This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: yRjZCkvvbQWSR+54T/aG2fOqL/d0WcSLkVWAu53Cn4U= Subject key identifier: 70:1A:A0:1F:38:6D:D6:9E:AC:29:23:2E:64:1A:05:F2:43:66:8A:FD Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 1B9CB70D307CD716DB589C751B39624DEF2AA7D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 16:00:57 +0000 Manifest this update: Sat 24 Jan 2026 15:55:57 +0000 Manifest next update: Sun 25 Jan 2026 17:49:57 +0000 Files and hashes: 1: 3130332e3139372e3138332e302f32342d3234203d3e20313337343433.roa (hash: k0G/J1wGW3vLozXs6GIpw7cXS7zIX2gS1KUAiSrbLNE=) 2: 3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa (hash: ml/dotA8tYURkCi9gGLb/6fH4D6/8JJeVSMbsmWUy9o=) 3: 3130332e3231382e39342e302f32342d3234203d3e20313337343433.roa (hash: m0yFRzPkgz00e4Cr6K/4bM0qVLURm4aMUqElN3RsHhw=) 4: 3130332e3133392e39332e302f32342d3234203d3e20313337343433.roa (hash: zau23N00IR2hAGYo56Nge2Ymz5rQiM6x3QCKZyW/qEQ=) 5: 3130332e3231382e39332e302f32342d3234203d3e20313337343433.roa (hash: 36IjhApk+lrNSl59xepON7qOQdcWPd2A44sgRugBZfM=) 6: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: HC/PKJQMEq/0aN0iIaXfi7+PRN+UZqteA4xnzZUTpqY=) 7: 3130332e3133392e39322e302f32332d3233203d3e20313337343433.roa (hash: M77j7VeyeEX/ETQ34IfJTNB0SF1fGqTOhIQik2Jur6A=) 8: 3130332e3231382e39352e302f32342d3234203d3e20313337343433.roa (hash: GVjEDdCubBLhiNm+dRXsd+fi4yoUTEQ/aIw8iLMLxg0=) 9: 3130332e3139372e3138302e302f32342d3234203d3e20313337343433.roa (hash: CbTkb73of9yMkwZm2DCy7G40BwRZAGHBqpKVypR2kSo=) 10: 3130332e3133392e39322e302f32342d3234203d3e20313337343433.roa (hash: wEcbJdkQT2x+fizh5eejFoR3YhFeqHidy+6FZo8/F6M=) 11: 3130332e3231382e39322e302f32342d3234203d3e20313337343433.roa (hash: 8EKSgS0+gVnmNhEYarOr5cOeWIoBPw3M3fATI4XYr+g=) 12: 3130332e3139372e3138312e302f32342d3234203d3e20313337343433.roa (hash: zOxNjVfF4PHJ4W0md7ggUK41QC6HrtT7zlrQOASTAfY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9c:b7:0d:30:7c:d7:16:db:58:9c:75:1b:39:62:4d:ef:2a:a7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Jan 24 15:55:57 2026 GMT Not After : Jan 25 17:49:57 2026 GMT Subject: CN=701AA01F386DD69EAC29232E641A05F243668AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:82:41:fd:f3:d0:72:15:42:64:84:9b:30: 02:bd:f0:8d:b5:7e:a6:12:b4:a9:8c:70:0b:f9:c8: 9e:f0:a0:09:85:2a:94:09:62:90:03:99:da:8f:6e: b0:d3:d7:3b:47:29:3c:e2:ea:ec:2d:f5:b6:31:39: 79:ad:19:0c:54:11:ac:dd:bc:03:bb:3a:64:97:fd: d4:c0:95:a3:73:0e:6b:6b:15:17:60:84:f6:45:64: c0:e5:bb:d7:26:09:66:89:7e:e2:37:7e:c0:19:24: 99:7a:fa:6f:5b:99:16:ae:7e:3a:59:d8:1f:a5:6a: 5d:93:4b:9e:d0:b6:53:f4:2c:19:47:22:5e:36:37: f8:23:d7:83:ee:ff:d5:0a:74:4f:2e:4e:d2:d2:27: 66:57:a0:d3:d6:43:de:0a:52:df:40:37:25:76:5d: 7f:82:6e:b9:a5:ac:9e:fd:e1:f6:b6:e9:23:cc:e4: 90:44:ba:a8:2f:ae:64:ac:00:1a:8a:18:c2:0a:fe: 11:29:a5:d6:c8:62:49:69:62:09:a1:23:63:ec:a9: 82:a8:80:f9:7f:d4:08:d1:fe:2f:40:cb:23:76:7b: 0c:fe:75:8b:93:8e:b4:a3:02:61:0b:9e:6c:05:16: 39:90:06:c5:d7:df:6f:c2:96:f0:47:9d:93:d2:e7: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:A0:1F:38:6D:D6:9E:AC:29:23:2E:64:1A:05:F2:43:66:8A:FD X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:76:8e:86:51:3f:ba:e1:3c:fe:54:ac:60:bf:db:8b:f1: 0e:aa:d4:61:00:f0:75:44:29:74:25:79:0c:12:e3:9a:f4:f3: 5e:23:7e:4c:7c:50:b2:ac:16:f3:a0:e7:1e:3a:25:3b:2d:f5: 94:10:d4:2a:c5:96:69:d6:03:79:42:2b:b1:40:f4:e8:66:59: 5b:fc:94:04:3d:ef:a6:74:8c:89:f6:ff:c5:ea:e8:6f:88:99: a4:a3:1b:6a:9c:42:a2:3e:df:8c:9f:92:df:b7:21:02:c5:46: e7:7d:cb:aa:29:97:9d:50:f3:94:b6:68:f7:10:94:64:f3:23: 0b:99:5b:0c:43:38:89:94:2e:65:61:23:c5:09:26:ab:07:8c: 6a:05:09:67:b8:c9:75:c4:14:3a:75:dc:63:a3:41:ca:d5:1d: f2:d8:a2:12:e2:bf:1b:3d:a3:f2:ac:8c:90:eb:6a:6c:43:83: db:fe:1a:4c:1b:60:cd:be:2d:68:fe:28:10:4b:be:a7:9b:9b: 62:12:2f:29:15:a6:23:cc:34:65:74:c2:fc:ac:70:1a:80:32: 40:00:b3:ae:60:31:bc:20:b5:6d:0d:df:ec:68:9a:dc:b4:9e: 64:dd:63:01:6a:76:e2:e5:4d:c6:8c:53:d2:69:bd:43:4e:14: df:ef:78:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG5y3DTB81xbbWJx1GzliTe8qp9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjAxMjQxNTU1NTdaFw0yNjAxMjUxNzQ5NTdaMDMxMTAvBgNV BAMTKDcwMUFBMDFGMzg2REQ2OUVBQzI5MjMyRTY0MUEwNUYyNDM2NjhBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeoJB/fPQchVCZISbMAK98I21 fqYStKmMcAv5yJ7woAmFKpQJYpADmdqPbrDT1ztHKTzi6uwt9bYxOXmtGQxUEazd vAO7OmSX/dTAlaNzDmtrFRdghPZFZMDlu9cmCWaJfuI3fsAZJJl6+m9bmRaufjpZ 2B+lal2TS57QtlP0LBlHIl42N/gj14Pu/9UKdE8uTtLSJ2ZXoNPWQ94KUt9ANyV2 XX+CbrmlrJ794fa26SPM5JBEuqgvrmSsABqKGMIK/hEppdbIYklpYgmhI2PsqYKo gPl/1AjR/i9AyyN2ewz+dYuTjrSjAmELnmwFFjmQBsXX32/ClvBHnZPS56fXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcBqgHzht1p6sKSMuZBoF8kNmiv0wHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj12joZRP7rh PP5UrGC/24vxDqrUYQDwdUQpdCV5DBLjmvTzXiN+THxQsqwW86DnHjolOy31lBDU KsWWadYDeUIrsUD06GZZW/yUBD3vpnSMifb/xerob4iZpKMbapxCoj7fjJ+S37ch AsVG533LqimXnVDzlLZo9xCUZPMjC5lbDEM4iZQuZWEjxQkmqweMagUJZ7jJdcQU OnXcY6NBytUd8tiiEuK/Gz2j8qyMkOtqbEOD2/4aTBtgzb4taP4oEEu+p5ubYhIv KRWmI8w0ZXTC/KxwGoAyQACzrmAxvCC1bQ3f7Gia3LSeZN1jAWp24uVNxoxT0mm9 Q04U3+94zw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:47 2026 by rpki-client