This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft File: A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json) Hash identifier: 2tTq/osY/n7uCErvGRtrkc6FWVc+3uVDCmFPAiPcqpM= Subject key identifier: 86:86:17:0A:E6:B1:09:60:73:E4:52:F8:01:E1:1F:02:0F:D3:2D:51 Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370 Certificate serial: 1E9C8B6ECAA40F6A29E3697BAC028043FF473D78 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft Manifest number: 0A Signing time: Mon 26 Jan 2026 04:41:02 +0000 Manifest this update: Mon 26 Jan 2026 04:36:02 +0000 Manifest next update: Tue 27 Jan 2026 06:36:02 +0000 Files and hashes: 1: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: qiq5Pkg0BWpQbTOzii/K+iQ6lopJGhGYvQk5mcYIS5Q=) 2: 3132342e31342e312e302f32342d3234203d3e2034383132.roa (hash: XFRJp6zS1ERcSGN1XE2RvWKAzZUpGDHg4WQCg4nt+Og=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9c:8b:6e:ca:a4:0f:6a:29:e3:69:7b:ac:02:80:43:ff:47:3d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370 Validity Not Before: Jan 26 04:36:02 2026 GMT Not After : Jan 27 06:36:02 2026 GMT Subject: CN=8686170AE6B1096073E452F801E11F020FD32D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:2c:ec:40:0c:cb:46:1e:f1:46:63:7e:f5: 6e:7b:64:c9:89:bc:d3:4d:2e:b0:27:fb:76:af:46: 22:a4:d2:29:cf:a1:5b:04:4c:a1:84:96:d7:ba:28: 51:38:ec:3b:b6:aa:04:53:d3:ff:a9:06:e9:c1:82: 8f:12:dd:2a:f4:14:8a:be:5b:ad:f1:b3:72:ed:22: eb:77:27:f7:3d:e9:32:d3:34:e3:48:09:f8:6b:49: 3d:a2:ea:9d:9c:8f:a7:86:fd:96:ec:3e:ce:4c:d1: 2d:4f:e2:89:6a:5b:13:b5:74:7f:b5:9c:46:64:18: ce:cf:ef:3a:b3:58:2e:82:8f:fa:c4:dd:c1:10:00: d9:df:1c:52:cf:1f:0f:9e:1b:5a:b3:4d:56:3a:46: ee:a9:27:ea:5c:57:dc:cc:2f:4c:33:a7:54:ce:ad: 57:ad:98:90:e7:97:fb:6a:6a:27:60:f6:33:bf:64: 18:a6:63:c2:ce:86:01:7b:0a:8b:42:6f:11:02:3e: 01:38:29:e6:ee:12:a8:44:d3:e0:44:39:e9:c4:b0: 79:48:c3:b3:55:5c:33:8e:2a:ee:20:e0:21:c8:0f: c0:0c:57:9c:f2:55:90:f9:55:11:08:99:20:39:d8: 05:08:e1:14:71:b1:4d:1a:8e:dc:45:92:17:24:40: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:17:0A:E6:B1:09:60:73:E4:52:F8:01:E1:1F:02:0F:D3:2D:51 X509v3 Authority Key Identifier: keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:3b:6c:87:95:25:b3:b7:aa:f1:be:bd:37:6f:a8:88:5b: f9:d4:d6:b1:11:ba:64:64:b4:58:1e:61:f6:51:cb:3c:f2:aa: 58:b2:cf:a3:5b:91:c1:a9:a7:90:3d:c6:5c:17:88:e0:b7:ce: ea:b9:b4:2e:fc:7f:4a:29:3e:2a:a9:07:4b:ec:42:bf:ef:24: 36:27:41:fa:ea:d4:50:97:0c:52:74:b4:7e:42:85:e4:71:af: 12:ae:43:02:da:a8:23:fa:98:11:79:29:89:8e:ac:23:43:f6: 06:21:65:08:1f:51:dd:4b:ad:4a:d5:36:bd:e3:8b:e1:2a:ae: e2:ef:47:77:c3:99:2d:3f:8b:b0:e1:74:32:73:a0:1d:5a:20: 5a:fa:59:b5:82:41:f9:50:cb:10:96:68:42:41:ba:e2:ed:ae: da:40:fb:96:cc:ba:48:d2:07:28:ec:64:4a:41:a9:d3:38:81: 2a:00:29:fd:03:fa:e5:3b:41:5a:d9:be:b9:78:b9:d3:91:3f: 08:5d:51:8e:05:b6:1f:86:e5:7c:40:22:dd:9e:ee:d1:92:e7: 18:03:f7:a4:6c:97:6e:bc:56:06:0a:6c:c4:ff:21:5a:53:d8: 04:25:3a:4f:cf:af:c2:ec:9d:48:6c:45:64:dd:c3:1f:59:02: 4c:dc:44:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHpyLbsqkD2op42l7rAKAQ/9HPXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF RjY0NzM3MDAeFw0yNjAxMjYwNDM2MDJaFw0yNjAxMjcwNjM2MDJaMDMxMTAvBgNV BAMTKDg2ODYxNzBBRTZCMTA5NjA3M0U0NTJGODAxRTExRjAyMEZEMzJENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVCzsQAzLRh7xRmN+9W57ZMmJ vNNNLrAn+3avRiKk0inPoVsETKGElte6KFE47Du2qgRT0/+pBunBgo8S3Sr0FIq+ W63xs3LtIut3J/c96TLTNONICfhrST2i6p2cj6eG/ZbsPs5M0S1P4olqWxO1dH+1 nEZkGM7P7zqzWC6Cj/rE3cEQANnfHFLPHw+eG1qzTVY6Ru6pJ+pcV9zML0wzp1TO rVetmJDnl/tqaidg9jO/ZBimY8LOhgF7CotCbxECPgE4KebuEqhE0+BEOenEsHlI w7NVXDOOKu4g4CHID8AMV5zyVZD5VREImSA52AUI4RRxsU0ajtxFkhckQN7vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhoYXCuaxCWBz5FL4AeEfAg/TLVEwHwYDVR0j BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5 N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY5MzAxNzcvMC9BMTYyNjg5RjI4MTYx RDRENEMzREYzMzlEOTUwOTdENUVGNjQ3MzcwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIE7bIeVJbO3 qvG+vTdvqIhb+dTWsRG6ZGS0WB5h9lHLPPKqWLLPo1uRwamnkD3GXBeI4LfO6rm0 Lvx/Sik+KqkHS+xCv+8kNidB+urUUJcMUnS0fkKF5HGvEq5DAtqoI/qYEXkpiY6s I0P2BiFlCB9R3UutStU2veOL4Squ4u9Hd8OZLT+LsOF0MnOgHVogWvpZtYJB+VDL EJZoQkG64u2u2kD7lsy6SNIHKOxkSkGp0ziBKgAp/QP65TtBWtm+uXi505E/CF1R jgW2H4blfEAi3Z7u0ZLnGAP3pGyXbrxWBgpsxP8hWlPYBCU6T8+vwuydSGxFZN3D H1kCTNxEzw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:24 2026 by rpki-client