This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json) Hash identifier: 1Ycr1ybSTTtuQ7+m9ez7Byrb6UcEvhQAo9pJb4LX0oM= Subject key identifier: 4B:FB:01:E5:DE:BA:ED:99:A0:F5:E7:5D:89:06:17:D1:DF:41:A8:6E Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 486D572252C3DCAF74E99F3C04ECD5B62F1E2132 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:45:57 +0000 Manifest this update: Sun 25 Jan 2026 07:40:57 +0000 Manifest next update: Mon 26 Jan 2026 10:10:57 +0000 Files and hashes: 1: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=) 2: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=) 3: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: pA+sC+Nkbv4bWFu2RRcLn66qak72BwEizKxyUHwTL84=) 4: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=) 5: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=) 6: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=) 7: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=) 8: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=) 9: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=) 10: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=) 11: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=) 12: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:6d:57:22:52:c3:dc:af:74:e9:9f:3c:04:ec:d5:b6:2f:1e:21:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Jan 25 07:40:57 2026 GMT Not After : Jan 26 10:10:57 2026 GMT Subject: CN=4BFB01E5DEBAED99A0F5E75D890617D1DF41A86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:ee:3f:8f:aa:24:85:17:89:05:74:8d:0f: 8f:c9:06:0a:90:85:d8:21:01:5e:47:26:89:78:80: f6:f3:6e:db:d7:84:a3:5d:ff:b9:25:58:df:82:af: 99:94:70:cf:d6:d9:28:5e:ce:88:e0:9b:5e:e3:af: ed:66:36:17:9e:be:84:a1:5f:c3:e0:4f:79:d1:8f: 76:ee:92:2f:31:79:c9:40:3e:a2:e8:94:21:3b:1e: 24:51:69:b4:52:1f:da:29:41:45:bb:7a:95:d2:a4: 63:77:a2:45:4e:0e:fb:d7:20:67:67:6d:d4:d4:ca: df:6a:50:93:85:35:17:c8:73:cc:9b:94:f1:7f:12: 6a:6a:ea:2a:ad:86:68:68:04:6f:ae:a5:59:3f:f7: 85:1c:a5:db:92:86:ce:77:34:6a:de:53:9e:9d:86: d1:5a:d9:28:6c:26:36:2c:2d:25:55:17:f5:7c:5e: 69:e6:c8:3f:ee:fc:43:8e:a9:79:d7:da:83:0c:02: 64:c9:52:8f:4f:75:20:9f:f9:8f:af:fb:78:37:ed: 34:c6:5e:4e:12:68:cb:2c:15:eb:a4:0e:f0:cc:91: bc:56:0e:4b:d1:ba:6f:e3:1b:af:e1:57:18:0e:72: 61:23:57:01:b1:e5:24:3f:ff:92:38:54:d0:49:ae: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:01:E5:DE:BA:ED:99:A0:F5:E7:5D:89:06:17:D1:DF:41:A8:6E X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ab:15:3a:3c:bb:74:7a:0c:52:4b:53:8c:e8:9b:2b:93:7c: e6:52:47:cc:50:f3:85:7e:fb:32:bd:a6:4c:28:3c:39:46:68: 2c:f8:c9:1c:03:16:1e:49:1c:5c:e7:d8:44:d6:73:2b:09:28: 94:69:9f:a8:9a:9c:39:af:27:e7:ce:9c:c4:24:76:60:84:51: 22:cb:87:c4:c0:2d:fa:b0:d2:50:3e:b3:88:04:d6:a5:6a:a6: c5:99:8c:e7:5a:25:74:07:63:87:8c:3a:d6:46:d2:85:ab:94: 0c:c2:53:22:88:51:fd:7f:1c:fa:64:3d:98:6e:a2:d1:89:d2: 03:3e:ca:97:46:7d:33:a4:f8:c1:e5:9f:07:e6:9f:dc:ec:5a: 06:f2:43:69:32:84:b9:0e:f2:d2:16:86:57:02:63:9a:29:de: 6a:9b:3c:c0:6a:3b:aa:87:2e:cf:a2:5e:88:96:97:cb:cb:c9: 28:cc:18:3d:45:62:df:7f:e5:fe:09:4e:6b:06:0b:6e:c6:47: ab:c2:cb:28:01:72:49:55:6a:4b:45:d2:29:81:24:85:63:89: af:66:41:7d:0a:7c:d1:ca:57:4d:30:a4:60:52:68:53:57:7e: f2:eb:1c:42:8e:6c:4d:4b:37:e0:6b:8e:2f:8b:df:c5:d8:92: 8d:51:ed:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSG1XIlLD3K906Z88BOzVti8eITIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAxMjUwNzQwNTdaFw0yNjAxMjYxMDEwNTdaMDMxMTAvBgNV BAMTKDRCRkIwMUU1REVCQUVEOTlBMEY1RTc1RDg5MDYxN0QxREY0MUE4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2u4/j6okhReJBXSND4/JBgqQ hdghAV5HJol4gPbzbtvXhKNd/7klWN+Cr5mUcM/W2Shezojgm17jr+1mNheevoSh X8PgT3nRj3buki8xeclAPqLolCE7HiRRabRSH9opQUW7epXSpGN3okVODvvXIGdn bdTUyt9qUJOFNRfIc8yblPF/Empq6iqthmhoBG+upVk/94UcpduShs53NGreU56d htFa2ShsJjYsLSVVF/V8XmnmyD/u/EOOqXnX2oMMAmTJUo9PdSCf+Y+v+3g37TTG Xk4SaMssFeukDvDMkbxWDkvRum/jG6/hVxgOcmEjVwGx5SQ//5I4VNBJroLnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS/sB5d667Zmg9eddiQYX0d9BqG4wHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6sVOjy7dHoM UktTjOibK5N85lJHzFDzhX77Mr2mTCg8OUZoLPjJHAMWHkkcXOfYRNZzKwkolGmf qJqcOa8n586cxCR2YIRRIsuHxMAt+rDSUD6ziATWpWqmxZmM51oldAdjh4w61kbS hauUDMJTIohR/X8c+mQ9mG6i0YnSAz7Kl0Z9M6T4weWfB+af3OxaBvJDaTKEuQ7y 0haGVwJjmineaps8wGo7qocuz6JeiJaXy8vJKMwYPUVi33/l/glOawYLbsZHq8LL KAFySVVqS0XSKYEkhWOJr2ZBfQp80cpXTTCkYFJoU1d+8uscQo5sTUs34GuOL4vf xdiSjVHtXw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:05 2026 by rpki-client