This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: iGC2ISNpagxxxdjJ69vX9je7OIMlhQbp9U7LBj2zgDI= Subject key identifier: 43:70:16:04:A1:32:F2:76:83:EE:53:28:73:36:50:6A:87:D3:DA:1B Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 7B19B221A2BB85BCA1F4E0CF390BF23AB2CBD5CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 08:51:02 +0000 Manifest this update: Sun 25 Jan 2026 08:46:02 +0000 Manifest next update: Mon 26 Jan 2026 11:09:02 +0000 Files and hashes: 1: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: vXlh5Hq/gMmj7RWDFnWMlM+F+BMlCI5fYfrvXvFHf5I=) 2: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:19:b2:21:a2:bb:85:bc:a1:f4:e0:cf:39:0b:f2:3a:b2:cb:d5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Jan 25 08:46:02 2026 GMT Not After : Jan 26 11:09:02 2026 GMT Subject: CN=43701604A132F27683EE53287336506A87D3DA1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:6f:1e:64:42:23:c3:4d:c5:43:22:2c:e2: a7:4c:94:59:9e:fd:14:13:50:e3:a5:7e:5b:96:58: 77:d1:32:1f:1d:77:37:f8:7a:e9:7d:10:5d:e7:b9: f0:1e:f0:e0:42:75:0b:d1:3b:b5:91:69:6f:15:b6: 31:3c:a4:de:23:19:59:32:d3:62:33:6e:e7:e3:d9: 02:96:ca:51:ef:ca:b4:d3:f9:33:cd:a0:46:18:a5: 0e:0b:5f:6f:4a:8a:b7:fe:30:94:06:34:73:31:6a: f0:8e:b2:5c:07:be:c0:3f:be:7a:f1:8d:b0:c9:ab: 72:0d:48:dd:1c:ba:35:67:04:96:43:f6:7f:65:03: a9:58:ab:be:b3:3b:7a:03:e9:d5:fb:67:c3:8f:2d: b9:79:90:cf:e8:34:16:30:50:e6:5e:22:ab:bc:d2: 70:27:ed:9a:6b:dc:c8:47:79:f5:8c:46:74:08:00: 60:80:6b:2a:64:42:3f:89:f1:dc:fa:08:67:d0:01: 9b:cc:fb:0e:fb:6c:62:ba:a3:4c:b0:22:2b:bd:f4: 51:6f:9b:48:b1:c7:18:f2:01:49:72:9b:92:d8:e9: 62:ac:8b:e9:4f:39:30:35:0b:d9:c0:c8:e0:1b:de: 76:6c:2a:94:fc:07:38:6e:9c:2f:5d:36:8e:27:39: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:16:04:A1:32:F2:76:83:EE:53:28:73:36:50:6A:87:D3:DA:1B X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4a:9a:de:e9:1c:83:25:7c:66:0e:cf:5d:dd:e2:90:eb:ac: cd:b2:ca:bb:94:50:f6:26:13:1b:e8:0d:3e:4e:28:bb:68:ba: eb:ee:6f:60:a3:25:93:6c:77:8c:ac:cc:90:f5:ea:99:d3:8e: 33:76:58:83:79:20:f1:ff:3e:64:fb:80:f8:50:a2:d3:4f:f4: 67:89:23:a7:bd:f5:7d:ec:97:cd:72:00:fe:b6:1a:bb:54:ce: 9d:2c:e4:ad:ef:ca:32:6d:ef:84:62:3a:d2:6a:ad:2a:e5:5d: 1d:4f:d1:c3:2d:e6:8d:22:d7:44:ec:23:68:a2:b3:b7:0f:f0: 5e:d9:aa:68:3e:5c:e8:08:52:c4:e2:26:11:18:64:f3:53:3a: c2:2c:8b:d6:35:51:23:6e:6c:4c:00:2f:65:f6:0e:bc:aa:b7: f0:56:fa:10:6e:86:51:9e:0e:87:92:cc:54:8b:69:7d:0d:08: 85:68:9b:93:22:99:8c:29:a3:fe:f1:b8:39:1a:36:fa:4d:64: e2:a5:44:38:9f:ae:fb:21:a4:5e:53:3a:47:04:99:6e:61:a4: d5:fb:99:c3:86:0a:45:17:c9:56:9d:a3:5b:62:ef:fd:64:45: 24:87:61:c1:4a:1f:ad:e6:1e:12:ce:a8:3e:92:78:94:00:83: 23:34:e4:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUexmyIaK7hbyh9ODPOQvyOrLL1cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjAxMjUwODQ2MDJaFw0yNjAxMjYxMTA5MDJaMDMxMTAvBgNV BAMTKDQzNzAxNjA0QTEzMkYyNzY4M0VFNTMyODczMzY1MDZBODdEM0RBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6R28eZEIjw03FQyIs4qdMlFme /RQTUOOlfluWWHfRMh8ddzf4eul9EF3nufAe8OBCdQvRO7WRaW8VtjE8pN4jGVky 02Izbufj2QKWylHvyrTT+TPNoEYYpQ4LX29Kirf+MJQGNHMxavCOslwHvsA/vnrx jbDJq3INSN0cujVnBJZD9n9lA6lYq76zO3oD6dX7Z8OPLbl5kM/oNBYwUOZeIqu8 0nAn7Zpr3MhHefWMRnQIAGCAaypkQj+J8dz6CGfQAZvM+w77bGK6o0ywIiu99FFv m0ixxxjyAUlym5LY6WKsi+lPOTA1C9nAyOAb3nZsKpT8BzhunC9dNo4nOWXtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ3AWBKEy8naD7lMoczZQaofT2hswHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0qa3ukcgyV8 Zg7PXd3ikOuszbLKu5RQ9iYTG+gNPk4ou2i66+5vYKMlk2x3jKzMkPXqmdOOM3ZY g3kg8f8+ZPuA+FCi00/0Z4kjp731feyXzXIA/rYau1TOnSzkre/KMm3vhGI60mqt KuVdHU/Rwy3mjSLXROwjaKKztw/wXtmqaD5c6AhSxOImERhk81M6wiyL1jVRI25s TAAvZfYOvKq38Fb6EG6GUZ4Oh5LMVItpfQ0IhWibkyKZjCmj/vG4ORo2+k1k4qVE OJ+u+yGkXlM6RwSZbmGk1fuZw4YKRRfJVp2jW2Lv/WRFJIdhwUofreYeEs6oPpJ4 lACDIzTkhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:54 2026 by rpki-client