This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: C1senxOb9HQCXchpiNMVB/A6ZTiG2dNqVuUMhJ89zLk= Subject key identifier: B6:F4:7C:0E:EA:00:54:B4:01:0E:02:BB:D1:9A:BB:B0:45:C2:55:1D Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 46FECE7DDFE4F8A94AA5D278F65AA9527752F361 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 04:15:57 +0000 Manifest this update: Sun 25 Jan 2026 04:10:57 +0000 Manifest next update: Mon 26 Jan 2026 07:42:57 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: d9FHFsasRrfLTei3qEdeoNinpBKn3xRqKFDGnJiaE/Y=) 2: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fe:ce:7d:df:e4:f8:a9:4a:a5:d2:78:f6:5a:a9:52:77:52:f3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Jan 25 04:10:57 2026 GMT Not After : Jan 26 07:42:57 2026 GMT Subject: CN=B6F47C0EEA0054B4010E02BBD19ABBB045C2551D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:2c:01:e8:a7:45:46:8c:ab:50:48:74:fb: 9e:a3:ae:49:bd:7a:22:9a:72:2b:73:2a:39:bf:d8: f7:12:ff:10:e7:90:a7:57:24:dd:52:6e:35:66:e6: 45:cd:6a:fd:02:e6:bc:eb:69:d1:04:56:4d:55:94: 27:19:03:53:cd:23:c8:6d:4a:64:49:d6:cc:01:89: 45:bd:51:ad:03:6d:1b:a8:06:fb:d1:12:55:73:f0: db:64:e8:58:c0:08:20:84:e9:b9:dc:a7:37:fd:98: 5e:ef:e1:29:6e:10:17:fc:7d:e4:fa:8f:a4:ef:a2: 90:d0:42:87:2f:71:bd:c6:75:4c:ad:f4:57:e4:66: d2:1a:fa:99:3b:84:d5:54:c5:77:87:2b:ab:cd:88: 1f:a6:1d:2a:d0:2f:38:33:6a:1e:0d:47:ea:51:e8: b3:cd:99:43:d9:66:18:a8:8d:aa:83:6c:67:b8:c9: 88:f9:16:52:4b:06:19:67:cd:3f:22:a9:42:f7:19: ed:f9:7e:a7:c5:5d:2e:24:31:88:9d:e7:21:5e:6f: 1e:34:10:5d:9c:7e:97:80:ec:b7:0d:f4:ca:f8:1d: b9:6b:26:b0:7b:71:ae:4a:74:04:e3:4b:48:e9:9e: 39:5c:48:eb:da:9b:d4:83:95:12:16:f4:39:2a:24: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F4:7C:0E:EA:00:54:B4:01:0E:02:BB:D1:9A:BB:B0:45:C2:55:1D X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:36:b0:a4:24:4f:b9:35:7e:55:53:43:93:2f:43:76:8d: 76:0c:09:ef:98:20:bb:1c:33:54:a4:e2:8e:d5:78:b7:c8:24: d1:ea:6a:1e:59:f3:ad:1a:ce:2a:e4:04:5e:e8:bc:d7:b3:2e: ff:eb:7e:0a:d2:1c:15:8d:57:ae:85:1d:22:0a:9e:3f:56:96: 10:9d:bf:62:96:60:63:b3:27:d3:d3:d3:72:b0:99:39:12:58: 7c:00:ea:30:db:84:6a:bb:28:f0:c9:88:5b:ee:66:bf:ac:ed: 4e:20:d6:48:ef:43:be:c5:2a:a1:a6:68:e2:fe:45:b5:a8:0b: 09:d5:2b:33:6e:84:ad:45:e0:36:87:7d:0b:0b:89:1d:b2:d8: fe:4a:e5:74:76:64:1e:1a:53:ae:1a:39:39:86:4a:b0:a1:f8: 73:ea:95:d2:3b:0c:1c:7d:1a:bc:99:42:30:9d:19:fd:a1:58: 61:bf:c8:f8:d4:3e:b3:46:44:14:12:d6:1f:9d:0d:fa:8f:92: 26:18:00:f2:5c:d0:54:2b:c1:0b:62:41:57:b0:f0:23:27:e6: e0:33:56:cb:d7:f8:b9:73:33:12:6c:59:ce:a6:6b:9b:b1:7c: 6d:30:0a:4f:5a:a4:2e:1c:30:b1:6e:97:cb:cc:53:ed:17:a1: b3:d0:1f:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURv7Ofd/k+KlKpdJ49lqpUndS82EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjAxMjUwNDEwNTdaFw0yNjAxMjYwNzQyNTdaMDMxMTAvBgNV BAMTKEI2RjQ3QzBFRUEwMDU0QjQwMTBFMDJCQkQxOUFCQkIwNDVDMjU1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSSwB6KdFRoyrUEh0+56jrkm9 eiKacitzKjm/2PcS/xDnkKdXJN1SbjVm5kXNav0C5rzradEEVk1VlCcZA1PNI8ht SmRJ1swBiUW9Ua0DbRuoBvvRElVz8Ntk6FjACCCE6bncpzf9mF7v4SluEBf8feT6 j6TvopDQQocvcb3GdUyt9FfkZtIa+pk7hNVUxXeHK6vNiB+mHSrQLzgzah4NR+pR 6LPNmUPZZhiojaqDbGe4yYj5FlJLBhlnzT8iqUL3Ge35fqfFXS4kMYid5yFebx40 EF2cfpeA7LcN9Mr4HblrJrB7ca5KdATjS0jpnjlcSOvam9SDlRIW9DkqJISHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtvR8DuoAVLQBDgK70Zq7sEXCVR0wHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafw2sKQkT7k1 flVTQ5MvQ3aNdgwJ75gguxwzVKTijtV4t8gk0epqHlnzrRrOKuQEXui817Mu/+t+ CtIcFY1XroUdIgqeP1aWEJ2/YpZgY7Mn09PTcrCZORJYfADqMNuEarso8MmIW+5m v6ztTiDWSO9DvsUqoaZo4v5FtagLCdUrM26ErUXgNod9CwuJHbLY/krldHZkHhpT rho5OYZKsKH4c+qV0jsMHH0avJlCMJ0Z/aFYYb/I+NQ+s0ZEFBLWH50N+o+SJhgA 8lzQVCvBC2JBV7DwIyfm4DNWy9f4uXMzEmxZzqZrm7F8bTAKT1qkLhwwsW6Xy8xT 7Rehs9Affw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:12 2026 by rpki-client