This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: xftvpnD/c1NsRZeHI/VQw3U8XoJtYKOJi10iF2lO54U= Subject key identifier: 6B:24:D6:FA:59:65:8E:AA:1D:01:C8:72:5E:2D:FC:FA:DF:FC:F0:32 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 30887A2CC0EEA74CE0ADF08FB12107AAD1F6E4A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 09 Signing time: Sat 24 Jan 2026 21:10:57 +0000 Manifest this update: Sat 24 Jan 2026 21:05:57 +0000 Manifest next update: Sun 25 Jan 2026 22:18:57 +0000 Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: ezT6jf9sIHkevbxjHYpj2I3sydKIwfJ0CTvFHDFBm8c=) 2: 323430313a353138303a3a2f33322d3332203d3e203331323136.roa (hash: c2BFIJVN4JIT5LRTdXldbHvwV8Z329mItcC2iWdKyZo=) 3: 323430313a353138303a3a2f33322d3332203d3e203539303030.roa (hash: TRLluA6jf4NdFyOWtNNpbTdRhqAOQP2P0L4Vhj+33WU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:88:7a:2c:c0:ee:a7:4c:e0:ad:f0:8f:b1:21:07:aa:d1:f6:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Jan 24 21:05:57 2026 GMT Not After : Jan 25 22:18:57 2026 GMT Subject: CN=6B24D6FA59658EAA1D01C8725E2DFCFADFFCF032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:e6:e3:be:a7:56:e5:26:92:77:1d:5a:12: ee:e5:1c:b2:b3:b4:39:49:5c:e5:be:a5:5c:1f:61: 35:ca:aa:d6:91:79:2d:e7:7c:d2:b9:fd:4c:16:73: 63:a1:13:c5:46:8a:55:70:51:2f:34:ad:e5:2a:62: 4e:72:83:45:cf:7e:ef:f5:a0:19:78:b0:61:33:19: 98:75:dc:93:9f:08:04:55:1f:02:47:88:c2:c2:16: 82:6f:32:2a:bd:1d:a2:71:ac:ba:7f:65:cc:96:11: 7d:ee:8a:94:c6:bc:62:e1:fc:80:d2:3a:98:bd:08: e6:5b:83:7e:bc:06:95:bf:6c:a1:92:ea:3e:6b:bd: 9a:55:ec:d6:82:14:ef:93:c5:16:00:6a:cc:12:41: 06:63:f6:1c:11:ca:07:d6:27:34:00:1a:43:eb:05: a2:06:70:1e:38:3f:51:02:51:36:37:c4:1a:02:2d: bc:ea:09:52:f2:c7:b6:66:95:f5:b2:07:c7:2f:70: 21:8e:01:2a:0f:23:be:3e:a7:3d:01:90:59:83:cf: 2b:6d:ce:5a:ee:1c:9c:ec:58:5a:b5:8d:a2:11:05: 63:a4:14:e8:33:75:9e:ff:3b:16:7d:f6:10:a7:ba: 4b:92:6f:ef:43:ed:11:69:60:b4:df:ef:3b:b7:fe: c4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:24:D6:FA:59:65:8E:AA:1D:01:C8:72:5E:2D:FC:FA:DF:FC:F0:32 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:53:54:6f:c0:af:a5:5e:53:ff:3a:4b:86:b6:d7:35:e7:31: 7a:a4:b1:ab:22:36:8d:29:47:65:db:1a:2d:eb:4f:ad:c5:87: 89:e0:94:03:20:9b:1e:83:79:79:31:4d:04:d6:c6:50:30:9b: fb:a9:0a:d0:73:ff:a0:6c:a1:51:86:e9:4e:a7:47:72:58:ad: 9a:b7:e2:b9:fc:c2:1b:32:c0:98:3f:8a:c2:bb:88:da:93:3e: a4:a2:26:4f:5e:5a:8d:b5:84:cf:be:88:00:ab:da:db:df:c7: 08:b8:c9:65:85:7d:38:55:bd:2a:ba:d8:23:41:7d:e1:a8:b9: e3:ea:62:aa:5e:af:14:b0:96:51:e3:91:ea:91:b6:f3:17:6d: 90:12:9e:c9:86:38:8b:4a:e9:90:82:ea:54:57:e8:57:31:63: 93:33:24:97:88:ea:a3:1d:ad:a4:8a:46:39:76:82:2a:92:8c: ab:f0:72:3e:58:38:75:15:60:31:cf:d5:0b:2c:75:e7:7b:9d: 75:2b:ae:6c:a4:98:ef:10:d4:d7:ed:01:86:42:2f:91:e4:09: ec:08:af:b4:f4:b4:c2:6c:aa:26:fb:eb:f4:ec:8c:fd:e6:31: ba:96:a5:3a:48:f4:0d:5e:67:dd:0a:a0:d5:69:05:3f:81:71: 76:ed:c5:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMIh6LMDup0zgrfCPsSEHqtH25KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjAxMjQyMTA1NTdaFw0yNjAxMjUyMjE4NTdaMDMxMTAvBgNV BAMTKDZCMjRENkZBNTk2NThFQUExRDAxQzg3MjVFMkRGQ0ZBREZGQ0YwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3G+bjvqdW5SaSdx1aEu7lHLKz tDlJXOW+pVwfYTXKqtaReS3nfNK5/UwWc2OhE8VGilVwUS80reUqYk5yg0XPfu/1 oBl4sGEzGZh13JOfCARVHwJHiMLCFoJvMiq9HaJxrLp/ZcyWEX3uipTGvGLh/IDS Opi9COZbg368BpW/bKGS6j5rvZpV7NaCFO+TxRYAaswSQQZj9hwRygfWJzQAGkPr BaIGcB44P1ECUTY3xBoCLbzqCVLyx7ZmlfWyB8cvcCGOASoPI74+pz0BkFmDzytt zlruHJzsWFq1jaIRBWOkFOgzdZ7/OxZ99hCnukuSb+9D7RFpYLTf7zu3/sT1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUayTW+llljqodAchyXi38+t/88DIwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFNUb8CvpV5T /zpLhrbXNecxeqSxqyI2jSlHZdsaLetPrcWHieCUAyCbHoN5eTFNBNbGUDCb+6kK 0HP/oGyhUYbpTqdHclitmrfiufzCGzLAmD+KwruI2pM+pKImT15ajbWEz76IAKva 29/HCLjJZYV9OFW9KrrYI0F94ai54+piql6vFLCWUeOR6pG28xdtkBKeyYY4i0rp kILqVFfoVzFjkzMkl4jqox2tpIpGOXaCKpKMq/ByPlg4dRVgMc/VCyx153uddSuu bKSY7xDU1+0BhkIvkeQJ7AivtPS0wmyqJvvr9OyM/eYxupalOkj0DV5n3Qqg1WkF P4Fxdu3Fyw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:55 2026 by rpki-client