This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: QQqB7cqsnQ52ogml/03HG1uaS3xDJc30HhBQqcQwSE8= Subject key identifier: 07:93:C4:1B:F3:3D:B8:E6:F4:76:2D:53:88:AF:63:34:0A:0E:65:62 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 0205625A7887914A1B9D7D29430A2C8182F86D5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 18:45:57 +0000 Manifest this update: Sat 24 Jan 2026 18:40:57 +0000 Manifest next update: Sun 25 Jan 2026 19:49:57 +0000 Files and hashes: 1: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) 2: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: 6nkAEFtdpDzdJ4K4KOLELBzizeqkDRgsuLl4UQfETUg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:05:62:5a:78:87:91:4a:1b:9d:7d:29:43:0a:2c:81:82:f8:6d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Jan 24 18:40:57 2026 GMT Not After : Jan 25 19:49:57 2026 GMT Subject: CN=0793C41BF33DB8E6F4762D5388AF63340A0E6562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:d5:ad:71:90:32:db:fb:9f:d1:f4:14:06: dc:aa:cd:ca:84:93:7b:77:7c:fb:73:ac:ad:6a:6f: 4e:62:2d:89:99:4b:aa:a8:74:a8:a1:00:d5:b2:8b: 17:33:4d:97:7c:1d:df:21:73:11:2e:ad:f7:5b:09: 19:29:2d:bc:55:1d:58:47:9d:a6:48:9c:9b:15:e7: 30:44:07:3d:91:cd:0f:6f:0f:90:aa:09:23:12:c7: ed:2f:e6:61:aa:0d:35:73:8c:5e:4b:53:d0:b9:4f: b0:93:2a:47:62:b0:03:93:39:c1:62:82:47:18:91: b8:2a:93:40:a3:36:a4:88:68:67:e5:be:2e:55:94: 6a:fc:56:52:95:8f:e6:ca:5d:51:9b:1d:52:f0:33: 62:4d:7d:84:93:0f:5f:eb:98:49:82:c8:b2:ea:59: c6:08:30:7a:68:15:74:bf:13:39:6b:10:50:0e:68: 16:39:16:30:38:ef:8d:4e:e0:76:6f:58:9a:a5:f5: 4b:09:a8:85:76:46:db:21:e1:e8:c1:8c:eb:ca:8b: 52:dd:6e:93:31:2e:28:7c:38:d7:9f:90:f3:cc:ba: fe:8d:1e:95:ac:7f:b8:00:28:e7:60:05:92:e9:3d: 49:27:40:73:5b:e7:31:fc:33:c2:ed:93:0e:d3:8d: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:C4:1B:F3:3D:B8:E6:F4:76:2D:53:88:AF:63:34:0A:0E:65:62 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:12:a4:28:e9:9e:89:c7:c2:83:1c:6e:78:77:fc:92:d9:2b: 1f:c1:0f:b9:9c:e4:29:bc:83:49:59:91:92:2b:f6:6f:10:ec: f4:52:a1:ca:55:66:c3:a0:da:ba:94:3e:06:cb:9a:ef:ba:9b: 2a:a2:bc:0b:83:2f:a7:cd:b6:8e:bb:05:60:6a:ee:99:51:78: ef:40:b7:ee:e5:e1:87:07:c2:5f:b3:62:b6:58:2a:36:5d:1f: de:0b:0a:45:57:45:e9:51:60:02:4a:f1:ce:32:21:fd:5f:7e: 60:de:d0:c1:7b:66:64:21:0c:16:56:c8:df:66:96:01:10:04: 3b:c7:6f:c6:ad:15:cb:56:9a:77:43:a9:40:b6:07:8f:0a:b5: 89:11:ce:b6:cf:8d:db:4d:f9:92:25:10:43:d0:5b:3d:f1:3f: b6:50:62:72:41:82:07:fa:86:f8:0a:1c:14:bd:06:3c:f7:d5: 21:8a:93:76:1b:ee:a9:52:05:0c:44:9e:be:3c:c1:57:4f:91: d4:ff:a1:5d:0f:4c:c7:6c:89:c8:37:83:e8:b8:d3:16:21:2c: 5f:2c:9a:02:0f:30:10:27:e9:a0:c3:a5:76:39:7f:31:50:5f: 4c:af:c9:f7:f3:81:f0:81:91:1d:2d:5d:3a:16:db:b7:0f:86: 07:c1:76:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAgViWniHkUobnX0pQwosgYL4bV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjAxMjQxODQwNTdaFw0yNjAxMjUxOTQ5NTdaMDMxMTAvBgNV BAMTKDA3OTNDNDFCRjMzREI4RTZGNDc2MkQ1Mzg4QUY2MzM0MEEwRTY1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtX9WtcZAy2/uf0fQUBtyqzcqE k3t3fPtzrK1qb05iLYmZS6qodKihANWyixczTZd8Hd8hcxEurfdbCRkpLbxVHVhH naZInJsV5zBEBz2RzQ9vD5CqCSMSx+0v5mGqDTVzjF5LU9C5T7CTKkdisAOTOcFi gkcYkbgqk0CjNqSIaGflvi5VlGr8VlKVj+bKXVGbHVLwM2JNfYSTD1/rmEmCyLLq WcYIMHpoFXS/EzlrEFAOaBY5FjA4741O4HZvWJql9UsJqIV2Rtsh4ejBjOvKi1Ld bpMxLih8ONefkPPMuv6NHpWsf7gAKOdgBZLpPUknQHNb5zH8M8Ltkw7TjYelAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB5PEG/M9uOb0di1TiK9jNAoOZWIwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxKkKOmeicfC gxxueHf8ktkrH8EPuZzkKbyDSVmRkiv2bxDs9FKhylVmw6DaupQ+Bsua77qbKqK8 C4Mvp822jrsFYGrumVF470C37uXhhwfCX7NitlgqNl0f3gsKRVdF6VFgAkrxzjIh /V9+YN7QwXtmZCEMFlbI32aWARAEO8dvxq0Vy1aad0OpQLYHjwq1iRHOts+N2035 kiUQQ9BbPfE/tlBickGCB/qG+AocFL0GPPfVIYqTdhvuqVIFDESevjzBV0+R1P+h XQ9Mx2yJyDeD6LjTFiEsXyyaAg8wECfpoMOldjl/MVBfTK/J9/OB8IGRHS1dOhbb tw+GB8F2gw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:34 2026 by rpki-client