This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
File: JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json)
Hash identifier: ZCR0vQgTkrTuCzJlxHEWKduf8CC9zaV3ceNPHA6jbZc=
Subject key identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1959
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
Manifest number: 1903
Signing time: Tue 10 Feb 2026 02:57:30 +0000
Manifest this update: Tue 10 Feb 2026 02:57:30 +0000
Manifest next update: Tue 10 Feb 2026 08:57:30 +0000
Files and hashes: 1: -_Po0agHkbGS0Ttm0WTWcg6zpNU.roa (hash: cHHjiakk8jCkGL3XpKV91MHxeMtMGSDpHsPjGi4cEd8=)
2: 4Juy5ozvGMAEdMuewe0ZYAaF3-Q.roa (hash: 6O+UHQ1w/r9hPNtKHCNIWWQQwAn1B2EigSJynFXs6YQ=)
3: 6BhNlgTm9X4E0CrmB-SUzwDMBc0.roa (hash: pUTYJzrZ9U4tckOSXY6ObYZJbv73GHhdMjtwkWQLOhc=)
4: 6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa (hash: 9SnwaZ1aA/kOcSBtXH6cQmmrvzUJK8pB6FbTGh869ws=)
5: 7MjeRxso_6bAJOkxiUYCSUa4YdE.roa (hash: OCx3gGJ6xcnNittno1F5h3dT/exobGNhz5jrgb3ZamE=)
6: 9E3FonMXg9KBL_OcEB9IEsbwfTI.roa (hash: rRQ8OKtrb3AY2lugGmCm9EYNoq4nFUJiPTyrov47hQs=)
7: 9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa (hash: d7L3XIHDR4TUXtb6XUZbNFGDJkyjahNy6E7vA1H4a6Y=)
8: BseVa9QjAVj15Cj_AaDcISs_-vs.roa (hash: 4cYl4Tj+p6e2dMFKS1RLmXgZKSFhDy4zmuGeQd2e+S8=)
9: Dwcqly8RyrVEa_gosiuv___r9NA.roa (hash: wtLF+FBAtHIJtaAQauIyGM0fIeF2w5y67A81MXAU0WA=)
10: EA8sm7PzBaXuOYCraL71UF0R5XU.roa (hash: vjzXDi6KFY88S9l7oJU5rOi44DWy5kPljwK3csb8lAI=)
11: FV0nJsZlMoWTcuMUUB6noniSEws.roa (hash: j7kfL6MF7dFVUsVo8kD05Q/VmolHGYaYnSG8XD2U8n8=)
12: HUw23TFXmjpD_e2Klj8O1aJOuLI.roa (hash: LVhArJyw5UUv/lJaYkde8UdSAWT1VmmRAoWb0c+KHGM=)
13: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: zfYybKN8zvYF9Oh1As/LYARrg1Jq38bPbwUWVLryFzA=)
14: JH59vsuM7iVdRg5FXev-wuRuSL0.roa (hash: jeX+I+V1mk5JmsgCoNjkTJdev2zvTaXiYrNcYR6tSDM=)
15: L0DArEu6Zoxb0sv6Kbmis8sbEjo.roa (hash: WLz+60/EzZEZ12xMZR0wqDMyOg5i/cQ2LbVaQKrQVq8=)
16: M7Yoo7vS0g74dllE5jwaeJ8GkI8.roa (hash: 0dPkxQQKUEzWy8So4dP//PRsJgFZGxnW9RSLGUN8yLE=)
17: NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa (hash: e+m4e4I9crI0rPD+IWKnxpMY/JydOXyK2JvvXwOuvN8=)
18: XpgCFDOq2Q9LyDlqBE5KH2xQpHw.roa (hash: HgLWNCoewgztXDMInYU1fjL5uUjEdzctKTT+Bg59jgo=)
19: cXiSf5yZyj3VPYYCKSaNq56a2rg.roa (hash: Rt6GnFaeomDApDENIxrkjqoB1bSFUS0qhjpljRCPndU=)
20: cem23VMayzPVk_oygGN95UFNjHU.roa (hash: RvRmb3ElbI6rsB4sSekzArDgJBSB1WqpLErPkGqAqDI=)
21: ctezbMQLxP8Ykqi0UusJ9kXRp0k.roa (hash: qmGjFwU1FD4xG4EaFpCqvHDShMmhH7y5AEXm712oYWo=)
22: f_86r3mhQo4FIwhvOxaFBP8lRCM.roa (hash: dIhiVvOoXJKFM98+UYutMzUt/A8Mf0xha9hSgGrHSnQ=)
23: iuW7OASYxTbyLYOF3CjyalJ_5oM.roa (hash: k9Or3BQMtCIUl4N8wxLUc62+5EDuHRziekJOqB1/coI=)
24: nKW77ckOSIGBxDVlc7xBbBZlD0w.roa (hash: H0bt71VNrzv56exhct90bWnGEH+llK9egnoft/rELjQ=)
25: oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa (hash: bDn12Zd/NbB2xKis/YT4LYypbfU7J4IDkQPIsGdXDeQ=)
26: rJv1VpGcC9FmgBSEr64eZDnhdk8.roa (hash: 6qOf3hWNSwToKHl+JO167sZmQMkRTLxhHpc7sAkpGoM=)
27: zXwbjbUVcIuVuYfJVeJLi_WhVSc.roa (hash: 70rweTSg6yEMOACB21IW3jvSfvtQwhiUyA/SCVlY8cE=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 08:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Feb 10 02:57:30 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8:
55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74:
de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01:
7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd:
53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8:
72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a:
64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75:
22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f:
41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec:
ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72:
e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df:
98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7:
d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9:
2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff:
0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea:
71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56:
56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:3d:c6:a0:32:92:99:d3:ad:c9:ea:c2:11:bf:70:8d:d0:99:
35:70:77:88:87:93:c3:e5:55:44:0b:6e:a0:d0:71:ff:01:51:
2c:4f:9c:91:06:21:92:f9:bd:75:91:53:81:86:a1:ed:a5:15:
55:3b:82:ab:28:65:b6:d4:7b:e3:fd:1d:fc:63:9d:d1:01:17:
9e:fa:e2:89:65:3b:d0:fc:a7:26:95:30:5f:86:21:81:a8:19:
39:8c:97:58:ae:2f:cf:05:40:62:53:2a:9c:ea:44:21:74:70:
c0:fc:05:1e:41:84:e0:a6:ab:f0:a7:79:04:61:7b:bb:6b:04:
55:9a:87:5c:26:df:17:f4:ac:51:41:56:b0:a6:4c:1d:27:62:
63:23:6d:e1:bf:4a:ea:af:7a:85:e8:6f:a2:96:88:76:5b:f0:
bd:3d:0b:b8:75:c2:bb:08:bd:f1:be:c4:6e:34:fe:27:2d:23:
43:8c:75:e1:f6:4c:68:fb:c8:9c:53:72:1b:1a:7c:4f:37:79:
81:f6:85:20:1d:05:28:65:a3:dd:be:b1:7a:b7:03:4b:e9:3c:
95:b5:17:1a:10:d1:7c:29:3a:30:ba:df:b5:00:12:c7:18:e7:
ea:bc:87:98:58:95:31:20:c6:0a:68:a8:68:f5:33:1b:50:a5:
5c:d7:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:20 2026 by rpki-client