This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: qtDe36kQAhThn5v7mDS0XlQAEAQHiQvijuJ79dYBYzQ= Subject key identifier: 72:CF:95:44:5D:55:78:3D:93:B7:B2:C0:7A:E3:CA:64:1E:84:55:3F Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 7A61F721D8A85B699A0E61B24D12F171DB69132C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:45:57 +0000 Manifest this update: Sat 24 Jan 2026 17:40:57 +0000 Manifest next update: Sun 25 Jan 2026 20:48:57 +0000 Files and hashes: 1: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 2: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: R9mtH6g+BYG/3BDnIaCXI00kriirMMxh960OYHSU3Do=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:61:f7:21:d8:a8:5b:69:9a:0e:61:b2:4d:12:f1:71:db:69:13:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Jan 24 17:40:57 2026 GMT Not After : Jan 25 20:48:57 2026 GMT Subject: CN=72CF95445D55783D93B7B2C07AE3CA641E84553F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:b6:cb:d4:07:a8:5d:16:fb:3f:2e:a4:3a: ec:ad:d2:ae:52:c2:73:5d:e4:5f:68:64:8b:9e:13: 28:e7:d3:99:ae:25:ce:93:c8:f9:9b:b2:c5:06:a4: 1d:52:cb:0f:44:dd:3e:0b:4d:ab:ef:ab:5a:c9:03: 4a:1d:95:69:f4:46:d1:97:3c:43:d7:db:da:55:aa: 51:1c:62:ff:29:b9:0e:fb:1f:14:ed:62:03:1e:64: 2f:07:bb:52:52:f6:99:c9:85:e7:46:7e:66:6f:9c: 68:19:20:8b:70:4e:2c:6b:95:5d:42:c2:e3:4b:cc: a9:8e:f2:09:58:c5:f0:8d:ca:00:36:b2:02:ba:45: 10:ab:e0:8b:31:3f:06:55:b1:f9:6d:71:17:a9:07: ca:37:5f:8d:b1:49:b6:78:f0:bf:bf:27:0c:23:41: ec:b4:fa:43:b2:26:df:1c:33:ee:12:61:ed:39:ab: 31:2c:46:be:23:1b:e6:df:cf:27:62:ac:cd:a8:08: 0b:3d:43:f6:09:71:a7:02:0e:f8:79:03:13:23:bc: da:27:55:be:31:e3:bd:51:99:9f:99:25:e1:a1:8c: a1:5c:4f:3b:fe:36:44:92:a5:f8:d9:55:d0:26:a4: 46:b0:a1:de:9d:d1:1e:87:9d:b4:a3:40:b5:4e:60: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CF:95:44:5D:55:78:3D:93:B7:B2:C0:7A:E3:CA:64:1E:84:55:3F X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:fe:3a:ad:5a:87:47:6b:e5:6b:57:3a:d2:cb:6a:21:74:9c: 34:8b:1f:e7:8b:6f:e8:fe:57:a3:3d:4a:41:1a:a0:d1:91:60: 92:09:7f:92:78:22:b4:8d:4f:68:98:e1:c7:50:62:c4:95:b4: c8:51:a3:24:3a:66:eb:3c:e9:ae:03:be:5a:68:9e:c1:b9:45: 1e:e8:56:85:ca:45:fe:e7:12:8b:6a:18:e0:3e:46:38:c6:4d: e4:d2:d4:58:e0:d4:32:ad:38:df:88:b3:66:32:7f:be:bf:72: 29:c5:ea:06:1a:64:a0:2b:1d:3f:b9:c7:5d:ef:c3:f1:c2:9c: 70:4a:1d:59:72:39:23:65:0e:b6:3e:3b:dd:54:98:37:06:f1: ce:5a:c8:77:40:4f:31:a3:97:28:76:bc:60:0c:9f:e9:6e:f8: 00:71:93:0a:16:f8:f6:2e:41:7b:cb:6b:fd:0c:a3:f7:f8:9f: 53:7a:72:28:80:52:ee:f0:89:ff:98:dc:62:0e:76:5c:a5:aa: 0f:22:91:6b:55:22:ab:ee:3a:cd:7e:28:3f:16:89:e6:94:3e: 49:f1:0e:9a:a5:da:f1:76:b4:f9:b1:c3:e1:b3:16:a8:33:12: 6f:e8:78:ad:fa:e4:4b:ee:eb:0a:cc:68:6c:c8:4e:54:0a:01: b4:c1:d9:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUemH3IdioW2maDmGyTRLxcdtpEywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjAxMjQxNzQwNTdaFw0yNjAxMjUyMDQ4NTdaMDMxMTAvBgNV BAMTKDcyQ0Y5NTQ0NUQ1NTc4M0Q5M0I3QjJDMDdBRTNDQTY0MUU4NDU1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfLbL1AeoXRb7Py6kOuyt0q5S wnNd5F9oZIueEyjn05muJc6TyPmbssUGpB1Syw9E3T4LTavvq1rJA0odlWn0RtGX PEPX29pVqlEcYv8puQ77HxTtYgMeZC8Hu1JS9pnJhedGfmZvnGgZIItwTixrlV1C wuNLzKmO8glYxfCNygA2sgK6RRCr4IsxPwZVsfltcRepB8o3X42xSbZ48L+/Jwwj Qey0+kOyJt8cM+4SYe05qzEsRr4jG+bfzydirM2oCAs9Q/YJcacCDvh5AxMjvNon Vb4x471RmZ+ZJeGhjKFcTzv+NkSSpfjZVdAmpEawod6d0R6HnbSjQLVOYEARAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcs+VRF1VeD2Tt7LAeuPKZB6EVT8wHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuf46rVqHR2vl a1c60stqIXScNIsf54tv6P5Xoz1KQRqg0ZFgkgl/kngitI1PaJjhx1BixJW0yFGj JDpm6zzprgO+WmiewblFHuhWhcpF/ucSi2oY4D5GOMZN5NLUWODUMq0434izZjJ/ vr9yKcXqBhpkoCsdP7nHXe/D8cKccEodWXI5I2UOtj473VSYNwbxzlrId0BPMaOX KHa8YAyf6W74AHGTChb49i5Be8tr/Qyj9/ifU3pyKIBS7vCJ/5jcYg52XKWqDyKR a1Uiq+46zX4oPxaJ5pQ+SfEOmqXa8Xa0+bHD4bMWqDMSb+h4rfrkS+7rCsxobMhO VAoBtMHZKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:18 2026 by rpki-client