This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json) Hash identifier: tG1IB6ZQZt5Jl8btBespGgGjBJjD8dPQFbw4GsCcx98= Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Certificate serial: 032F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft Manifest number: 032D Signing time: Mon 19 Jan 2026 10:27:15 +0000 Manifest this update: Mon 19 Jan 2026 10:27:15 +0000 Manifest next update: Mon 19 Jan 2026 16:27:15 +0000 Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=) 2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=) 3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: aj1MciSmqVXMIRwVzc0syY3h3Rc/aqeG4/S9pS/NbAU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Validity Not Before: Jan 19 10:27:15 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f: f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a: b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d: ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d: 40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8: b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c: d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32: da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed: 5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5: b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53: b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af: 43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac: 5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5: 61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73: 22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6: bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99: 4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D X509v3 Authority Key Identifier: keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ce:bd:a1:19:b2:47:b5:e3:7a:92:db:50:cd:22:f9:be:77: ae:5f:9c:d6:6f:50:6f:96:ff:43:dc:db:4d:0a:ac:77:81:c7: 48:13:32:53:df:59:77:9f:19:81:46:96:65:d2:00:88:11:76: a0:97:41:a0:64:7f:82:a3:86:7b:55:8b:db:24:83:cc:37:6f: 35:a6:5c:52:8f:55:af:25:e1:9d:3a:ba:7b:4a:6f:83:76:02: f6:2a:2a:ab:27:da:82:06:75:ac:7c:f8:9e:19:43:17:bd:aa: 3b:a8:7d:08:c2:a8:9a:e8:fa:e1:7b:80:91:78:1a:5c:b6:6e: 07:30:00:d6:19:4e:7e:e6:7e:9c:26:e7:de:ef:90:e5:56:d2: 21:31:ed:7f:e7:ad:b6:44:46:b2:20:51:ab:8c:6e:8d:05:b8: 29:75:48:f3:b0:da:dd:53:7e:24:85:5f:9b:72:9f:ae:e6:7a: e8:58:5a:fc:12:d1:87:f9:e9:fa:19:a5:81:48:4f:0b:5d:25: 5d:a3:98:ef:34:3e:f8:30:8d:4f:6d:c0:72:42:6a:5b:5c:4e: 5b:80:d2:f3:7e:b3:d9:65:05:1d:d0:b8:61:d2:1e:06:39:66: ab:c2:36:3e:50:91:5e:f8:2d:34:6f:a6:2a:43:9c:00:e0:b6: 54:2d:88:d2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTFB MEFCQzVDQTZGNTA4RjE5Rjc5MDdFOTRDMzE2MjE1MjI5NjkzNDAeFw0yNjAxMTkx MDI3MTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzREZBRDVERDEzODQ3 NDJGNDBBRkI4NTU3RDI2Rjk0NDQxQjIxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCty7pGqyYsbgVf5gjKX/EKaplL21KhWHm3+CVaKrKE+O9emm0S 84+YnQjsbeyukuHGM/ruwAVdK9MxbUD5IW3iaiXbeGeiSrf62LE6SBUD29VoHxIX ARoEDNguzPwL7TtEihE18FlhMtrseFlCOQWjptwzj4/K7V14VHAsqF7Z7+IlX7GW xbZC+24qQ4EIjpeXi7uvU7XGUuIfj6Ql28cdYboZr0MnoGSDnhaTq+/ifXWHrF6t sWz9pdwIkc8J3RbXtWHpSznakIi049nxRCE0cyLatvCvZz4OhEkYeGEb1rx8ke9P EQaYgLQHM0BemU+QEFjV8VcoAXbimmdVupSdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI9+tXdE4R0L0CvuFV9JvlEQbIX0wHwYDVR0jBBgwFoAUoaCrxcpvUI8Z95B+ lMMWIVIpaTQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODcvb2FDcnhjcHZVSTha OTVCLWxNTVdJVklwYVRRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACTOvaEZske143qS21DNIvm+d65fnNZvUG+W/0Pc200KrHeBx0gTMlPfWXef GYFGlmXSAIgRdqCXQaBkf4KjhntVi9skg8w3bzWmXFKPVa8l4Z06untKb4N2AvYq Kqsn2oIGdax8+J4ZQxe9qjuofQjCqJro+uF7gJF4Gly2bgcwANYZTn7mfpwm597v kOVW0iEx7X/nrbZERrIgUauMbo0FuCl1SPOw2t1TfiSFX5tyn67meuhYWvwS0Yf5 6foZpYFITwtdJV2jmO80PvgwjU9twHJCaltcTluA0vN+s9llBR3QuGHSHgY5ZqvC Nj5QkV74LTRvpipDnADgtlQtiNI= -----END CERTIFICATE-----Generated at Mon Jan 19 13:56:22 2026 by rpki-client