This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json) Hash identifier: q6uVF4c5FLn1irTudoUCmJ4T8rGkd2vvfDWjOWH0z2I= Subject key identifier: A0:3B:FC:04:CD:0C:EB:9D:45:74:54:F3:93:08:F5:02:F1:D6:95:01 Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Certificate serial: 6CAA0B1A5EDB4146A7546D2484B72B49BE32D02F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:00:57 +0000 Manifest this update: Sat 24 Jan 2026 16:55:57 +0000 Manifest next update: Sun 25 Jan 2026 19:51:57 +0000 Files and hashes: 1: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=) 2: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: DkssVy384P9qAd1XgWYu1IQmdnQyq06u6ruRNF8qdow=) 3: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:aa:0b:1a:5e:db:41:46:a7:54:6d:24:84:b7:2b:49:be:32:d0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Validity Not Before: Jan 24 16:55:57 2026 GMT Not After : Jan 25 19:51:57 2026 GMT Subject: CN=A03BFC04CD0CEB9D457454F39308F502F1D69501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:71:1b:90:1f:d5:45:5d:c6:e8:03:42:7d: ec:21:8d:a4:c8:c5:34:75:03:a3:2e:75:de:d8:26: d2:04:e8:42:bf:2a:1a:ca:7d:b2:06:0b:87:59:63: 81:3f:8e:2e:8b:19:e0:ca:1f:79:b0:a7:18:5b:e3: c6:87:6c:b2:36:17:91:66:74:17:5f:29:70:48:36: 98:42:f7:a8:9f:d9:58:59:f4:5e:fb:4e:70:11:08: ca:67:68:40:e8:ef:a3:ee:96:1b:20:d1:34:4e:d0: 09:31:3a:04:f2:1d:60:6d:81:5a:fd:68:f5:d1:cd: 32:81:63:13:e9:65:c6:b6:cc:52:e1:fe:49:49:12: eb:26:0f:e1:1e:c5:f8:60:15:67:6b:4b:92:9e:2c: 2e:8d:e7:32:59:fc:33:81:90:75:f2:3b:c4:1c:65: 24:e8:b5:f6:1d:69:a0:7b:c0:71:63:17:01:14:17: 8d:43:46:7a:9a:c0:0a:00:33:6e:7e:f6:3c:e0:30: d8:15:1c:d2:5e:7a:15:28:67:a5:ff:95:4e:74:0e: e6:35:ca:a0:bb:fb:c4:14:af:dc:b4:6b:2f:e2:91: 98:62:b3:99:d7:59:0c:1f:13:07:2f:a4:84:c3:e8: 45:35:a5:92:08:f6:95:ec:68:fc:da:e0:72:52:9e: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3B:FC:04:CD:0C:EB:9D:45:74:54:F3:93:08:F5:02:F1:D6:95:01 X509v3 Authority Key Identifier: keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:fe:ce:48:90:93:1e:60:00:7b:14:42:59:67:73:a6:b1:15: 82:47:16:2a:04:e4:05:d5:da:98:37:2e:08:d7:33:6a:e7:5b: 60:c3:7c:59:3f:74:a3:ac:0b:8c:76:7f:92:65:65:51:e8:92: 1c:e2:35:f8:52:ec:da:1d:93:b1:21:7a:2a:b9:56:5a:6b:20: 1f:d3:4a:f5:ad:a2:28:f1:b4:f3:b7:11:4a:8d:7e:e4:97:ba: d3:8f:75:f8:0e:9e:63:10:fd:2b:28:eb:2c:2c:68:00:28:7e: 09:ea:78:1c:fa:78:2f:73:eb:ee:a4:96:f3:f0:04:48:09:15: 98:1c:25:0f:0e:c8:e9:58:06:28:a7:17:fa:46:08:24:ec:e8: 01:67:45:3e:55:2b:0f:9a:94:d6:26:7f:0f:0f:51:d2:62:1d: 23:d3:7c:c7:24:29:bd:34:d8:b9:1c:9e:49:5d:df:63:7f:65: 84:ad:22:7e:54:1e:8a:28:f6:2a:35:70:42:2a:82:6a:b9:ea: 9e:88:b3:0f:49:01:40:24:3b:3a:21:4c:41:64:b9:60:11:a3: 0e:99:97:f8:81:56:07:32:90:ea:60:de:6a:89:d8:5b:ab:dc: d6:0e:92:13:78:e9:15:28:a2:71:23:ab:ea:aa:8f:c2:0b:b7: 70:f2:03:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbKoLGl7bQUanVG0khLcrSb4y0C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2 M0EwNjcxNjAeFw0yNjAxMjQxNjU1NTdaFw0yNjAxMjUxOTUxNTdaMDMxMTAvBgNV BAMTKEEwM0JGQzA0Q0QwQ0VCOUQ0NTc0NTRGMzkzMDhGNTAyRjFENjk1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+HEbkB/VRV3G6ANCfewhjaTI xTR1A6Mudd7YJtIE6EK/KhrKfbIGC4dZY4E/ji6LGeDKH3mwpxhb48aHbLI2F5Fm dBdfKXBINphC96if2VhZ9F77TnARCMpnaEDo76Pulhsg0TRO0AkxOgTyHWBtgVr9 aPXRzTKBYxPpZca2zFLh/klJEusmD+EexfhgFWdrS5KeLC6N5zJZ/DOBkHXyO8Qc ZSTotfYdaaB7wHFjFwEUF41DRnqawAoAM25+9jzgMNgVHNJeehUoZ6X/lU50DuY1 yqC7+8QUr9y0ay/ikZhis5nXWQwfEwcvpITD6EU1pZII9pXsaPza4HJSnvNjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoDv8BM0M651FdFTzkwj1AvHWlQEwHwYDVR0j BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3 QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2 RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/7OSJCTHmAA exRCWWdzprEVgkcWKgTkBdXamDcuCNczaudbYMN8WT90o6wLjHZ/kmVlUeiSHOI1 +FLs2h2TsSF6KrlWWmsgH9NK9a2iKPG087cRSo1+5Je60491+A6eYxD9KyjrLCxo ACh+Cep4HPp4L3Pr7qSW8/AESAkVmBwlDw7I6VgGKKcX+kYIJOzoAWdFPlUrD5qU 1iZ/Dw9R0mIdI9N8xyQpvTTYuRyeSV3fY39lhK0iflQeiij2KjVwQiqCarnqnoiz D0kBQCQ7OiFMQWS5YBGjDpmX+IFWBzKQ6mDeaonYW6vc1g6SE3jpFSiicSOr6qqP wgu3cPIDqA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:53 2026 by rpki-client