This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: YiNIkyAaQgKeM8zke4afmX6BamSqgI9IH6R+GyebJLI= Subject key identifier: 76:CA:89:34:3A:1E:9D:A0:1C:A7:6B:FE:BF:B2:C4:F6:89:87:42:74 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 4D6712A77B0230660F45F24BEACF8CF485582EDD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 0A Signing time: Sat 24 Jan 2026 21:40:57 +0000 Manifest this update: Sat 24 Jan 2026 21:35:57 +0000 Manifest next update: Sun 25 Jan 2026 22:34:57 +0000 Files and hashes: 1: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: 9V8brBsTjaG8sS17Q3Y4wqnqMHhMi6lQH62SkqUVpvs=) 2: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 3: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 4: 3130332e3132362e3130302e302f32342d3234203d3e20333937333733.roa (hash: r5GgtdcaA2gQJtrauSrZuvN2xcklG2rxP8mHaI3JDZA=) 5: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:67:12:a7:7b:02:30:66:0f:45:f2:4b:ea:cf:8c:f4:85:58:2e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Jan 24 21:35:57 2026 GMT Not After : Jan 25 22:34:57 2026 GMT Subject: CN=76CA89343A1E9DA01CA76BFEBFB2C4F689874274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:fc:f6:3c:90:d4:ea:01:af:16:a6:e3:62: 78:02:da:d2:36:a2:17:71:7e:cd:e2:e9:06:78:de: 35:40:2b:e3:c4:00:8a:3e:09:b7:b7:37:d2:f6:e0: f9:e9:e7:77:9c:dd:38:cd:f4:02:a1:59:d9:36:88: 66:75:e8:fe:1a:5f:5e:fc:cd:11:7c:8a:f6:a8:49: e0:fd:1a:3b:82:83:77:a8:87:ac:18:ab:03:7d:a8: a1:3a:1a:2c:b6:a1:ba:18:8b:d6:13:52:7e:08:0a: 67:82:06:5d:f9:1f:67:08:4f:a5:ef:da:16:b3:42: 2c:9a:1a:2f:9e:41:de:c1:21:c9:7b:b9:88:d0:a1: b7:0f:1e:b5:0a:b1:74:fc:6b:66:a1:1b:90:45:82: 42:1a:c4:65:e5:b3:df:3f:7d:c0:de:ed:f5:d4:30: 35:a3:ee:11:1a:8d:21:bc:fc:ec:f3:bb:b8:fb:31: 1a:93:cd:66:fc:c5:64:13:11:80:0d:3d:68:57:ba: a7:8a:05:dd:37:cc:47:25:9a:17:38:f0:db:3e:71: f7:11:75:29:8c:c4:63:fa:a2:f1:96:c5:10:74:d2: 91:57:3f:72:ee:55:74:3e:91:bf:4f:96:89:b9:f7: d4:4f:1e:2c:c2:99:df:22:86:2d:f6:ba:5a:6c:5f: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:89:34:3A:1E:9D:A0:1C:A7:6B:FE:BF:B2:C4:F6:89:87:42:74 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3a:8d:85:68:d3:0e:13:ba:c3:4f:00:ab:bd:cc:96:70:b2: 4c:3c:18:98:c2:a0:87:3a:9c:db:da:06:a2:2f:d7:8b:8c:a9: bc:ec:0f:a8:2e:ea:1d:25:2c:e1:f0:d9:63:69:aa:30:2c:39: 0a:7d:4b:cf:be:70:50:14:de:8f:6a:9a:0a:16:2b:46:ca:62: 4b:84:4a:05:52:6e:05:7e:d7:03:00:cf:65:09:fc:11:30:c7: 1b:c3:c5:ea:40:9b:7b:40:2d:16:5a:bb:17:a0:ef:ec:de:f2: da:5a:ef:66:fb:30:d0:45:79:fe:73:05:ea:cb:98:04:d1:d6: 74:b1:d9:2e:b0:09:f1:b3:6e:8e:56:6a:57:82:9e:24:ed:b5: 91:54:b3:4a:4a:d4:26:58:09:f9:69:0c:12:1c:18:6a:ea:ee: a0:15:03:a9:21:a5:2b:40:99:dc:5d:be:6a:e8:d3:ea:45:8d: 3e:8a:03:c6:16:35:04:ee:97:f8:a2:56:b7:31:0a:7d:c7:6c: b6:42:e0:aa:22:b0:7e:ea:01:7f:e2:9d:d3:3c:a9:a8:51:d6: eb:60:48:60:29:c0:d8:fb:7a:85:6b:c6:ed:cf:8b:e7:79:cc: 96:da:4a:6b:24:e3:7d:9b:dd:26:af:5d:9b:cd:19:89:4d:4f: 1d:ac:39:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTWcSp3sCMGYPRfJL6s+M9IVYLt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjAxMjQyMTM1NTdaFw0yNjAxMjUyMjM0NTdaMDMxMTAvBgNV BAMTKDc2Q0E4OTM0M0ExRTlEQTAxQ0E3NkJGRUJGQjJDNEY2ODk4NzQyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUvz2PJDU6gGvFqbjYngC2tI2 ohdxfs3i6QZ43jVAK+PEAIo+Cbe3N9L24Pnp53ec3TjN9AKhWdk2iGZ16P4aX178 zRF8ivaoSeD9GjuCg3eoh6wYqwN9qKE6Giy2oboYi9YTUn4ICmeCBl35H2cIT6Xv 2hazQiyaGi+eQd7BIcl7uYjQobcPHrUKsXT8a2ahG5BFgkIaxGXls98/fcDe7fXU MDWj7hEajSG8/Ozzu7j7MRqTzWb8xWQTEYANPWhXuqeKBd03zEclmhc48Ns+cfcR dSmMxGP6ovGWxRB00pFXP3LuVXQ+kb9Plom599RPHizCmd8ihi32ulpsXyh/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdsqJNDoenaAcp2v+v7LE9omHQnQwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzqNhWjTDhO6 w08Aq73MlnCyTDwYmMKghzqc29oGoi/Xi4ypvOwPqC7qHSUs4fDZY2mqMCw5Cn1L z75wUBTej2qaChYrRspiS4RKBVJuBX7XAwDPZQn8ETDHG8PF6kCbe0AtFlq7F6Dv 7N7y2lrvZvsw0EV5/nMF6suYBNHWdLHZLrAJ8bNujlZqV4KeJO21kVSzSkrUJlgJ +WkMEhwYauruoBUDqSGlK0CZ3F2+aujT6kWNPooDxhY1BO6X+KJWtzEKfcdstkLg qiKwfuoBf+Kd0zypqFHW62BIYCnA2Pt6hWvG7c+L53nMltpKayTjfZvdJq9dm80Z iU1PHaw5jg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:49 2026 by rpki-client