This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json) Hash identifier: e3CpGEbNNfheDYEUl1qaBqa7g7swal+LKRSfU6kCGTI= Subject key identifier: 87:51:50:78:C4:46:83:AF:FE:84:C8:07:AD:1E:13:97:81:4B:8A:5A Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Certificate serial: 75972679575BAF613E1BE8E9C2F3AE2169EF6FB7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 02:30:57 +0000 Manifest this update: Sun 25 Jan 2026 02:25:57 +0000 Manifest next update: Mon 26 Jan 2026 06:17:57 +0000 Files and hashes: 1: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=) 2: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=) 3: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: Qz5c5XECmJ5u9okClWXSavnIhQK8BwwK8qawT6Lvj5c=) 4: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:97:26:79:57:5b:af:61:3e:1b:e8:e9:c2:f3:ae:21:69:ef:6f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Validity Not Before: Jan 25 02:25:57 2026 GMT Not After : Jan 26 06:17:57 2026 GMT Subject: CN=87515078C44683AFFE84C807AD1E1397814B8A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:e0:63:c5:19:04:19:20:39:f6:b4:b2:f8: 9f:5f:2b:5d:92:1d:b3:6e:da:1d:13:38:d0:fb:83: bb:81:e4:d1:b2:33:88:cb:6d:2b:31:7f:76:c4:04: 2e:e5:6d:29:cb:c4:48:f9:36:76:fd:ea:e4:bb:84: 89:ad:56:4b:c8:4d:ed:57:59:03:13:ea:fb:5e:92: 5c:2d:d6:2b:7e:52:37:28:1b:6e:9f:2f:3c:fa:ae: af:51:af:e1:ff:52:8b:20:20:22:ca:25:11:99:49: 42:b1:6d:4f:17:85:2c:44:8d:e8:22:66:01:b6:c5: 9b:fd:02:e2:70:9f:56:39:36:74:e5:72:c9:42:e6: d6:63:21:7e:65:57:d4:c1:99:6f:c0:bd:fa:8b:4a: 5c:ab:af:78:64:1e:fa:45:99:98:9e:77:3a:18:57: 87:bb:3b:e5:a0:23:44:09:51:0f:5c:81:3b:88:a5: e0:e2:31:d6:42:d8:e0:37:d4:c2:e7:69:55:c1:62: 66:d4:52:96:04:39:e6:ab:b7:99:ca:f0:6b:1a:89: f8:34:80:4f:51:6a:b8:ad:2e:43:d4:17:87:c0:1d: ed:6d:c3:96:85:45:69:4d:61:47:2b:79:ef:8a:2e: f3:c2:26:02:fb:f2:52:f5:44:5f:d4:20:a6:d1:9e: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:50:78:C4:46:83:AF:FE:84:C8:07:AD:1E:13:97:81:4B:8A:5A X509v3 Authority Key Identifier: keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:ea:97:3c:cb:9d:06:d5:70:6b:cf:e2:fc:c0:6e:24:c8: 76:a0:9c:f1:07:87:4d:72:45:8b:81:ea:21:97:27:ce:86:aa: cf:0a:6d:e6:e1:29:3c:be:95:f8:b6:e9:0b:4e:c4:16:41:66: f7:fd:e0:4c:d0:90:62:1b:a1:3c:0e:fa:0e:ea:86:74:e4:5a: 9d:75:bb:55:9d:b1:00:4e:f0:d1:ba:af:ed:98:cf:ed:7c:06: b7:b6:cc:09:27:2f:6a:19:72:2a:31:63:65:eb:75:cc:9a:db: 76:53:03:da:35:88:01:85:ea:cb:17:12:5c:95:5a:5c:88:83: bf:bc:74:ae:90:21:07:6b:6f:11:d3:d7:1d:15:20:90:b9:66: 86:87:6f:31:5d:12:cd:5c:b2:c7:09:1f:7e:44:54:8c:e0:8b: 55:43:27:49:c2:a7:b5:43:3b:57:b8:56:a8:c3:ad:4a:01:a8: 0d:b1:32:f2:9b:e6:42:c1:8a:94:16:78:45:a6:c6:57:c6:cb: 14:b0:ea:cc:52:dc:ad:b5:0c:6c:7c:50:03:73:f8:f5:32:99: d0:9d:16:b1:85:a0:cf:27:0f:30:13:57:93:08:ca:11:22:da: 1b:ff:ba:cc:6f:a8:ca:7c:07:48:ea:39:48:50:b5:72:28:5f: d8:ca:4c:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdZcmeVdbr2E+G+jpwvOuIWnvb7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB QjNCOTA3RTAeFw0yNjAxMjUwMjI1NTdaFw0yNjAxMjYwNjE3NTdaMDMxMTAvBgNV BAMTKDg3NTE1MDc4QzQ0NjgzQUZGRTg0QzgwN0FEMUUxMzk3ODE0QjhBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+uBjxRkEGSA59rSy+J9fK12S HbNu2h0TOND7g7uB5NGyM4jLbSsxf3bEBC7lbSnLxEj5Nnb96uS7hImtVkvITe1X WQMT6vteklwt1it+UjcoG26fLzz6rq9Rr+H/UosgICLKJRGZSUKxbU8XhSxEjegi ZgG2xZv9AuJwn1Y5NnTlcslC5tZjIX5lV9TBmW/AvfqLSlyrr3hkHvpFmZiedzoY V4e7O+WgI0QJUQ9cgTuIpeDiMdZC2OA31MLnaVXBYmbUUpYEOeart5nK8Gsaifg0 gE9RaritLkPUF4fAHe1tw5aFRWlNYUcree+KLvPCJgL78lL1RF/UIKbRnjg9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh1FQeMRGg6/+hMgHrR4Tl4FLilowHwYDVR0j BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1 QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGzqlzzLnQbV cGvP4vzAbiTIdqCc8QeHTXJFi4HqIZcnzoaqzwpt5uEpPL6V+LbpC07EFkFm9/3g TNCQYhuhPA76DuqGdORanXW7VZ2xAE7w0bqv7ZjP7XwGt7bMCScvahlyKjFjZet1 zJrbdlMD2jWIAYXqyxcSXJVaXIiDv7x0rpAhB2tvEdPXHRUgkLlmhodvMV0SzVyy xwkffkRUjOCLVUMnScKntUM7V7hWqMOtSgGoDbEy8pvmQsGKlBZ4RabGV8bLFLDq zFLcrbUMbHxQA3P49TKZ0J0WsYWgzycPMBNXkwjKESLaG/+6zG+oynwHSOo5SFC1 cihf2MpMxQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:22 2026 by rpki-client