This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: jnhBsaLZXJSi0zeuPgYxN0fmTknaQUVtYVPxWv3dMxE= Subject key identifier: 81:2C:69:21:B1:F6:30:4F:F5:F8:A1:DF:DD:90:1E:35:C4:88:C2:55 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 5AB2571C73806DE49AACD0EFDC6F7780D7A1043D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 16:00:57 +0000 Manifest this update: Sat 24 Jan 2026 15:55:57 +0000 Manifest next update: Sun 25 Jan 2026 19:50:57 +0000 Files and hashes: 1: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: dbg92jqHyroIVeXLLQ+7jE5syTimPFQC0kKMly63PBs=) 2: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 3: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b2:57:1c:73:80:6d:e4:9a:ac:d0:ef:dc:6f:77:80:d7:a1:04:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Jan 24 15:55:57 2026 GMT Not After : Jan 25 19:50:57 2026 GMT Subject: CN=812C6921B1F6304FF5F8A1DFDD901E35C488C255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:64:44:45:05:fd:ef:6c:bf:f9:31:23:77: bf:72:7f:73:79:66:f5:96:42:f9:e4:20:31:0b:c7: 15:87:88:d5:73:aa:38:35:9d:ec:93:10:5d:b2:7d: 04:6a:ce:cc:99:35:08:33:cc:ec:70:f8:15:8a:38: 82:13:d2:1c:86:be:36:c9:01:57:3f:d3:fe:d4:66: 79:ec:01:ef:90:60:72:75:39:f2:ab:4a:bf:a9:c4: 31:20:1d:56:9a:4d:44:83:c1:51:ad:c4:30:8f:47: 0d:d9:8c:1b:a8:0b:8a:66:f3:48:f7:ba:bf:2e:5d: 91:a2:81:06:e9:c3:36:1b:5f:97:ce:bd:34:67:97: 7b:ed:dd:9e:66:f4:1b:be:60:25:4b:fb:03:ce:06: de:b9:48:15:e9:23:a0:18:37:ef:7c:56:0c:18:76: 18:49:33:7b:3b:7e:30:95:3a:db:7b:25:f3:29:69: 7d:a1:7f:a6:b6:4d:c3:ed:69:c4:c3:d5:e4:fb:ca: d2:ce:5f:aa:12:44:8b:d3:2c:7c:a6:cd:8e:5a:76: e0:e4:e8:e3:d0:7b:8a:af:fc:49:db:c9:4e:dd:ce: 77:de:94:03:45:d4:88:fc:62:cd:8e:ac:ac:81:22: 84:35:a5:22:ed:7d:2a:80:8a:36:44:c0:66:a8:10: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2C:69:21:B1:F6:30:4F:F5:F8:A1:DF:DD:90:1E:35:C4:88:C2:55 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ea:ec:37:4b:75:1c:5c:2b:b1:fb:83:2a:14:3f:24:fd:e9: 1f:05:25:4b:e0:0c:d3:35:f1:34:50:ad:2c:fa:0c:89:de:9f: 1e:d9:e1:1a:7d:82:62:a3:09:d8:2a:64:89:e7:e4:9e:10:e3: 78:2b:25:3f:18:80:12:1a:ba:0f:57:37:e3:b4:dc:a7:40:8a: 3a:74:e3:ba:e6:65:27:1b:d5:03:f2:6d:37:1e:8d:a0:02:df: f5:f2:16:4f:c9:85:e3:0c:7a:da:8f:3c:ca:c3:7b:fb:49:eb: 60:2d:80:9c:10:98:00:22:6b:0b:82:5b:fd:ab:db:cb:82:c2: f5:1c:ab:a1:c8:d7:fb:34:80:50:69:80:4e:b1:63:b0:67:f8: 71:69:71:89:67:97:98:8c:af:21:6d:fa:53:c1:b2:61:79:ff: ef:eb:9f:a0:15:23:e5:08:61:2e:90:a2:db:bb:1b:11:84:f0: aa:b7:e6:b4:25:d7:a7:c5:55:57:e1:91:4b:a2:bf:9f:89:c6: f6:36:f7:3f:73:7c:77:61:6e:af:f5:a1:94:bf:c3:0b:f9:a3: 32:6f:67:20:1f:c9:95:56:c8:65:87:ce:9d:12:94:2a:21:73: 96:42:6e:4f:75:c7:e0:02:fa:9d:38:d5:06:84:32:a7:d0:09: 3d:5c:81:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWrJXHHOAbeSarNDv3G93gNehBD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjAxMjQxNTU1NTdaFw0yNjAxMjUxOTUwNTdaMDMxMTAvBgNV BAMTKDgxMkM2OTIxQjFGNjMwNEZGNUY4QTFERkREOTAxRTM1QzQ4OEMyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEmRERQX972y/+TEjd79yf3N5 ZvWWQvnkIDELxxWHiNVzqjg1neyTEF2yfQRqzsyZNQgzzOxw+BWKOIIT0hyGvjbJ AVc/0/7UZnnsAe+QYHJ1OfKrSr+pxDEgHVaaTUSDwVGtxDCPRw3ZjBuoC4pm80j3 ur8uXZGigQbpwzYbX5fOvTRnl3vt3Z5m9Bu+YCVL+wPOBt65SBXpI6AYN+98VgwY dhhJM3s7fjCVOtt7JfMpaX2hf6a2TcPtacTD1eT7ytLOX6oSRIvTLHymzY5aduDk 6OPQe4qv/EnbyU7dznfelANF1Ij8Ys2OrKyBIoQ1pSLtfSqAijZEwGaoENPdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgSxpIbH2ME/1+KHf3ZAeNcSIwlUwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdursN0t1HFwr sfuDKhQ/JP3pHwUlS+AM0zXxNFCtLPoMid6fHtnhGn2CYqMJ2CpkiefknhDjeCsl PxiAEhq6D1c347Tcp0CKOnTjuuZlJxvVA/JtNx6NoALf9fIWT8mF4wx62o88ysN7 +0nrYC2AnBCYACJrC4Jb/avby4LC9RyrocjX+zSAUGmATrFjsGf4cWlxiWeXmIyv IW36U8GyYXn/7+ufoBUj5QhhLpCi27sbEYTwqrfmtCXXp8VVV+GRS6K/n4nG9jb3 P3N8d2Fur/WhlL/DC/mjMm9nIB/JlVbIZYfOnRKUKiFzlkJuT3XH4AL6nTjVBoQy p9AJPVyB0g== -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:28 2026 by rpki-client