This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: W6H1fZaUi3QbeBwvaI+BCXLb28Io555JOHF0p0MAApY= Subject key identifier: 0B:73:BF:54:FF:8D:8C:CE:D3:8E:9B:F4:54:B5:57:17:6D:3E:A3:67 Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 1339746A4B8943FF641B25DD37963EF73D80E833 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 12:40:57 +0000 Manifest this update: Sat 24 Jan 2026 12:35:57 +0000 Manifest next update: Sun 25 Jan 2026 14:36:57 +0000 Files and hashes: 1: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 2: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 3: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 4: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 5: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: r5BTHqNQ6rZDPwOqF20nb+lTrDzuNMR5D8YMBVa/geE=) 6: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 7: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 8: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:39:74:6a:4b:89:43:ff:64:1b:25:dd:37:96:3e:f7:3d:80:e8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Jan 24 12:35:57 2026 GMT Not After : Jan 25 14:36:57 2026 GMT Subject: CN=0B73BF54FF8D8CCED38E9BF454B557176D3EA367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3d:94:1a:d6:49:d0:0c:a7:b4:48:ba:47:07: 1b:4d:0c:e6:a2:69:96:f0:3a:b1:16:26:e1:7f:42: d8:c4:d9:35:91:5a:a7:2b:55:b7:fc:f1:3a:2a:51: 02:46:16:f9:17:d8:66:b5:31:d2:8c:45:06:9f:c3: 37:8d:ed:84:b8:1b:53:14:35:67:9a:dc:d2:46:47: bf:60:c8:51:70:b5:d6:58:28:2e:3a:d2:11:30:55: 15:f9:af:84:8a:fa:2c:02:7e:1b:af:f9:cf:d6:8f: 0a:ff:16:61:76:7c:3a:1f:89:e8:18:c5:2e:f1:ea: b8:fb:44:d9:82:3b:ea:0c:73:ee:7c:c4:55:53:52: c1:52:a4:d6:5b:1f:46:a5:da:83:0d:b7:2c:21:ac: 8e:f4:58:b6:0f:50:8a:b4:f9:52:cf:6b:e8:43:ae: c6:58:96:d3:e7:cc:ee:c1:14:05:a7:a4:0a:eb:9c: 5a:53:f1:19:89:a6:50:bf:29:08:ba:3c:3c:60:2c: 4f:8c:ab:5a:6d:ee:01:ff:c5:4e:86:72:77:5f:82: ab:18:52:61:b2:f7:48:92:3d:cb:eb:85:d5:56:44: 23:67:39:ef:96:8a:45:45:c8:38:91:b9:fe:e1:42: 18:2e:31:7a:59:3f:82:ce:9f:0f:4b:34:51:9e:7a: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:73:BF:54:FF:8D:8C:CE:D3:8E:9B:F4:54:B5:57:17:6D:3E:A3:67 X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bf:44:5f:9d:94:5c:41:8d:cc:fa:0c:25:1f:15:a9:20:7a: 77:e1:00:f5:9c:cf:95:fe:1a:2e:52:0a:94:17:b7:a0:04:b7: f6:2b:93:29:5d:f1:95:ef:43:33:2b:ca:a7:6d:a5:fb:46:90: 73:2d:94:82:fc:b0:dc:64:ca:7a:09:77:b7:1e:cf:8c:50:b5: da:35:16:cf:9a:3e:ec:e5:86:4d:5c:05:e5:db:46:4d:be:51: cf:d0:bf:48:77:dd:f3:30:77:6a:55:ee:1f:93:7a:a6:2c:99: 53:3b:35:4b:19:2e:15:98:57:b6:50:75:23:55:68:fe:cd:98: c9:a5:a3:13:d6:75:bf:08:0e:0b:c0:10:ea:59:85:f9:36:c5: f6:8b:9d:53:90:be:8f:fa:60:a1:7f:64:33:a7:16:61:6f:55: 93:1a:c1:41:59:37:43:5e:b2:f1:6f:bd:82:4e:14:d0:9e:10: e2:a2:27:1f:df:46:db:a7:88:a8:8d:cb:96:9c:02:48:c1:30: 31:a4:c0:72:43:29:89:02:84:70:a5:84:3d:3a:6a:96:8a:47: 35:dd:5c:7a:71:7a:c7:e4:71:01:d7:66:f4:98:9f:44:75:c8: dc:d1:29:ff:e5:18:bf:fb:69:5d:68:29:39:ee:37:5d:4c:82: c6:3b:c3:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEzl0akuJQ/9kGyXdN5Y+9z2A6DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjAxMjQxMjM1NTdaFw0yNjAxMjUxNDM2NTdaMDMxMTAvBgNV BAMTKDBCNzNCRjU0RkY4RDhDQ0VEMzhFOUJGNDU0QjU1NzE3NkQzRUEzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuPZQa1knQDKe0SLpHBxtNDOai aZbwOrEWJuF/QtjE2TWRWqcrVbf88ToqUQJGFvkX2Ga1MdKMRQafwzeN7YS4G1MU NWea3NJGR79gyFFwtdZYKC460hEwVRX5r4SK+iwCfhuv+c/Wjwr/FmF2fDofiegY xS7x6rj7RNmCO+oMc+58xFVTUsFSpNZbH0al2oMNtywhrI70WLYPUIq0+VLPa+hD rsZYltPnzO7BFAWnpArrnFpT8RmJplC/KQi6PDxgLE+Mq1pt7gH/xU6GcndfgqsY UmGy90iSPcvrhdVWRCNnOe+WikVFyDiRuf7hQhguMXpZP4LOnw9LNFGeesKdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC3O/VP+NjM7Tjpv0VLVXF20+o2cwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkr9EX52UXEGN zPoMJR8VqSB6d+EA9ZzPlf4aLlIKlBe3oAS39iuTKV3xle9DMyvKp22l+0aQcy2U gvyw3GTKegl3tx7PjFC12jUWz5o+7OWGTVwF5dtGTb5Rz9C/SHfd8zB3alXuH5N6 piyZUzs1SxkuFZhXtlB1I1Vo/s2YyaWjE9Z1vwgOC8AQ6lmF+TbF9oudU5C+j/pg oX9kM6cWYW9VkxrBQVk3Q16y8W+9gk4U0J4Q4qInH99G26eIqI3LlpwCSMEwMaTA ckMpiQKEcKWEPTpqlopHNd1cenF6x+RxAddm9JifRHXI3NEp/+UYv/tpXWgpOe43 XUyCxjvD6g== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:47 2026 by rpki-client