This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: ukFZ5VXr8rGUTz+RU+5wdc/JhfNw0P5MFRKPDo4tgr8= Subject key identifier: 46:5E:2F:94:58:28:BA:8F:33:34:64:98:0E:1F:72:0E:98:51:89:2C Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 73E4E32042320218B41DF2A6B84D25F3E40A27A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 02:45:57 +0000 Manifest this update: Sun 25 Jan 2026 02:40:57 +0000 Manifest next update: Mon 26 Jan 2026 06:18:57 +0000 Files and hashes: 1: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 2: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: fl+plsSJjYU4YcB04j7kX2mUg9dez1xFzpat8jBVdTo=) 3: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e4:e3:20:42:32:02:18:b4:1d:f2:a6:b8:4d:25:f3:e4:0a:27:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Jan 25 02:40:57 2026 GMT Not After : Jan 26 06:18:57 2026 GMT Subject: CN=465E2F945828BA8F333464980E1F720E9851892C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:22:bd:c8:76:2e:45:f0:f4:6e:7a:26:55: 7f:f5:ad:3a:16:5e:b7:39:13:16:01:05:74:18:d2: b3:df:27:c7:60:d1:1d:75:64:50:74:fe:d5:44:68: 88:31:ad:9a:35:d7:1e:d3:51:dc:d3:0c:27:66:38: ce:b0:68:83:31:29:99:0f:38:82:f9:32:d7:19:d3: 5b:b0:b0:e8:35:a7:e3:e8:a1:20:ea:2c:d0:d3:9a: d3:1b:15:c1:85:14:77:00:dc:29:77:02:a8:d8:71: 47:22:13:0f:8d:a6:4b:74:2a:d9:26:2c:28:40:60: b1:25:79:ca:57:b4:f6:48:82:29:e5:6e:53:0b:37: e0:b1:3e:b1:87:cc:fa:cc:c6:a9:8d:aa:74:af:33: 8e:34:1d:04:39:71:d1:3d:30:18:3e:2c:5b:f8:5c: 63:27:41:04:be:35:7c:bb:ff:8e:5a:dd:d2:9d:d9: 17:02:15:3a:1f:4e:36:c8:d0:21:ae:25:76:ba:2d: 05:67:25:6f:20:7b:d0:71:f4:b0:ee:cf:4a:c1:a7: b7:92:e7:bb:b7:d2:75:79:46:33:99:df:5d:8f:a6: af:18:4c:b9:0e:e3:30:21:57:41:3a:63:01:fb:e9: 8c:22:b2:f1:6e:3f:63:65:8a:b1:2d:28:73:d9:d5: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:2F:94:58:28:BA:8F:33:34:64:98:0E:1F:72:0E:98:51:89:2C X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c3:ee:a0:e8:de:c7:f6:c5:c8:81:39:3d:46:7d:01:09:b5: f8:1f:21:36:27:f7:36:df:6d:84:da:25:a5:d7:b3:59:e2:19: 00:fb:fb:0f:52:f1:1e:9c:3f:c4:13:03:a2:a0:10:2a:33:2f: 08:3c:f7:9d:dd:51:99:cf:7b:d4:2a:ed:dd:89:91:4d:e2:05: 99:81:51:a4:e9:11:79:d7:ba:ed:5b:64:4b:ab:fc:b6:da:f9: 80:34:ea:d7:22:98:07:96:29:b4:88:19:36:3e:d4:37:eb:06: 1c:01:14:74:40:56:dd:c7:fc:3f:74:e5:56:08:34:13:72:9f: a6:ec:2b:d6:bb:ea:cb:da:40:ca:e0:bf:d6:82:7f:69:47:a6: e7:8f:3c:4f:f6:35:75:ab:76:3b:07:d2:35:c7:1d:0d:bd:67: d4:77:de:7d:6e:97:69:b6:e8:3c:a3:79:79:2b:4f:f8:bd:f0: a1:05:62:28:dc:18:fb:3e:d7:b8:65:6d:72:ab:6d:f0:5b:8f: 82:32:76:d8:53:3a:22:31:a3:db:18:57:4d:0f:a6:92:7a:13: 47:e9:cc:47:98:48:c8:46:00:ca:ef:d8:f0:11:68:e6:3e:c3: 2b:f2:94:08:4c:45:38:44:8b:29:81:7f:85:36:89:2c:18:20: 3d:8f:32:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc+TjIEIyAhi0HfKmuE0l8+QKJ6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjAxMjUwMjQwNTdaFw0yNjAxMjYwNjE4NTdaMDMxMTAvBgNV BAMTKDQ2NUUyRjk0NTgyOEJBOEYzMzM0NjQ5ODBFMUY3MjBFOTg1MTg5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOSyK9yHYuRfD0bnomVX/1rToW Xrc5ExYBBXQY0rPfJ8dg0R11ZFB0/tVEaIgxrZo11x7TUdzTDCdmOM6waIMxKZkP OIL5MtcZ01uwsOg1p+PooSDqLNDTmtMbFcGFFHcA3Cl3AqjYcUciEw+Npkt0Ktkm LChAYLElecpXtPZIginlblMLN+CxPrGHzPrMxqmNqnSvM440HQQ5cdE9MBg+LFv4 XGMnQQS+NXy7/45a3dKd2RcCFTofTjbI0CGuJXa6LQVnJW8ge9Bx9LDuz0rBp7eS 57u30nV5RjOZ312Ppq8YTLkO4zAhV0E6YwH76YwisvFuP2NlirEtKHPZ1ZpJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURl4vlFgouo8zNGSYDh9yDphRiSwwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8PuoOjex/bF yIE5PUZ9AQm1+B8hNif3Nt9thNolpdezWeIZAPv7D1LxHpw/xBMDoqAQKjMvCDz3 nd1Rmc971Crt3YmRTeIFmYFRpOkRede67VtkS6v8ttr5gDTq1yKYB5YptIgZNj7U N+sGHAEUdEBW3cf8P3TlVgg0E3Kfpuwr1rvqy9pAyuC/1oJ/aUem5488T/Y1dat2 OwfSNccdDb1n1HfefW6XabboPKN5eStP+L3woQViKNwY+z7XuGVtcqtt8FuPgjJ2 2FM6IjGj2xhXTQ+mknoTR+nMR5hIyEYAyu/Y8BFo5j7DK/KUCExFOESLKYF/hTaJ LBggPY8ycw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:16 2026 by rpki-client