec:81:b8:d3:c7:92:c7:bd: 85:2c:fa:2f:81:6c:9b:18:bd:91:65:b4:e2:ee:a9:db:c9:f5: 98:24:50:02:77:5d:c0:c6:ea:07:61:96:63:a9:e7:66:30:5f: 27:d2:9b:2b:bc:d5:00:7d:68:2a:d5:67:dc:9a:1c:48:b5:17: 81:92:48:57:4a:d1:a5:69:cd:6e:84:54:4e:ef:9c:33:7b:0e: da:ee:8c:9e:92:c1:18:7f:6b:a1:0d:8e:fc:6d:9e:6a:54:43: 02:d8:fa:a4:37:d8:72:51:cb:11:e4:3a:5b:53:7b:41:e9:be: bb:aa:6d:75:cf:37:a3:87:e0:d8:1c:d4:cc:96:d2:0e:26:75: 7a:f9:c8:5e:c5:98:52:ef:22:72:b8:75:5b:57:33:5c:8d:dc: 05:6e:d1:50:00:de:f8:dd:67:8a:0c:39:5b:32:69:2b:73:82: 2f:33:b9:56:7a:b8:c9:bf:6f:6a:a4:f4:0c:2d:41:ae:c7:06: bd:9a:a7:3f:88:0d:53:6c:9e:d6:f9:85:69:16:f8:f8:ef:96: 18:9d:15:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbp/8xYLPrynNyCrFKR0jCeBZDzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjAxMjUxMDExMDJaFw0yNjAxMjYxMjI0MDJaMDMxMTAvBgNV BAMTKEU0QzU1OERDNTJFRjNFNDY4Q0FBOEUxOTMwQjI4N0I4NTE5MTZCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIVccIdOy+5thkWASiydi48MP sIvlOerkpl7ig3IFUYhcKrYsI4gKKdGmlBu/+f9AiCVYySK3p4QKFv26Y2WslTxz e1YhpH0dKAPDUWrgDqf6czeo/ip52TGw2BwmmRiIc3GtW/1MYOA3bk1c55bq1V66 vEBHs36uDuDh3ZV79vAA6rpl789Ul94lOGy7HoRBu4aHlxJ+YCUNzr9sUnYGA2D+ IfnSuqYMeisXI0L7N2kqJa9mGEhbNnqXlPoB1Gt21v6UQkdWdidxv8u78eyH9Yb9 /Nhzq2rWUICJGNmkKSkEDbBaDur+U9n1muB3eYDxElGcYKVnx6rIHyVlS1fHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5MVY3FLvPkaMqo4ZMLKHuFGRaxkwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcMG9QI/yZwv NGcEE3T7Uzuhk6dsf2eRgAAtJ0MZZwmWv9XDp4iaCr4GRWloReyBuNPHkse9hSz6 L4Fsmxi9kWW04u6p28n1mCRQAnddwMbqB2GWY6nnZjBfJ9KbK7zVAH1oKtVn3Joc SLUXgZJIV0rRpWnNboRUTu+cM3sO2u6MnpLBGH9roQ2O/G2ealRDAtj6pDfYclHL EeQ6W1N7Qem+u6ptdc83o4fg2BzUzJbSDiZ1evnIXsWYUu8icrh1W1czXI3cBW7R UADe+N1nigw5WzJpK3OCLzO5Vnq4yb9vaqT0DC1BrscGvZqnP4gNU2ye1vmFaRb4 +O+WGJ0VqA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:31 2026 by rpki-client