This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: h3pSIyL18ykRWbE1eha4e0Z+kRKh012GRt3XK3R1K/k= Subject key identifier: 57:C4:3C:F9:F3:DE:FB:4A:3C:91:48:AB:BC:84:E4:65:6A:2E:AE:77 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 733BE23E15265D71A11778FF8A6221A1B9B5EF8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:10:57 +0000 Manifest this update: Sun 25 Jan 2026 06:05:57 +0000 Manifest next update: Mon 26 Jan 2026 06:13:57 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 3: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: 5H8tBF81Yu8DwI//ENdFbXN9kW5WyDDmQdCCt/xcpoI=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3b:e2:3e:15:26:5d:71:a1:17:78:ff:8a:62:21:a1:b9:b5:ef:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Jan 25 06:05:57 2026 GMT Not After : Jan 26 06:13:57 2026 GMT Subject: CN=57C43CF9F3DEFB4A3C9148ABBC84E4656A2EAE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:ec:66:a9:c4:29:b6:e2:66:8a:18:cd:22: 06:8a:77:b0:10:d1:e5:9c:b0:0b:d2:c7:68:5c:cc: f9:8c:ba:03:8b:68:4b:e0:8c:7a:7e:28:24:3a:6d: 32:76:f0:19:f9:bc:dc:dc:76:ed:69:2c:22:65:f4: 4d:ef:df:a7:27:0b:d9:52:4b:86:f6:44:15:a6:cb: e1:26:30:74:9b:f6:9d:fb:cc:69:02:92:57:23:81: cf:00:2c:62:8d:e2:a2:1e:03:5a:cd:85:fa:b7:69: e3:13:94:bb:52:04:ff:60:48:e6:94:40:c0:b2:d7: f5:19:0a:a3:53:1c:34:89:f5:5c:d7:b0:0d:58:32: 31:d3:2f:cc:6c:a0:dc:21:77:fd:f1:16:d5:c6:21: f2:42:d7:89:ad:34:c7:88:33:a4:59:7e:ed:6b:d1: 7f:88:65:de:77:54:0f:7a:de:5d:1d:ab:46:2d:75: 41:f8:5e:c0:5d:64:a2:59:b1:ce:35:46:7f:d8:97: cd:52:fc:01:70:c5:54:d3:8e:bc:b6:90:11:a9:9f: 54:40:ab:31:81:d2:be:4e:f1:7a:6e:25:58:6f:97: 6e:d1:03:bd:86:2e:8b:ab:b1:a1:a4:41:e7:2c:71: c0:99:ae:43:1e:49:c1:b7:83:33:dc:ab:d5:98:ea: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:3C:F9:F3:DE:FB:4A:3C:91:48:AB:BC:84:E4:65:6A:2E:AE:77 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3c:92:9e:ca:f6:d8:92:9a:8b:9e:72:84:a3:c2:6f:32:68: 03:23:07:dd:2d:a8:e2:bd:90:e0:4e:4c:c7:c9:71:13:dc:ba: f9:68:10:31:10:fb:3e:85:84:8b:02:f2:06:56:12:6a:e5:24: 15:a6:b3:c9:2a:e0:ad:f2:94:31:4f:2d:d4:7d:fa:ca:94:e3: 31:22:5e:23:b7:dc:f4:0f:99:57:a5:00:57:c9:17:81:c8:26: 5e:ed:f3:a0:ae:04:02:23:c3:a9:66:34:36:88:5d:a9:a5:e6: 85:8a:81:56:30:4d:c9:17:b5:c1:a1:7d:eb:98:71:16:49:ae: 2e:dd:0f:89:bb:3e:c8:3c:39:c4:aa:c4:98:2b:f0:f5:27:03: 19:c8:f4:0a:ea:02:70:7d:55:70:4e:43:38:46:57:b4:97:ce: 5a:99:f7:db:a7:bd:86:a5:f7:6a:b3:65:7f:0c:06:67:d9:34: 5c:cc:75:ff:6f:ad:ca:56:9a:b2:c3:99:82:d5:e2:1d:5f:12: d3:76:f4:d3:54:8e:fc:a3:63:26:a9:90:7b:b4:2f:65:dd:8f: 31:99:03:44:0c:e1:ca:8e:aa:59:ac:16:3b:12:56:0c:4c:ee: e1:cc:54:08:c2:5e:c2:c4:bd:65:e0:7f:e2:75:6a:28:28:a4: 0d:13:66:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUczviPhUmXXGhF3j/imIhobm1744wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjAxMjUwNjA1NTdaFw0yNjAxMjYwNjEzNTdaMDMxMTAvBgNV BAMTKDU3QzQzQ0Y5RjNERUZCNEEzQzkxNDhBQkJDODRFNDY1NkEyRUFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNA+xmqcQptuJmihjNIgaKd7AQ 0eWcsAvSx2hczPmMugOLaEvgjHp+KCQ6bTJ28Bn5vNzcdu1pLCJl9E3v36cnC9lS S4b2RBWmy+EmMHSb9p37zGkCklcjgc8ALGKN4qIeA1rNhfq3aeMTlLtSBP9gSOaU QMCy1/UZCqNTHDSJ9VzXsA1YMjHTL8xsoNwhd/3xFtXGIfJC14mtNMeIM6RZfu1r 0X+IZd53VA963l0dq0YtdUH4XsBdZKJZsc41Rn/Yl81S/AFwxVTTjry2kBGpn1RA qzGB0r5O8XpuJVhvl27RA72GLoursaGkQecsccCZrkMeScG3gzPcq9WY6nIBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV8Q8+fPe+0o8kUirvITkZWourncwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjySnsr22JKa i55yhKPCbzJoAyMH3S2o4r2Q4E5Mx8lxE9y6+WgQMRD7PoWEiwLyBlYSauUkFaaz ySrgrfKUMU8t1H36ypTjMSJeI7fc9A+ZV6UAV8kXgcgmXu3zoK4EAiPDqWY0Nohd qaXmhYqBVjBNyRe1waF965hxFkmuLt0Pibs+yDw5xKrEmCvw9ScDGcj0CuoCcH1V cE5DOEZXtJfOWpn326e9hqX3arNlfwwGZ9k0XMx1/2+tylaassOZgtXiHV8S03b0 01SO/KNjJqmQe7QvZd2PMZkDRAzhyo6qWawWOxJWDEzu4cxUCMJewsS9ZeB/4nVq KCikDRNmWA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:42 2026 by rpki-client