This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: L1g13X+JI7i6WXD3y6dkrHzi7lTO4cM3HcwIlQm4a1w= Subject key identifier: F5:99:AA:17:4A:BA:70:F3:3E:24:5F:01:17:29:68:32:D6:44:72:79 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 551AB9D0B9522D20DBB9E64F959DE96A076C3CD9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 03:40:57 +0000 Manifest this update: Sun 25 Jan 2026 03:35:57 +0000 Manifest next update: Mon 26 Jan 2026 05:57:57 +0000 Files and hashes: 1: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: aPSgFfi2Iuc3wtt0yE78e4Y7AUbMRY09dq6PXy/jkGo=) 2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1a:b9:d0:b9:52:2d:20:db:b9:e6:4f:95:9d:e9:6a:07:6c:3c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Jan 25 03:35:57 2026 GMT Not After : Jan 26 05:57:57 2026 GMT Subject: CN=F599AA174ABA70F33E245F0117296832D6447279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:e5:ef:cd:c8:71:3b:be:c6:ee:1e:a2:c6: 21:ae:26:63:ce:50:d2:5d:76:32:bf:97:c8:a6:7a: 5d:39:92:3e:c4:13:73:7b:16:56:1d:1a:ef:5c:fa: 46:1b:20:8d:f5:03:45:55:44:fe:9c:3c:96:88:17: 96:3d:80:1f:82:b6:cf:5d:f7:56:05:27:71:61:2c: 42:24:dc:43:bd:cd:90:4d:e0:7d:84:36:6f:37:8a: f1:01:36:9b:19:d4:52:93:53:f4:d5:fd:26:87:8b: e8:b5:e1:ab:a9:d8:e2:71:91:b1:a1:c9:f1:e0:56: 45:c5:9b:4a:ef:1f:af:96:b6:da:81:ec:b8:ed:8e: 8a:35:3d:20:85:bc:91:d7:b8:c0:31:6a:c2:8f:fc: cc:bc:6b:f5:f4:6a:73:42:79:d7:59:df:04:fa:a5: 74:c6:f8:73:a2:2b:2d:f8:ac:ef:9d:cb:54:12:85: 34:96:e6:97:d5:95:ad:f4:42:7b:d3:1f:e9:b0:aa: 39:4b:cc:65:f7:28:56:11:36:3e:64:07:fc:7d:72: e9:aa:df:03:e4:c4:27:ce:4a:86:49:b2:50:7c:a9: 03:00:ed:b7:47:80:d1:d8:85:70:00:6d:f4:14:a0: fb:23:57:f3:d0:c7:9d:fa:8d:73:00:3f:1c:e8:23: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:AA:17:4A:BA:70:F3:3E:24:5F:01:17:29:68:32:D6:44:72:79 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6d:c8:79:45:cd:83:10:f4:d8:2d:04:76:09:4b:f8:9e:90: 56:29:27:c5:7c:56:03:9c:16:13:b3:c4:4a:31:9f:c4:ab:5c: 64:d8:5d:15:55:d8:67:a9:93:2c:11:66:ff:bd:c4:36:cc:2c: 6e:76:c7:90:b3:bb:82:47:59:9f:4c:9d:8d:5a:29:da:38:e3: 2a:39:54:de:28:96:8d:43:7d:94:27:75:f8:ea:b5:f0:66:62: 15:03:20:7c:dc:9d:f2:42:87:c5:34:e2:40:98:29:21:2f:f1: 67:4c:b4:27:92:2b:8d:24:ff:cd:3f:53:79:f0:cc:f7:4e:22: 05:ff:67:44:30:24:7f:3a:ff:86:75:00:23:f1:55:bd:e5:ac: 7c:64:7e:06:e2:fb:77:a6:b1:4a:b4:39:64:5f:39:94:50:95: f8:04:01:dc:fa:d7:70:63:0a:ed:b9:04:b8:c6:1d:45:fd:b5: d9:93:40:36:5b:3e:96:d7:37:ac:cb:a9:ad:83:21:3d:8c:2f: 02:16:3c:83:fa:60:45:ba:9f:8f:17:f8:7f:5e:bc:ec:06:59: 6f:6c:59:f5:e3:1e:e9:84:67:c8:3d:86:ee:3b:9e:24:90:23: 55:2a:25:95:b2:1f:d8:a3:29:9d:67:7d:4f:ee:0b:ad:d7:d0: 65:71:2a:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVRq50LlSLSDbueZPlZ3pagdsPNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjAxMjUwMzM1NTdaFw0yNjAxMjYwNTU3NTdaMDMxMTAvBgNV BAMTKEY1OTlBQTE3NEFCQTcwRjMzRTI0NUYwMTE3Mjk2ODMyRDY0NDcyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxOXvzchxO77G7h6ixiGuJmPO UNJddjK/l8imel05kj7EE3N7FlYdGu9c+kYbII31A0VVRP6cPJaIF5Y9gB+Cts9d 91YFJ3FhLEIk3EO9zZBN4H2ENm83ivEBNpsZ1FKTU/TV/SaHi+i14aup2OJxkbGh yfHgVkXFm0rvH6+WttqB7Ljtjoo1PSCFvJHXuMAxasKP/My8a/X0anNCeddZ3wT6 pXTG+HOiKy34rO+dy1QShTSW5pfVla30QnvTH+mwqjlLzGX3KFYRNj5kB/x9cumq 3wPkxCfOSoZJslB8qQMA7bdHgNHYhXAAbfQUoPsjV/PQx536jXMAPxzoI3YfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9ZmqF0q6cPM+JF8BFyloMtZEcnkwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW3IeUXNgxD0 2C0EdglL+J6QViknxXxWA5wWE7PESjGfxKtcZNhdFVXYZ6mTLBFm/73ENswsbnbH kLO7gkdZn0ydjVop2jjjKjlU3iiWjUN9lCd1+Oq18GZiFQMgfNyd8kKHxTTiQJgp IS/xZ0y0J5IrjST/zT9TefDM904iBf9nRDAkfzr/hnUAI/FVveWsfGR+BuL7d6ax SrQ5ZF85lFCV+AQB3PrXcGMK7bkEuMYdRf212ZNANls+ltc3rMuprYMhPYwvAhY8 g/pgRbqfjxf4f1687AZZb2xZ9eMe6YRnyD2G7jueJJAjVSollbIf2KMpnWd9T+4L rdfQZXEqJw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:50 2026 by rpki-client