This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft File: 727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json) Hash identifier: DWpusVdqXggMgAykVjGffM2ngi8N1wYYd1+vtE4CJXg= Subject key identifier: 5C:E5:71:50:B0:C2:13:FC:57:A0:9A:D5:06:2D:15:88:A6:11:7A:AB Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Certificate serial: 60486351C92251B01D3015DC3DDE11C0BA36CAEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 16:10:57 +0000 Manifest this update: Sat 24 Jan 2026 16:05:57 +0000 Manifest next update: Sun 25 Jan 2026 18:12:57 +0000 Files and hashes: 1: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=) 2: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=) 3: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=) 4: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: NqS6OaasFlP7gbhStsyrZSswk5TFQxm+KYnDwPiFeVQ=) 5: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:48:63:51:c9:22:51:b0:1d:30:15:dc:3d:de:11:c0:ba:36:ca:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Validity Not Before: Jan 24 16:05:57 2026 GMT Not After : Jan 25 18:12:57 2026 GMT Subject: CN=5CE57150B0C213FC57A09AD5062D1588A6117AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:29:0c:9e:3c:87:76:90:07:6b:bc:22:b3: 28:f4:f7:06:d8:62:5d:a5:8e:56:1b:f1:dd:f4:a2: 27:55:1a:59:b9:0e:78:6e:10:19:13:2c:1d:86:b1: af:57:b2:11:a7:d3:ba:4d:3c:5c:c2:3e:49:15:34: 97:a3:e7:94:60:b9:69:51:b9:71:cd:73:97:15:ca: f0:0f:00:47:40:ca:85:7b:0d:92:82:f6:59:69:5d: 5c:eb:cf:f1:c6:5e:dc:87:d3:8f:3e:d2:6a:ce:35: f3:ee:96:30:72:78:e9:74:fa:ff:4b:d8:a6:0b:6b: 1c:5a:d2:97:20:c2:04:a0:3c:c9:b3:76:45:c0:f6: fe:95:88:94:1e:31:64:f5:e6:fd:d3:ec:75:b2:c0: 7d:fe:31:f7:42:f8:2c:23:33:51:31:c3:d4:cb:1c: d8:a0:4e:e6:7e:52:69:c1:54:50:ba:c3:ab:97:6b: 65:e4:69:4b:1c:f3:02:07:4a:80:53:3b:d1:3d:a2: 04:e8:95:4f:95:60:62:07:a6:cd:1d:5b:26:b9:e5: be:25:1c:21:33:07:b2:16:9c:dd:7c:6b:68:da:5a: 3a:25:81:f2:40:03:92:fd:16:17:ee:50:46:58:03: cb:ca:5d:a6:44:4c:0a:8f:e5:5e:f2:d9:65:30:1a: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:71:50:B0:C2:13:FC:57:A0:9A:D5:06:2D:15:88:A6:11:7A:AB X509v3 Authority Key Identifier: keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:54:99:93:18:fc:58:12:b1:46:01:b8:91:d9:98:3b:1b:ab: 7c:e1:b6:30:b0:f3:bb:c6:75:4a:76:fe:4b:b7:09:99:77:89: ae:e1:18:9b:a4:83:ed:a0:83:35:41:c4:76:4f:d5:fd:fb:07: fc:26:0e:40:56:e6:48:b4:77:e6:3a:b4:0d:7b:8d:9a:84:c6: 5d:96:66:09:57:a7:76:ef:3c:52:b3:12:0d:e9:9b:e9:cf:e5: 28:93:12:ae:d2:e0:ec:a7:35:82:21:03:e4:ed:b4:66:ef:fa: da:d5:c9:b1:07:2f:be:48:ad:0f:78:10:6d:e9:22:27:0e:98: 5e:ab:03:46:7d:e9:df:73:ad:e9:92:46:6b:6d:9e:02:bd:3b: 14:f0:2a:3b:b7:06:54:45:6d:08:89:0e:8d:1c:d0:19:76:db: 90:c5:86:4a:ca:72:24:61:7e:c7:79:ac:e3:d7:f9:d2:aa:4c: 68:9e:7e:fa:9c:3c:9b:30:51:17:61:97:5e:67:d2:61:10:4a: 14:bd:d7:8f:62:66:f8:2b:62:5e:83:08:86:e2:01:65:a6:71: 38:54:e1:64:db:8f:fc:67:37:b1:61:1c:71:07:a8:03:3a:4d: ac:b9:c4:dd:6d:6a:3f:81:dc:97:d8:5a:a5:80:a4:45:53:f8: 8c:5c:c2:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYEhjUckiUbAdMBXcPd4RwLo2yu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4 ODJFNzhBMDAeFw0yNjAxMjQxNjA1NTdaFw0yNjAxMjUxODEyNTdaMDMxMTAvBgNV BAMTKDVDRTU3MTUwQjBDMjEzRkM1N0EwOUFENTA2MkQxNTg4QTYxMTdBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJuikMnjyHdpAHa7wisyj09wbY Yl2ljlYb8d30oidVGlm5DnhuEBkTLB2Gsa9XshGn07pNPFzCPkkVNJej55RguWlR uXHNc5cVyvAPAEdAyoV7DZKC9llpXVzrz/HGXtyH048+0mrONfPuljByeOl0+v9L 2KYLaxxa0pcgwgSgPMmzdkXA9v6ViJQeMWT15v3T7HWywH3+MfdC+CwjM1Exw9TL HNigTuZ+UmnBVFC6w6uXa2XkaUsc8wIHSoBTO9E9ogTolU+VYGIHps0dWya55b4l HCEzB7IWnN18a2jaWjolgfJAA5L9FhfuUEZYA8vKXaZETAqP5V7y2WUwGhyTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXOVxULDCE/xXoJrVBi0ViKYReqswHwYDVR0j BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0 MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyODgwMDIvMC83MjdGNjQ1RkM4RkUx NThFQjI3NTVEN0Y5MTRBNDMyNTg4MkU3OEEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVSZkxj8WBKx RgG4kdmYOxurfOG2MLDzu8Z1Snb+S7cJmXeJruEYm6SD7aCDNUHEdk/V/fsH/CYO QFbmSLR35jq0DXuNmoTGXZZmCVendu88UrMSDemb6c/lKJMSrtLg7Kc1giED5O20 Zu/62tXJsQcvvkitD3gQbekiJw6YXqsDRn3p33Ot6ZJGa22eAr07FPAqO7cGVEVt CIkOjRzQGXbbkMWGSspyJGF+x3ms49f50qpMaJ5++pw8mzBRF2GXXmfSYRBKFL3X j2Jm+CtiXoMIhuIBZaZxOFThZNuP/Gc3sWEccQeoAzpNrLnE3W1qP4Hcl9hapYCk RVP4jFzCjA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:44 2026 by rpki-client