This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: wD47CT27DVIzxdA7g6o3o1yiqFpRLiB7xdfnaQtGAq8=
Subject key identifier: D2:29:A1:C9:F5:74:C0:09:DE:E4:BE:58:F1:EE:09:B0:45:C5:BE:F0
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 7BFF2234097AC28B022F4699B60F591BDBB653A1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 0A
Signing time: Sun 25 Jan 2026 21:31:02 +0000
Manifest this update: Sun 25 Jan 2026 21:26:02 +0000
Manifest next update: Mon 26 Jan 2026 23:46:02 +0000
Files and hashes: 1: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=)
2: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=)
3: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=)
4: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=)
5: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: GLR0AvN31FlFmS6DaeXWBTqn3HEpm6e0WWIH4tZJTtA=)
6: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=)
7: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=)
8: 32372e302e3230372e302f32342d3234203d3e203633363739.roa (hash: FRkm9JB/rrai+gOwgOa3Nip6NXE5SBOt5jTPPdgIVnk=)
9: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=)
10: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 23:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ff:22:34:09:7a:c2:8b:02:2f:46:99:b6:0f:59:1b:db:b6:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jan 25 21:26:02 2026 GMT
Not After : Jan 26 23:46:02 2026 GMT
Subject: CN=D229A1C9F574C009DEE4BE58F1EE09B045C5BEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:06:f2:23:8a:60:46:66:a5:d9:3c:31:4a:
c2:f4:c8:1c:a4:a0:8c:0d:f2:5f:a4:4e:40:31:95:
56:dc:40:99:e2:80:a7:ea:24:39:da:54:05:2a:09:
9c:fe:a5:bc:b0:75:84:a1:3d:10:68:d0:9e:c6:82:
ad:98:69:6e:9e:b6:1a:3f:74:d8:d9:84:08:f7:4e:
a5:e8:f5:54:b7:4b:bf:27:91:98:ce:88:6e:43:f8:
5f:ad:32:82:6b:80:c7:25:78:5c:3a:1c:c7:67:51:
b1:6e:80:ad:f1:96:de:1d:34:23:e3:b8:98:29:49:
fd:c8:dc:e6:ce:48:10:8e:df:5a:88:c5:68:b2:53:
2e:a3:0f:f8:11:a4:0c:a4:ba:7e:1e:af:fd:7f:0d:
e3:42:7c:b7:06:32:29:35:4e:32:5a:c7:3d:d6:53:
e3:14:d2:e7:77:ea:30:b7:16:a5:3b:36:fe:37:3a:
d1:8f:9d:01:52:d9:6f:2c:60:1f:cf:f3:76:d7:e7:
ee:5b:a2:e4:ed:b6:cd:77:ef:90:fd:bc:94:b8:c9:
c3:e9:00:31:f8:07:25:3a:0b:9a:d9:65:0a:2c:51:
88:fd:41:35:fd:4f:d3:c8:6f:a7:8a:a3:6a:3e:0d:
ef:2c:c1:40:5f:f6:29:70:fd:aa:55:15:de:a2:0a:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:A1:C9:F5:74:C0:09:DE:E4:BE:58:F1:EE:09:B0:45:C5:BE:F0
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b2:cf:90:98:64:34:29:cd:4a:96:8d:a0:b8:97:e4:bc:f3:
97:3d:91:5f:11:da:34:ae:6e:8d:e3:4d:27:30:7e:be:71:21:
4f:4d:78:91:64:49:6a:43:45:31:43:3c:fe:af:6f:70:2f:75:
3d:63:7f:8f:6d:dc:bd:ba:86:4f:dc:f0:89:97:3c:02:4f:04:
5a:6b:54:a9:00:11:74:54:f4:22:65:0e:e6:38:70:59:65:a7:
68:90:b6:a9:9d:26:95:45:13:e9:24:f6:a2:56:c1:1e:a5:3a:
75:1b:ce:a7:81:a6:47:9e:14:53:27:8d:98:f0:fa:20:97:7a:
8c:fd:b7:7a:df:39:12:a1:29:3b:24:62:78:59:50:2b:6e:6a:
4a:60:4b:94:1f:b1:f6:28:f3:87:b2:74:b4:73:07:0b:ae:ed:
15:82:fd:70:73:ae:58:23:70:9e:f9:f0:86:60:52:0f:46:e3:
a5:d2:79:a8:89:68:63:8c:18:0a:3c:6e:9a:ee:00:a7:3d:ca:
4d:d3:bc:59:33:fa:e4:52:b6:c8:52:77:1f:6c:1c:1a:66:52:
f0:a3:4d:76:31:d7:09:b6:ec:4f:e8:d3:3a:9c:ac:ae:3f:58:
99:f0:7c:70:5f:9f:fb:1f:67:6a:1b:86:d5:2f:24:6f:57:0a:
cf:54:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:24:28 2026 by rpki-client