This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: XpYg22ehAjdw3IrUHLjf6boRy5SFBoW13IuG2fN2cHw= Subject key identifier: 43:FF:58:B3:69:CC:B2:3E:E0:EC:A6:1F:96:76:51:E1:3E:95:F9:DC Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 0276A5D3DF2ACEBD0F59549514FD9B80EEA07B2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 17:00:57 +0000 Manifest this update: Sat 24 Jan 2026 16:55:57 +0000 Manifest next update: Sun 25 Jan 2026 20:41:57 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 2: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 3: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 5: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 6: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: s1TWlnTp/k84F6z6XZ3VXg19/tMxs//Mj1dC4g1bZ7E=) 7: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:76:a5:d3:df:2a:ce:bd:0f:59:54:95:14:fd:9b:80:ee:a0:7b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jan 24 16:55:57 2026 GMT Not After : Jan 25 20:41:57 2026 GMT Subject: CN=43FF58B369CCB23EE0ECA61F967651E13E95F9DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:77:93:46:f7:d2:f3:0e:ab:9c:bf:d8:a1: d9:c4:c8:52:3c:03:31:6c:e9:cb:48:56:7d:82:88: 43:11:05:7e:92:6b:30:23:77:ce:e9:a3:b7:cc:b3: 63:f6:d6:de:50:08:83:c1:00:d5:60:45:71:47:b4: e9:05:22:e9:2c:86:1a:a4:72:01:bd:b2:ab:8f:5b: 2a:95:cc:4b:c1:4b:d6:d2:1b:ca:65:95:5e:35:8e: 28:92:20:78:ec:3b:bd:eb:e6:6a:d0:ed:d8:45:4c: 56:c0:a4:d7:b1:6c:38:ff:99:de:59:04:42:d9:03: 6f:1c:77:2b:04:eb:c3:11:f0:ed:37:87:31:3c:a0: e9:a8:4c:78:89:7b:ec:31:4c:fe:81:a1:dd:55:7a: 1d:ec:61:3d:5b:49:6d:b8:e3:23:a3:ce:75:75:28: a7:e6:24:74:6a:b1:c7:ed:87:21:47:70:73:11:cd: 8f:a1:44:fd:0e:6a:09:df:d7:0d:94:3f:83:92:2a: e1:3a:8a:69:13:1c:86:bd:9f:eb:e4:6e:99:fd:10: 56:f4:bd:2e:0f:9b:2d:82:37:03:3d:5f:09:49:54: 4a:ed:0f:f9:9a:4c:bd:b4:57:51:a7:8e:65:68:1e: d1:e0:9c:a9:4b:55:c3:a2:a7:f1:92:ec:ee:08:5f: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FF:58:B3:69:CC:B2:3E:E0:EC:A6:1F:96:76:51:E1:3E:95:F9:DC X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8a:d6:85:fc:86:2a:cb:83:47:1b:f2:95:a5:d3:8e:35:45: 57:6b:e6:43:0b:ae:9c:98:de:e6:05:ad:e8:4b:55:6d:e3:16: 3b:d8:f6:a3:ec:54:84:14:b3:bb:2e:b1:e5:74:04:b9:95:ce: 0e:4a:4d:7b:48:f8:6b:67:b1:4b:a0:e5:ac:e7:bd:70:60:a4: 8e:5d:36:09:e2:6f:cc:d1:88:07:ce:08:f8:50:d6:26:63:35: 02:58:69:b8:73:cf:be:a3:b3:19:79:53:df:4d:6b:82:be:8e: 7c:10:fe:dd:5e:3f:ed:e6:2d:59:ee:e8:d7:52:a6:b7:dc:17: 71:43:c1:a9:cd:c8:11:12:6f:e1:0b:4e:03:12:8e:85:b9:52: d6:d3:63:14:95:c1:4f:d3:46:23:f2:5f:07:f2:ff:9a:f8:ad: d5:84:34:b1:32:79:3d:2a:ea:21:67:da:ce:72:ed:48:c5:99: 8a:99:3d:e2:ab:13:53:58:fa:d8:6a:0b:cc:7e:c8:d6:4d:1a: 2f:b0:cd:4f:9d:10:ee:4f:22:21:50:dd:92:cc:a4:34:cb:fd: 7f:ae:2a:42:a6:3b:32:f9:dd:7d:ed:8a:68:04:53:11:bb:94: d4:b5:85:d7:64:7a:14:6f:f7:39:fd:a5:06:9c:3f:fd:76:a2: 2e:94:dc:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAnal098qzr0PWVSVFP2bgO6geyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAxMjQxNjU1NTdaFw0yNjAxMjUyMDQxNTdaMDMxMTAvBgNV BAMTKDQzRkY1OEIzNjlDQ0IyM0VFMEVDQTYxRjk2NzY1MUUxM0U5NUY5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauXeTRvfS8w6rnL/YodnEyFI8 AzFs6ctIVn2CiEMRBX6SazAjd87po7fMs2P21t5QCIPBANVgRXFHtOkFIukshhqk cgG9squPWyqVzEvBS9bSG8pllV41jiiSIHjsO73r5mrQ7dhFTFbApNexbDj/md5Z BELZA28cdysE68MR8O03hzE8oOmoTHiJe+wxTP6Bod1Veh3sYT1bSW244yOjznV1 KKfmJHRqscfthyFHcHMRzY+hRP0Oagnf1w2UP4OSKuE6imkTHIa9n+vkbpn9EFb0 vS4Pmy2CNwM9XwlJVErtD/maTL20V1GnjmVoHtHgnKlLVcOip/GS7O4IXxmzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ/9Ys2nMsj7g7KYflnZR4T6V+dwwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhorWhfyGKsuD RxvylaXTjjVFV2vmQwuunJje5gWt6EtVbeMWO9j2o+xUhBSzuy6x5XQEuZXODkpN e0j4a2exS6DlrOe9cGCkjl02CeJvzNGIB84I+FDWJmM1AlhpuHPPvqOzGXlT301r gr6OfBD+3V4/7eYtWe7o11Kmt9wXcUPBqc3IERJv4QtOAxKOhblS1tNjFJXBT9NG I/JfB/L/mvit1YQ0sTJ5PSrqIWfaznLtSMWZipk94qsTU1j62GoLzH7I1k0aL7DN T50Q7k8iIVDdksykNMv9f64qQqY7Mvndfe2KaARTEbuU1LWF12R6FG/3Of2lBpw/ /XaiLpTcRQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:25 2026 by rpki-client