This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: DUov4b4ZGV+cVJPMxK8wbByJFZYxff5rnwIIYAUBXkg= Subject key identifier: FB:B1:6E:45:99:B3:35:85:CF:E0:D7:83:1D:31:64:51:3E:CE:FD:1A Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 5913E17549C4A356AE3AC58504454D4A4653ABBA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 19:45:57 +0000 Manifest this update: Sat 24 Jan 2026 19:40:57 +0000 Manifest next update: Sun 25 Jan 2026 22:17:57 +0000 Files and hashes: 1: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: AAep0xkbSgd/rvhg2Y+Vgu31fjBPbOvWhn1BeSvL3Cc=) 2: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 3: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 4: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:13:e1:75:49:c4:a3:56:ae:3a:c5:85:04:45:4d:4a:46:53:ab:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Jan 24 19:40:57 2026 GMT Not After : Jan 25 22:17:57 2026 GMT Subject: CN=FBB16E4599B33585CFE0D7831D3164513ECEFD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:52:6c:95:89:a1:b5:d5:b5:05:eb:52:96: 84:44:7b:b7:05:3d:a3:49:b2:05:f9:e9:83:5c:7e: 1e:c2:8b:e9:27:2c:2c:b2:01:06:c9:4f:39:d9:b7: 6d:ff:b7:72:d8:c6:00:0d:e8:96:71:48:d2:55:e1: bd:ce:dd:cf:14:02:7e:36:cf:2c:fd:a3:2b:b9:99: 2e:76:3e:b7:be:92:91:09:8e:99:c8:00:84:7f:9b: 05:09:d8:7c:c0:36:82:be:f3:c3:04:23:36:81:f2: 0a:a5:c3:6e:e5:2a:7f:41:64:8c:64:21:bb:7d:8a: f6:17:af:34:38:50:1f:90:55:03:8e:c9:f9:57:44: 07:39:18:fc:ff:1d:b9:22:ca:6a:04:4d:75:fc:19: 33:d1:c1:0a:f6:ab:15:de:e8:cc:b1:cf:0f:34:05: 1f:58:21:2c:f6:a5:fc:09:59:2e:77:53:2a:50:a6: d7:d0:83:dc:59:b7:f4:1d:00:3d:12:a5:0f:4c:2e: 3b:6c:61:15:bc:a3:c0:71:94:7e:09:ba:84:f0:42: 94:00:58:7e:b7:f7:80:01:a0:af:2c:a9:e6:b0:f1: c5:95:6f:ef:8b:3b:d8:24:94:33:9e:7d:34:89:a0: dc:15:65:0f:69:38:3e:b1:ee:f1:e6:0d:af:ea:a0: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B1:6E:45:99:B3:35:85:CF:E0:D7:83:1D:31:64:51:3E:CE:FD:1A X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a2:f4:4f:c0:30:de:65:a5:2e:7c:8f:85:e1:9c:2e:05:88: 9a:6c:55:a3:45:df:43:e8:62:d2:9c:e1:44:4e:a6:ff:44:ba: 06:a6:35:81:7f:55:b9:4b:a7:39:ab:23:15:ca:d4:dd:9a:fc: 64:85:5c:04:3d:99:20:9d:e4:7b:4f:f2:ac:b2:6f:1a:b3:53: 84:83:86:85:de:3a:02:4d:85:e7:3c:9d:4a:98:95:db:ca:f9: 73:10:dc:e6:9a:97:ef:0b:56:d5:06:c1:e3:66:bf:9a:98:00: bd:d1:8f:26:c5:b5:f4:cd:ea:41:07:0c:1c:90:43:c7:c1:87: f8:7c:16:30:05:7d:96:a0:cb:e6:a8:9b:80:32:1a:2b:3f:a3: d8:61:c3:dd:8b:43:e9:b6:21:12:33:75:fb:13:a2:1d:9a:21: cd:40:3b:1f:0a:8b:02:14:5f:72:f2:57:c9:9f:8e:77:9e:f3: a5:0b:90:6e:0c:13:b1:cb:0e:80:00:7d:fb:43:74:12:0a:24: 75:62:36:45:70:11:8f:c0:e1:dc:83:ee:fc:21:b3:ca:0d:21: a7:67:75:90:e9:a2:27:8c:16:59:38:d5:62:26:a8:2c:2a:45: 7a:8a:5f:ae:75:b8:76:20:71:1d:98:55:6f:09:71:4d:e0:96: 35:86:cf:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWRPhdUnEo1auOsWFBEVNSkZTq7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjAxMjQxOTQwNTdaFw0yNjAxMjUyMjE3NTdaMDMxMTAvBgNV BAMTKEZCQjE2RTQ1OTlCMzM1ODVDRkUwRDc4MzFEMzE2NDUxM0VDRUZEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO6lJslYmhtdW1BetSloREe7cF PaNJsgX56YNcfh7Ci+knLCyyAQbJTznZt23/t3LYxgAN6JZxSNJV4b3O3c8UAn42 zyz9oyu5mS52Pre+kpEJjpnIAIR/mwUJ2HzANoK+88MEIzaB8gqlw27lKn9BZIxk Ibt9ivYXrzQ4UB+QVQOOyflXRAc5GPz/HbkiymoETXX8GTPRwQr2qxXe6Myxzw80 BR9YISz2pfwJWS53UypQptfQg9xZt/QdAD0SpQ9MLjtsYRW8o8BxlH4JuoTwQpQA WH6394ABoK8sqeaw8cWVb++LO9gklDOefTSJoNwVZQ9pOD6x7vHmDa/qoBBHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+7FuRZmzNYXP4NeDHTFkUT7O/RowHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaL0T8Aw3mWl LnyPheGcLgWImmxVo0XfQ+hi0pzhRE6m/0S6BqY1gX9VuUunOasjFcrU3Zr8ZIVc BD2ZIJ3ke0/yrLJvGrNThIOGhd46Ak2F5zydSpiV28r5cxDc5pqX7wtW1QbB42a/ mpgAvdGPJsW19M3qQQcMHJBDx8GH+HwWMAV9lqDL5qibgDIaKz+j2GHD3YtD6bYh EjN1+xOiHZohzUA7HwqLAhRfcvJXyZ+Od57zpQuQbgwTscsOgAB9+0N0EgokdWI2 RXARj8Dh3IPu/CGzyg0hp2d1kOmiJ4wWWTjVYiaoLCpFeopfrnW4diBxHZhVbwlx TeCWNYbPLg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:53 2026 by rpki-client