This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: I3+/vGT0zIGI//glwR4HztPZNERMHj4R04uu7WxjIjw= Subject key identifier: EE:9D:50:7F:C3:C3:00:A9:FF:A8:9F:8B:B4:F4:DE:E1:E6:11:C1:70 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 278FAC03E924ADE85B73DDEFBC1AABB011ACFC6C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 02 Signing time: Tue 20 Jan 2026 02:22:40 +0000 Manifest this update: Tue 20 Jan 2026 02:17:40 +0000 Manifest next update: Wed 21 Jan 2026 04:39:40 +0000 Files and hashes: 1: 3230332e3230352e3135352e302f32342d3234203d3e20313332323033.roa (hash: x6F31DYBvz5A5hQozeg0Spg5N0VoLFM0D7Uq4YpU5sU=) 2: 3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa (hash: OfnF9Xhfcn05Z9Vv2YxArhdpQfnFDoeeAVwy6VGNRqY=) 3: 3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa (hash: Nclm7ktkTy+McaXaSR6ks6HcCvvsvvhBJnKPOTQah54=) 4: 3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa (hash: bMdixgOplBdURY+Qu1EbPIFeV69TxZq/l4CfYtJ13zQ=) 5: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: pkp52iz1CYPbOLPZKtjOJ8bibGUu16iC+991ixUa5eI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8f:ac:03:e9:24:ad:e8:5b:73:dd:ef:bc:1a:ab:b0:11:ac:fc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Jan 20 02:17:40 2026 GMT Not After : Jan 21 04:39:40 2026 GMT Subject: CN=EE9D507FC3C300A9FFA89F8BB4F4DEE1E611C170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:a2:a8:ce:69:97:ba:ff:57:67:12:3a:78: 5a:df:e4:c2:64:71:ed:8b:fc:bd:18:c3:e7:19:9e: 77:ec:a6:36:84:7f:c8:1e:c8:cb:6e:a6:91:0b:4b: 6a:53:0d:8b:1f:dc:11:c0:96:be:d6:29:b9:53:6f: 3b:1d:71:d2:8c:08:b0:05:32:c3:41:fc:62:95:6e: b4:ad:0c:83:17:7d:92:4e:82:3c:18:94:c1:ca:9d: 65:37:cc:45:d5:81:cd:d0:75:38:cb:9c:78:ca:18: 87:c3:9e:cd:a9:89:44:e2:d7:e7:65:5c:e9:91:21: 76:fa:82:a5:7d:b2:2f:46:a4:21:14:d2:ca:3b:a4: 6b:8a:8a:5b:1e:11:a2:45:93:38:02:c1:fc:fa:e4: 50:b1:7c:b1:ba:0e:09:cc:08:ee:96:3e:8b:04:47: a4:10:34:b9:d0:a7:0d:58:7b:99:cd:d3:5e:63:c2: 88:05:13:50:97:12:72:c5:e8:36:8b:a1:5c:2e:13: a9:a7:bd:8a:61:7b:b4:10:74:6d:9f:15:37:36:2e: a1:cb:e9:ee:d4:46:3e:24:bf:b7:76:b2:b6:e9:9e: 8f:e5:fa:4e:00:e2:ba:a9:66:e8:d5:22:b6:99:83: 3b:bc:d8:42:ae:75:6c:9a:2b:b2:fb:0c:dc:54:2a: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:50:7F:C3:C3:00:A9:FF:A8:9F:8B:B4:F4:DE:E1:E6:11:C1:70 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8b:9a:e5:bb:19:ac:0c:85:1b:c9:62:98:5a:62:78:95:89: f2:38:e0:83:13:69:59:26:87:40:a4:83:06:30:0c:f1:33:a6: dd:f3:ec:96:4f:1b:6b:5f:6e:e0:d6:06:64:31:14:1f:cd:aa: d9:97:aa:5e:a5:95:74:8e:7f:77:16:f5:54:47:3b:f1:2e:a7: 44:aa:d0:c8:79:c9:7b:d8:11:64:b2:1c:47:da:b7:3a:72:47: f4:85:74:1d:0f:63:84:ce:14:74:c8:92:be:b7:88:ed:73:24: 97:17:f6:4f:83:be:48:ca:a5:4e:9d:8b:1c:05:e5:2a:5c:33: 1f:5f:c3:32:7b:77:b3:7a:d8:2b:a5:a2:30:18:96:15:d9:73: 1c:03:54:cd:9f:c8:f7:0a:15:92:1e:07:fd:e0:d2:dc:d1:d2: 9f:3a:38:3b:f1:d9:e7:31:5d:3e:f2:f8:ba:c8:62:fd:71:e2: 1a:e2:b4:be:d1:42:00:82:e3:22:e9:fa:11:d9:a6:0b:08:40: 9f:5a:71:16:ce:fe:cf:b1:10:3d:1e:9a:99:fa:7d:76:9b:a6: ac:d8:dd:40:ba:0e:52:4f:e8:4d:51:b2:4c:a0:9c:b4:b7:bd: e6:8c:17:e9:d9:b4:0a:90:00:4b:d2:47:60:cc:8e:6b:f5:90: 44:c0:75:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ4+sA+kkrehbc93vvBqrsBGs/GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjAxMjAwMjE3NDBaFw0yNjAxMjEwNDM5NDBaMDMxMTAvBgNV BAMTKEVFOUQ1MDdGQzNDMzAwQTlGRkE4OUY4QkI0RjRERUUxRTYxMUMxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqaKozmmXuv9XZxI6eFrf5MJk ce2L/L0Yw+cZnnfspjaEf8geyMtuppELS2pTDYsf3BHAlr7WKblTbzsdcdKMCLAF MsNB/GKVbrStDIMXfZJOgjwYlMHKnWU3zEXVgc3QdTjLnHjKGIfDns2piUTi1+dl XOmRIXb6gqV9si9GpCEU0so7pGuKilseEaJFkzgCwfz65FCxfLG6DgnMCO6WPosE R6QQNLnQpw1Ye5nN015jwogFE1CXEnLF6DaLoVwuE6mnvYphe7QQdG2fFTc2LqHL 6e7URj4kv7d2srbpno/l+k4A4rqpZujVIraZgzu82EKudWyaK7L7DNxUKo9TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7p1Qf8PDAKn/qJ+LtPTe4eYRwXAwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYua5bsZrAyF G8limFpieJWJ8jjggxNpWSaHQKSDBjAM8TOm3fPslk8ba19u4NYGZDEUH82q2Zeq XqWVdI5/dxb1VEc78S6nRKrQyHnJe9gRZLIcR9q3OnJH9IV0HQ9jhM4UdMiSvreI 7XMklxf2T4O+SMqlTp2LHAXlKlwzH1/DMnt3s3rYK6WiMBiWFdlzHANUzZ/I9woV kh4H/eDS3NHSnzo4O/HZ5zFdPvL4ushi/XHiGuK0vtFCAILjIun6EdmmCwhAn1px Fs7+z7EQPR6amfp9dpumrNjdQLoOUk/oTVGyTKCctLe95owX6dm0CpAAS9JHYMyO a/WQRMB13A== -----END CERTIFICATE-----Generated at Tue Jan 20 16:22:31 2026 by rpki-client