This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: O+z9pq0RW+jVrZjt1R5aSlK4gFdnlL6J6N/m+4/XObc= Subject key identifier: 24:60:3B:9A:B5:8A:D0:D8:95:D8:3C:F7:9B:A8:1C:89:61:0F:C3:EB Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 64EE46C8E7EAACC5CDF464EE6DF6F5E91A1E5C54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 18:05:57 +0000 Manifest this update: Sat 24 Jan 2026 18:00:57 +0000 Manifest next update: Sun 25 Jan 2026 20:59:57 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: hkFGVgnZ/tivCWRi9zEtmb/w+5x/XEOo+S3T+KlSiZk=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ee:46:c8:e7:ea:ac:c5:cd:f4:64:ee:6d:f6:f5:e9:1a:1e:5c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Jan 24 18:00:57 2026 GMT Not After : Jan 25 20:59:57 2026 GMT Subject: CN=24603B9AB58AD0D895D83CF79BA81C89610FC3EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:fd:01:c0:91:a9:fa:00:32:a8:41:68:e4: 49:f8:da:8a:dc:9b:12:36:1d:10:3f:1b:a2:b5:2c: df:43:41:61:50:71:9a:0f:d9:39:85:ce:a6:b1:69: ff:f1:c4:a6:a6:48:4d:ce:1e:f2:e5:dc:0a:19:8d: 80:38:27:b7:24:10:95:c3:93:52:b2:d0:6c:00:aa: 9b:57:4f:e7:62:e4:4c:c3:9f:fb:f8:66:70:39:9f: 30:71:43:b1:e3:a5:2d:18:bc:69:59:ef:72:d2:30: ed:00:8f:d8:b9:6b:58:26:d9:e4:37:5a:28:48:af: dd:fe:3a:48:be:cb:36:c2:9b:83:86:3d:4d:87:2c: ac:8d:43:ef:ec:ff:c8:8d:49:e3:fc:9e:b1:9d:8d: bd:10:0c:c9:6c:43:e8:15:4a:4d:21:7c:9d:66:2e: e0:8c:36:0f:4e:14:75:ca:c9:da:5d:b9:22:6d:ed: 0f:e1:54:0c:6d:69:c1:99:bd:f3:14:77:20:7e:14: eb:d3:07:db:49:f6:c9:a2:e7:6c:c8:93:b2:ae:52: 37:c9:5a:52:29:b5:f0:14:fd:9a:1b:9d:54:54:3a: 94:2e:ba:9d:c2:31:b0:8e:37:c4:81:62:1c:98:69: 79:81:b6:71:de:62:cd:ee:42:32:bc:71:8c:39:d2: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:3B:9A:B5:8A:D0:D8:95:D8:3C:F7:9B:A8:1C:89:61:0F:C3:EB X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:43:7c:0f:3d:b3:89:45:01:65:af:a1:a5:03:04:2b:51:44: ab:f8:d4:41:e0:bb:27:16:20:90:31:5d:1a:8d:03:e7:fb:99: a6:f0:22:f4:6a:64:45:8a:ed:46:c8:6a:42:76:35:a6:a8:88: a0:e7:de:4f:1e:6a:b3:e5:45:7b:33:cd:92:8f:7b:e8:ac:a0: 70:16:76:af:d0:3d:11:ec:59:dd:6b:96:cc:e3:d9:68:8f:15: 74:03:8f:34:82:ca:af:d9:af:bf:d2:37:fa:a2:74:69:f3:3e: be:2c:af:0a:b2:28:cc:08:d0:f4:42:96:af:94:e6:bd:84:5b: 9e:4c:8b:55:34:53:80:cc:c3:29:e9:66:b8:e4:c2:16:c7:1c: 7b:a5:f1:2f:b2:25:12:93:e7:19:46:20:76:22:f5:d0:85:a3: 5e:55:05:fc:c6:96:ed:18:1d:9b:2a:8c:59:e2:c6:24:d5:a2: 7c:ee:12:32:34:cb:69:4d:df:26:b9:e5:c7:06:28:98:82:03: ba:db:b5:43:25:3e:5d:68:ae:8a:bf:02:42:d9:10:21:fb:5e: 50:fc:3c:17:ef:6a:2b:67:70:46:af:09:d4:89:91:12:b4:70: ab:a9:c0:7c:ab:db:9c:6c:49:0e:a0:6c:95:18:cf:36:d4:b6: 41:7a:b6:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZO5GyOfqrMXN9GTubfb16RoeXFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjAxMjQxODAwNTdaFw0yNjAxMjUyMDU5NTdaMDMxMTAvBgNV BAMTKDI0NjAzQjlBQjU4QUQwRDg5NUQ4M0NGNzlCQTgxQzg5NjEwRkMzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLf0BwJGp+gAyqEFo5En42orc mxI2HRA/G6K1LN9DQWFQcZoP2TmFzqaxaf/xxKamSE3OHvLl3AoZjYA4J7ckEJXD k1Ky0GwAqptXT+di5EzDn/v4ZnA5nzBxQ7HjpS0YvGlZ73LSMO0Aj9i5a1gm2eQ3 WihIr93+Oki+yzbCm4OGPU2HLKyNQ+/s/8iNSeP8nrGdjb0QDMlsQ+gVSk0hfJ1m LuCMNg9OFHXKydpduSJt7Q/hVAxtacGZvfMUdyB+FOvTB9tJ9smi52zIk7KuUjfJ WlIptfAU/ZobnVRUOpQuup3CMbCON8SBYhyYaXmBtnHeYs3uQjK8cYw50rjZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJGA7mrWK0NiV2Dz3m6gciWEPw+swHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEN8Dz2ziUUB Za+hpQMEK1FEq/jUQeC7JxYgkDFdGo0D5/uZpvAi9GpkRYrtRshqQnY1pqiIoOfe Tx5qs+VFezPNko976KygcBZ2r9A9EexZ3WuWzOPZaI8VdAOPNILKr9mvv9I3+qJ0 afM+viyvCrIozAjQ9EKWr5TmvYRbnkyLVTRTgMzDKelmuOTCFscce6XxL7IlEpPn GUYgdiL10IWjXlUF/MaW7RgdmyqMWeLGJNWifO4SMjTLaU3fJrnlxwYomIIDutu1 QyU+XWiuir8CQtkQIfteUPw8F+9qK2dwRq8J1ImRErRwq6nAfKvbnGxJDqBslRjP NtS2QXq2OQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:22 2026 by rpki-client